WordPress Plugin Vulnerabilities | Page 269 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2026-09-24

Title

WPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation

Slug

Published

2026-10-09

Title

WPForms < 2.0.2.2 - Reflected Cross-Site Scripting via 'query_var' Smart Tag in iframe srcdoc Attribute

Slug

Published

2026-10-12

Title

WPForms Lite 1.10.0.1 - 2.0.2.1 - Unauthenticated Payment Bypass via PayPal Commerce

Slug

wpforms-user-registration

Published

2024-07-18

Title

WPForms User Registration < 2.1.2 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation

Slug

Published

2018-05-27

Title

wpForo Forum < 1.4.11 - Unauthenticated SQL Injection

Slug

Published

2018-06-01

Title

wpForo Forum <= 1.4.11 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Slug

Published

2018-09-06

Title

wpForo < 1.5.2 - Privilege Escalation

Slug

Published

2021-06-14

Title

wpForo Forum < 1.9.7 - Open Redirect

Slug

Published

2020-05-04

Title

wpForo < 1.7.0 - New Users Set as Admin via CSRF

Slug

Published

2020-05-04

Title

wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via s Parameter

Slug

Published

2020-05-04

Title

wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via langid Parameter

Slug

Published

2020-05-04

Title

wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via User Agent

Slug

Published

2022-09-08

Title

wpForo Forum < 2.0.6 - Cross-Site Request Forgery

Slug

Published

2022-09-26

Title

wpForo Forum < 2.0.6 - Subscriber+ Forum Post Set as Solved/Unsolved via IDOR

Slug

Published

2022-11-26

Title

wpForo Forum < 2.0.6 - Subscriber+ Forum Post Set as Private/Public via IDOR

Slug

Published

2022-09-26

Title

wpForo Forum < 2.0.6 - Topic Deletion via CSRF

Slug

Published

2022-11-09

Title

wpForo Forum < 2.1.0 - Subscriber+ Arbitrary File Upload

Slug

Published

2022-11-17

Title

wpForo Forum < 2.1.0 - Arbitrary User Deletion via CSRF

Slug

Published

2023-06-12

Title

wpForo Forum < 2.1.8 - Subscriber+ Arbitrary File Read, Author+ PHAR Deserialization, and Subscriber+ Server-Side Request Forgery via file_get_contents

Slug

Published

2023-07-03

Title

wpForo Forum < 2.1.9 - Reflected Cross-Site Scripting

Slug

Published

2023-11-20

Title

wpForo Forum < 2.2.6 - Subscriber+ Content Injection

Slug

Published

2023-11-20

Title

wpForo Forum < 2.2.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Slug

Published

2024-05-31

Title

wpForo Forum < 2.3.4 - Authenticated (Contributor+) SQL Injection

Slug

Published

2024-08-16

Title

wpForo Forum < 2.3.5 - Unauthenticated Sensitive Information Exposure

Slug

Published

2024-08-16

Title

wpForo Forum < 2.3.5 - Authenticated (Subscriber+) Insecure Direct Object Reference