WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
white-label-cms
Published
2022-12-08
Title
White Label CMS < 2.5 - Admin+ PHP Object Injection
Slug
white-label-cms
Published
2024-05-09
Title
White Label CMS < 2.7.4 - Missing Authorization to Plugin Settings Reset
Slug
white-label-cms
Published
2024-08-16
Title
White Label CMS < 2.7.5 - Reflected Cross-Site Scripting
Slug
white-page-publication
Published
2023-10-13
Title
WhitePage <= 1.1.5 - Arbitrary Settings Update via CSRF
Slug
whizz
Published
2016-04-13
Title
WHIZZ <= 1.0.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
whizz
Published
2017-03-22
Title
WHIZZ <= 1.1 - Cross-Site Request Forgery (CSRF)
Slug
whizzy
Published
2024-03-29
Title
Whizzy <= 1.1.18 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
whizzy
Published
2024-03-29
Title
Whizzy <= 1.1.18 - Missing Authorization
Slug
whmcs-bridge
Published
2022-01-14
Title
WHMCS Bridge < 6.3 - Subscriber+ Stored Cross-Site Scripting
Slug
whmcs-bridge
Published
2022-01-27
Title
WHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)
Slug
whmpress
Published
2024-08-12
Title
WHMpress <= 6.2-revision-5 - Reflected Cross-Site Scripting
Slug
whmpress
Published
2024-08-12
Title
WHMpress <= 6.2-revision-5 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
whmpress
Published
2025-02-27
Title
WHMpress < 6.3-revision-1-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update
Slug
whmpress
Published
2025-05-16
Title
WHMpress <= 6.2-revision-9 - Unauthenticated Local File Inclusion
Slug
whmpress
Published
2025-05-16
Title
WHMpress <= 6.2-revision-9 - Authenticated (Contributor+) Local File Inclusion
Slug
who-hit-the-page-hit-counter
Published
2023-06-16
Title
Who Hit The Page - Hit Counter <= 1.4.14.3 - Reflected XSS
Slug
who-hit-the-page-hit-counter
Published
2023-10-16
Title
Who Hit The Page – Hit Counter <= 1.4.14.3 - CSRF
Slug
who-hit-the-page-hit-counter
Published
2023-11-07
Title
Who Hit The Page – Hit Counter <= 1.4.14.3 - Authenticated (Administrator+) SQL Injection
Slug
wholesale-market
Published
2022-12-12
Title
Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File Download
Slug
wholesale-market
Published
2022-12-08
Title
Wholesale Market <= 2.2.2 - Settings Update via CSRF
Slug
wholesale-market-for-woocommerce
Published
2022-11-28
Title
Wholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File Download
Slug
wholesale-market-for-woocommerce
Published
2022-11-28
Title
Wholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File Download
Slug
wholesale-market-for-woocommerce
Published
2022-12-12
Title
Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Download
Slug
wholesale-market-for-woocommerce
Published
2022-12-08
Title
Wholesale Market <= 2.2.2 - Settings Update via CSRF
Slug
wholesale-pricing-woocommerce
Published
2024-10-03
Title
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce < 3.8.1 - Reflected Cross-Site Scripting