WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
writer-helper
Published
2024-11-13
Title
Writer Helper <= 3.1.6 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
writersblok-ai
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
writesonic
Published
2025-06-27
Title
Writesonic <= 1.0.4 - Cross-Site Request Forgery
Slug
ws-audio-player
Published
2025-04-09
Title
WS Audio Player <= 1.1.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ws-bootstrap-vc
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ws-contact-form
Published
2024-07-05
Title
WS Contact Form < 1.3.8 - Admin+ Stored XSS
Slug
ws-facebook-likebox
Published
2023-09-14
Title
WS Facebook Like Box Widget for WordPress <= 5.0 - Contributor+ Stored XSS
Slug
ws-force-login-page
Published
2025-04-24
Title
WS Force Login Page < 3.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ws-form
Published
2022-01-31
Title
WS Form < 1.8.176 - Admin+ Stored Cross-Site Scripting
Slug
ws-form
Published
2022-01-31
Title
WS Form < 1.8.176 - Unauthenticated Stored Cross-Site Scripting
Slug
ws-form
Published
2023-12-28
Title
WS Form LITE < 1.9.171 - Authenticated(Administrator+) SQL Injection
Slug
ws-form
Published
2024-06-06
Title
WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection
Slug
ws-form
Published
2024-09-25
Title
WS Form LITE < 1.9.244 - Unauthenticated Stored Cross-Site Scripting
Slug
ws-form
Published
2024-11-05
Title
WS Form LITE – Drag & Drop Contact Form Builder for WordPress < 1.9.245 - Reflected Cross-Site Scripting via URL
Slug
ws-form
Published
2025-01-27
Title
WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting
Slug
ws-form
Published
2025-04-24
Title
WS Form LITE – Drag & Drop Contact Form Builder for WordPress < 1.10.36 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Slug
ws-form-pro
Published
2022-01-31
Title
WS Form < 1.8.176 - Unauthenticated Stored Cross-Site Scripting
Slug
ws-form-pro
Published
2022-01-31
Title
WS Form < 1.8.176 - Admin+ Stored Cross-Site Scripting
Slug
ws-form-pro
Published
2024-06-06
Title
WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection
Slug
ws-theme-addons
Published
2025-08-22
Title
WS Theme Addons <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ws_weather Shortcode
Slug
wsanalytics-google-analytics-and-dashboards
Published
2025-10-08
Title
WSAnalytics <= 1.1.2 - Reflected Cross-Site Scripting
Slug
wsb-brands
Published
2023-03-15
Title
WSB Brands < 1.2 - Admin+ Stored XSS
Slug
wschat-live-chat
Published
2025-11-18
Title
WSChat – WordPress Live Chat < 3.1.7 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
Slug
wsecure
Published
2016-08-02
Title
wSecure Lite <= 2.3 - Remote Code Execution (RCE)
Slug
wsecure
Published
2023-09-04
Title
wSecure Lite <= 2.5 - Admin+ Stored XSS