WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wsify-widget
Published
2024-10-14
Title
Wsify Widget <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wsm-downloader
Published
2022-07-12
Title
WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download
Slug
wsm-downloader
Published
2022-07-12
Title
WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass
Slug
wt-display-breeze
Published
2025-04-24
Title
Breeze Display < 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via cal_size Parameter
Slug
wt-smart-coupons-for-woocommerce
Published
2025-10-30
Title
Smart Coupons for WooCommerce < 2.2.4 - Missing Authorization
Slug
wt-woocommerce-wishlist
Published
2025-01-24
Title
Wishlist for WooCommerce < 2.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wte-elementor-widgets
Published
2024-12-24
Title
WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor < 1.3.8 - Authenticated (Contributor+) Local File Inclusion
Slug
wte-elementor-widgets
Published
2025-09-22
Title
WP Travel Engine < 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wti-like-post
Published
2015-07-05
Title
WTI Like Post < 1.4.3 - Unauthenticated Blind SQL Injection
Slug
wti-like-post
Published
2020-05-02
Title
WTI Like Post < 1.4.6 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wti-like-post
Published
2024-04-29
Title
WTI Like Post <= 1.4.6 - IP Spoofing
Slug
wtyczka-seopilot-dla-wp
Published
2024-12-19
Title
Wtyczka SeoPilot dla WP <= 3.3.091 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wu-rating
Published
2014-09-22
Title
Wu-Rating 1.0 - wu-ratepost.php v Parameter Reflected XSS
Slug
wufoo-shortcode
Published
2023-01-31
Title
Wufoo Shortcode < 1.52 - Contributor+ Stored XSS via Shortcode
Slug
wumii-related-posts
Published
2025-02-24
Title
无觅相关文章插件 <= 1.0.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wupo-group-attributes
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wupo-group-attributes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wux-blog-editor
Published
2024-10-25
Title
Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload
Slug
wux-blog-editor
Published
2024-10-25
Title
Wux Blog Editor <= 3.0.0 - Authentication Bypass to Administrator
Slug
wwc-amz-aff
Published
2015-04-25
Title
WooCommerce Amazon Affiliates - Arbitrary File Upload
Slug
wwm-social-share-on-image-hover
Published
2023-10-02
Title
WWM Social Share On Image Hover <= 2.2 - Admin+ Stored XSS
Slug
www-xml-sitemap-generator-org
Published
2022-05-02
Title
Google XML Sitemap Generator < 2.0.4 - Reflected Cross-Site Scripting
Slug
wxsync
Published
2023-09-04
Title
WxSync < 2.8.1 - Contributor+ Stored XSS
Slug
wysija-newsletters
Published
2014-08-01
Title
MailPoet Newsletters 2.6.6 - Theme File Upload H&ling Remote Code Execution
Slug
wysija-newsletters
Published
2014-08-01
Title
Wysija Newsletters 2.2 - SQL Injection