WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
waiting
Published
2023-03-22
Title
Waiting: One-click Countdowns <= 0.6.2 - Subscriber+ SQLi
Slug
waiting
Published
2023-05-17
Title
Waiting: One-click countdowns <= 0.6.2 - Subscriber+ Stored XSS
Slug
waiting
Published
2022-12-23
Title
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization
Slug
waiting
Published
2022-12-23
Title
Waiting: One-click countdowns <= 0.6.2 - Cross-Site Request Forgery
Slug
waiting
Published
2022-12-23
Title
Waiting: One-click countdowns <= 0.6.2 - Admin+ Cross-Site Scripting
Slug
waitlist-woocommerce
Published
2022-01-13
Title
XootiX Plugins - Various Versions CSRF to Arbitrary Options Update
Slug
waitlist-woocommerce
Published
2023-07-03
Title
Waitlist Woocommerce < 2.5.3 - Settings Reset via CSRF
Slug
waitlist-woocommerce
Published
2024-08-07
Title
Waitlist Woocommerce ( Back in stock notifier ) < 2.6.1 - Missing Authorization
Slug
waitlist-woocommerce
Published
2024-09-13
Title
Waitlist Woocommerce ( Back in stock notifier ) < 2.7.6 - Reflected Cross-Site Scripting
Slug
walk-score
Published
2014-06-12
Title
Walk Score <= 0.5.5 - Multiple XSS
Slug
walker-core
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
walker-core
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
walker-core
Published
2025-11-19
Title
Walker Core < 1.3.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
walker-elementor
Published
2025-12-31
Title
Walker for Elementor <= 1.1.6 - Missing Authorization
Slug
wallet-system-for-woocommerce
Published
2024-04-12
Title
Wallet System for WooCommerce < 2.5.10 - Cross-Site Request Forgery
Slug
wallet-system-for-woocommerce
Published
2024-07-11
Title
Wallet System for WooCommerce < 2.5.14 - Information Exposure via Log Files
Slug
wallet-system-for-woocommerce
Published
2025-03-03
Title
Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction < 2.6.3 - Cross-Site Request Forgery
Slug
wallet-system-for-woocommerce
Published
2025-03-03
Title
Wallet System for WooCommerce < 2.6.3 - Missing Authorization
Slug
wallet-system-for-woocommerce
Published
2025-04-10
Title
Wallet System for WooCommerce < 2.6.9 - Reflected Cross-Site Scripting
Slug
wallet-system-for-woocommerce
Published
2025-07-16
Title
Wallet System for WooCommerce < 2.6.8 - Cross-Site Request Forgery
Slug
wallet-system-for-woocommerce
Published
2025-12-29
Title
Wallet System for WooCommerce <= 2.7.3 - Authenticated (Subscriber+) Information Exposure
Slug
wallet-system-for-woocommerce
Published
2026-01-16
Title
Wallet System for WooCommerce < 2.7.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wallet Balance Manipulation
Slug
wallwisher-shortcode
Published
2025-11-20
Title
Padlet Shortcode <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wamate-confirm
Published
2026-02-10
Title
WaMate Confirm <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Phone Number Blocking/Unblocking
Slug
wangguard
Published
2016-08-02
Title
WangGuard <= 1.7.1 - Cross-Site Scripting (XSS)