WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
whmcs-bridge
Published
2026-07-07
Title
WHMCS Bridge <= 6.9 - Unauthenticated Arbitrary File Upload via 'ccce' Parameter
Slug
whmpress
Published
2024-08-12
Title
WHMpress <= 6.2-revision-5 - Reflected Cross-Site Scripting
Slug
whmpress
Published
2024-08-12
Title
WHMpress <= 6.2-revision-5 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
whmpress
Published
2025-02-27
Title
WHMpress < 6.3-revision-1-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update
Slug
whmpress
Published
2025-05-16
Title
WHMpress <= 6.2-revision-9 - Unauthenticated Local File Inclusion
Slug
whmpress
Published
2025-05-16
Title
WHMpress <= 6.2-revision-9 - Authenticated (Contributor+) Local File Inclusion
Slug
who-hit-the-page-hit-counter
Published
2023-06-16
Title
Who Hit The Page - Hit Counter <= 1.4.14.3 - Reflected XSS
Slug
who-hit-the-page-hit-counter
Published
2023-10-16
Title
Who Hit The Page – Hit Counter <= 1.4.14.3 - CSRF
Slug
who-hit-the-page-hit-counter
Published
2023-11-07
Title
Who Hit The Page – Hit Counter <= 1.4.14.3 - Authenticated (Administrator+) SQL Injection
Slug
whole-cart-enquiry
Published
2026-04-07
Title
Whole Enquiry Cart for WooCommerce <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'woowhole_success_msg' Parameter
Slug
wholesale-market
Published
2022-12-12
Title
Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File Download
Slug
wholesale-market
Published
2022-12-08
Title
Wholesale Market <= 2.2.2 - Settings Update via CSRF
Slug
wholesale-market-for-woocommerce
Published
2022-11-28
Title
Wholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File Download
Slug
wholesale-market-for-woocommerce
Published
2022-11-28
Title
Wholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File Download
Slug
wholesale-market-for-woocommerce
Published
2022-12-12
Title
Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Download
Slug
wholesale-market-for-woocommerce
Published
2022-12-08
Title
Wholesale Market <= 2.2.2 - Settings Update via CSRF
Slug
wholesale-pricing-woocommerce
Published
2024-10-03
Title
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce < 3.8.1 - Reflected Cross-Site Scripting
Slug
wholesale-pricing-woocommerce
Published
2025-03-31
Title
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce < 4.0.4 - Contributor+ Stored XSS
Slug
wholesale-products-dynamic-pricing-management-woocommerce
Published
2026-04-13
Title
WholeSale Products Dynamic Pricing Management WooCommerce < 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
Slug
wholesalex
Published
2024-03-26
Title
WholesaleX < 1.3.2 - Authenticated(Subscriber+) Missing Authorization via multiple AJAX actions
Slug
wholesalex
Published
2024-03-26
Title
WholesaleX < 1.3.2 - Sensitive Information Exposure via export_users
Slug
wholesalex
Published
2024-03-29
Title
WholesaleX < 1.3.3 - Unauthenticated Privilege Escalation
Slug
wholesalex
Published
2024-03-26
Title
WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) < 1.3.3 - Unauthenticated PHP Object Injection
Slug
whydowork-adsense
Published
2014-12-29
Title
WhyDoWork AdSense 1.2 - XSS & CSRF
Slug
wibiya
Published
2025-02-13
Title
Wibiya Toolbar <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting