WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-todo
Published
2024-05-29
Title
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings
Slug
wp-todo
Published
2024-05-29
Title
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings
Slug
wp-todo
Published
2024-07-06
Title
WP To Do <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-todo
Published
2024-08-28
Title
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments
Slug
wp-tools-divi-blog-carousel
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-tools-divi-blog-carousel
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-tools-divi-product-carousel
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-tools-divi-product-carousel
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-tools-gravity-forms-divi-module
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-tools-gravity-forms-divi-module
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-tooltip
Published
2025-04-24
Title
Tooltip <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-top-news
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-top-news
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-top-news
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
wp-topbar
Published
2014-08-01
Title
WP-TopBar 4.02 - wp-topbar.php wptbbartext Parameter XSS
Slug
wp-topbar
Published
2014-08-01
Title
WP-TopBar 4.02 - TopBar Message Manipulation CSRF
Slug
wp-topbar
Published
2014-08-01
Title
wp-topbar <= 3.04 - XSS in ZeroClipboard.swf
Slug
wp-topbar
Published
2023-01-19
Title
WP TopBar <= 5.36 - Admin+ SQLi
Slug
wp-topbar
Published
2023-01-19
Title
WP TopBar <= 5.36 - CSRF
Slug
wp-total-branding
Published
2024-07-11
Title
WP Total Branding < 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via title Parameter
Slug
wp-total-hacks
Published
2022-10-10
Title
WP Total Hacks <= 4.7.2 - Subscriber+ Arbitrary Options Update to Stored XSS
Slug
wp-touch-slider
Published
2025-01-27
Title
WP Touch Slider <= 2.2 - Reflected XSS
Slug
wp-tournament-registration
Published
2025-08-05
Title
WP Tournament Registration <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via field Parameter
Slug
wp-tradingview
Published
2024-04-15
Title
WP TradingView <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-transactions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting