WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wptouch
Published
2022-12-19
Title
WPtouch < 4.3.45 - Admin+ Arbitrary File Upload
Slug
wptouch
Published
2022-12-19
Title
WPtouch < 4.3.45 - Admin+ PHP Object Injection
Slug
wptouch
Published
2025-06-05
Title
WPtouch < 4.3.61 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wpupper-share-buttons
Published
2022-11-10
Title
WPUpper Share Buttons < 3.43 - Admin+ Stored XSS
Slug
wpupper-share-buttons
Published
2024-06-03
Title
WPUpper Share Buttons < 3.50 - Missing Authorization
Slug
wpupper-share-buttons
Published
2025-02-20
Title
WPUpper Share Buttons < 3.52 - Cross-Site Request Forgery to Custom CSS Update
Slug
wpview
Published
2023-06-16
Title
wpView <= 1.3.0 - Admin+ Stored XSS
Slug
wpvivid-backup-mainwp
Published
2024-02-28
Title
WPvivid Backup for MainWP < 0.9.33 - Reflected Cross-Site Scripting
Slug
wpvivid-backup-mainwp
Published
2024-04-05
Title
WPvivid Backup for MainWP < 0.9.34 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wpvivid-backuprestore
Published
2020-03-23
Title
WPvivid Backup < 0.9.36 - Missing Authorization Leading To Database Leak
Slug
wpvivid-backuprestore
Published
2021-08-09
Title
WPvivid Backup < 0.9.56 - Reflected Cross-Site Scripting
Slug
wpvivid-backuprestore
Published
2022-01-31
Title
WPvivid Backup and Migration Plugin < 0.9.69 - Unauthenticated Stored Cross-Site Scripting
Slug
wpvivid-backuprestore
Published
2022-03-21
Title
WPvivid Backup and Migration Plugin < 0.9.70 - Reflected Cross-Site Scripting
Slug
wpvivid-backuprestore
Published
2022-04-12
Title
WPvivid Backup and Migration Plugin < 0.9.71 - Admin+ Arbitrary File Download
Slug
wpvivid-backuprestore
Published
2022-08-17
Title
WPvivid Backup < 0.9.75 - Admin+ PHAR Deserialization
Slug
wpvivid-backuprestore
Published
2022-08-22
Title
WPvivid Backup < 0.9.76 - Admin+ Arbitrary File Read
Slug
wpvivid-backuprestore
Published
2022-08-29
Title
WPvivid Backup 0.9.76 - Admin+ Arbitrary File Deletion
Slug
wpvivid-backuprestore
Published
2023-10-13
Title
Migration, Backup, Staging - WPvivid < 0.9.92 - Unauthenticated Sensitive Information Exposure
Slug
wpvivid-backuprestore
Published
2023-09-22
Title
Migration, Backup, Staging – WPvivid < 0.9.90 - Admin+ Stored XSS
Slug
wpvivid-backuprestore
Published
2023-09-22
Title
Migration, Backup, Staging – WPvivid < 0.9.90 - Admin+ Stored XSS
Slug
wpvivid-backuprestore
Published
2023-09-22
Title
Migration, Backup, Staging – WPvivid < 0.9.90 - Admin+ Arbitrary Directory Deletion via Path Traversal
Slug
wpvivid-backuprestore
Published
2023-09-12
Title
WPvivid Backup Plugin < 0.9.91 - Missing Authorization via 'start_staging' and 'get_staging_progress'
Slug
wpvivid-backuprestore
Published
2024-01-19
Title
WPvivid < 0.9.95 - Missing Authorization
Slug
wpvivid-backuprestore
Published
2024-02-28
Title
WPvivid Backup and Migration < 0.9.69 - Unauthenticated SQLi & DoS
Slug
wpvivid-backuprestore
Published
2024-04-11
Title
WPvivid Backup & Migration Plugin < 0.9.100 - Admin+ PHAR Deserialization