WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wpcargo
Published
2022-02-21
Title
WPCargo < 6.9.0 - Unauthenticated RCE
Slug
wpcargo
Published
2022-04-25
Title
WPCargo Track & Trace < 6.9.5 - Reflected Cross Site Scripting
Slug
wpcargo
Published
2022-04-25
Title
WPCargo Track & Trace < 6.9.5 - Admin+ Stored Cross Site Scripting
Slug
wpcargo
Published
2024-09-16
Title
WPCargo Track & Trace <= 8.0.2 - Unauthenticated SQL Injection
Slug
wpcargo
Published
2024-12-11
Title
WPCargo Track & Trace <= 8.0.2 - Subscriber+ Settings Update
Slug
wpcargo
Published
2025-03-31
Title
WPCargo Track & Trace <= 8.0.2 - Contributor+ Insecure Direct Object Reference
Slug
wpcas
Published
2026-01-20
Title
wpCAS <= 1.07 - Reflected Cross-Site Scripting
Slug
wpcasa
Published
2024-12-02
Title
WPCasa < 1.3.0 - Insecure Direct Object Reference
Slug
wpcasa
Published
2025-04-16
Title
WPCasa < 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpcasa
Published
2025-09-22
Title
WPCasa < 1.4.2 - Unauthenticated Code Injection
Slug
wpcasa
Published
2025-10-16
Title
WPCasa < 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpcasa-mail-alert
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wpcb
Published
2014-08-01
Title
wpcb 2.4.8 - facture.php id Parameter Reflected XSS
Slug
wpcf7-redirect
Published
2021-04-20
Title
Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Plugin Installation
Slug
wpcf7-redirect
Published
2021-04-20
Title
Redirection for Contact Form 7 < 2.3.4 - Unprotected AJAX Actions
Slug
wpcf7-redirect
Published
2021-04-20
Title
Redirection for Contact Form 7 < 2.3.4 - Unauthenticated Arbitrary Nonce Generation
Slug
wpcf7-redirect
Published
2021-04-20
Title
Redirection for Contact Form 7 < 2.3.4 - Authenticated PHP Object Injection
Slug
wpcf7-redirect
Published
2021-04-20
Title
Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Post Deletion
Slug
wpcf7-redirect
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wpcf7-redirect
Published
2022-03-07
Title
Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site Scripting
Slug
wpcf7-redirect
Published
2022-09-29
Title
Redirection for Contact Form 7 < 2.6.0 - Unauthenticated Options Update to Stored XSS
Slug
wpcf7-redirect
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wpcf7-redirect
Published
2023-10-03
Title
Redirection for Contact Form 7 < 3.0.0 - Missing Authorization
Slug
wpcf7-redirect
Published
2025-08-19
Title
Redirection for Contact Form 7 < 3.2.5 - Unauthenticated PHP Object Injection
Slug
wpcf7-redirect
Published
2025-08-19
Title
Redirection for Contact Form 7 < 3.2.5 - Unauthenticated Arbitrary File Deletion