WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wprecovery
Published
2025-10-02
Title
WPRecovery <= 2.0 - Unauthenticated SQL Injection to Arbitrary File Deletion
Slug
wpremote
Published
2021-11-29
Title
WP Remote < 4.65 - Reflected Cross-Site Scripting
Slug
wprequal
Published
2025-02-17
Title
Mortgage Lead Capture System < 8.3.1 - Cross-Site Request Forgery to Settings Reset
Slug
wpresidence-core
Published
2026-01-17
Title
Wpresidence Core <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wps-bidouille
Published
2019-07-23
Title
WPS Bidouille < 1.12.4 - Multiple Issues
Slug
wps-bidouille
Published
2025-12-02
Title
WPS Bidouille < 1.33.2 - Missing Authorization
Slug
wps-child-theme-generator
Published
2019-07-23
Title
WPS Child Themes Generator <= 1.1 - Path Traversal
Slug
wps-cleaner
Published
2019-07-23
Title
WPS Cleaner <= 1.4.4 - Multiple Issues
Slug
wps-hide-login
Published
2015-04-27
Title
WPS Hide Login 1.0 - CSRF
Slug
wps-hide-login
Published
2019-07-23
Title
WPS Hide Login < 1.5.3 - Multiples Issues
Slug
wps-hide-login
Published
2020-01-27
Title
WPS Hide Login < 1.5.5 - Secret Login Page Disclosure
Slug
wps-hide-login
Published
2021-10-27
Title
WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header
Slug
wps-hide-login
Published
2024-01-10
Title
WPS Hide Login < 1.9.12 - Hidden Login Page Location Disclosure
Slug
wps-hide-login
Published
2024-06-10
Title
WPS Hide Login < 1.9.16 - Login Page Disclosure
Slug
wps-hide-login
Published
2024-06-24
Title
WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure
Slug
wps-limit-login
Published
2019-07-23
Title
WPS Limit Login <= 1.4.5 - Multiple Issues
Slug
wps-team
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wps-team
Published
2025-04-15
Title
Team Members < 3.4.5 - Contributor+ PHP Object Injection
Slug
wps-team
Published
2025-04-30
Title
Team Members < 3.4.2 - Contributor+ Stored XSS
Slug
wps-team
Published
2025-10-22
Title
Team Members Showcase < 3.5.0 - Reflected XSS
Slug
wps-team
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
wps-telegram-chat
Published
2024-10-24
Title
WPS Telegram Chat <= 4.6.0 - Missing Authorization to Information Exposure
Slug
wps-telegram-chat
Published
2024-10-24
Title
WPS Telegram Chat <= 4.6.0 - Authenticated (Subscriber+) Unauthorized Access to Telegram Bot API
Slug
wps-visitor-counter
Published
2025-11-21
Title
WPS Visitor Counter Plugin <= 1.4.8 - Reflected XSS via $_SERVER['REQUEST_URI']
Slug
wpsc-mijnpress
Published
2014-08-01
Title
WPsc MijnPress - 'rwflush' Parameter Cross Site Scripting