WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wamate-confirm
Published
2026-02-10
Title
WaMate Confirm <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Phone Number Blocking/Unblocking
Slug
wangguard
Published
2016-08-02
Title
WangGuard <= 1.7.1 - Cross-Site Scripting (XSS)
Slug
wangguard
Published
2017-01-17
Title
WangGuard <= 1.7.2 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
wappointment
Published
2021-09-27
Title
Wappointment < 2.2.5 - Unauthenticated Stored Cross-Site Scripting
Slug
wappointment
Published
2024-04-12
Title
Wappointment < 2.6.1 - Admin+ SSRF
Slug
wappointment
Published
2025-11-17
Title
Wappointment < 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wappointment
Published
2025-12-21
Title
Wappointment <=2.7.2 - Missing Authorization
Slug
wapppress-builds-android-app-for-website
Published
2023-12-05
Title
WappPress < 6.0.0 - Unauthenticated Arbitrary File Upload
Slug
wapppress-builds-android-app-for-website
Published
2024-07-11
Title
WappPress < 6.0.5 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
wapppress-builds-android-app-for-website
Published
2024-08-07
Title
WappPress < 6.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wassup
Published
2008-01-30
Title
WassUp 1.4.3 - (spy.php to_date) SQL Injection Exploit
Slug
wassup
Published
2016-11-08
Title
WassUp Real Time Analytics <= 1.9 - Cross Site Scripting
Slug
wassup
Published
2012-06-06
Title
Wassup < 1.8.3.1 - XSS
Slug
wassup
Published
2023-11-06
Title
WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSS
Slug
watcher-elementor
Published
2025-12-31
Title
Watcher for Elementor <= 1.0.9 - Missing Authorization
Slug
watchtowerhq
Published
2022-11-01
Title
WatchTowerHQ < 3.6.16 - Unauthenticated Arbitrary File Deletion
Slug
watchtowerhq
Published
2022-11-01
Title
WatchTowerHQ < 3.6.16 - Unauthenticated Arbitrary File Access
Slug
watchtowerhq
Published
2024-10-25
Title
WatchTowerHQ < 3.10.4 - Authentication Bypass to Administrator due to Missing Empty Value Check
Slug
watchtowerhq
Published
2025-12-11
Title
WatchTowerHQ < 3.16.1 - Authenticated (Administrator+) Arbitrary File Read via 'wht_download_big_object_origin' Parameter
Slug
watermark-reloaded
Published
2024-02-26
Title
Watermark RELOADED < 1.4.0 - Cross-Site Request Forgery via optionsPage
Slug
wati-chat-and-notification
Published
2025-03-11
Title
WATI Chat and Notification < 1.1.5 - Stored XSS via CSRF
Slug
wats
Published
2021-08-16
Title
WordPress Advanced Ticket System < 1.0.64 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
watu
Published
2019-06-28
Title
Watu Quizz < 3.1.2.6 - Reflected XSS via question-form.html.php
Slug
watu
Published
2023-01-24
Title
Watu Quiz < 3.3.8.3 - Admin+ Stored XSS
Slug
watu
Published
2023-01-24
Title
Watu Quiz < 3.3.8.2 - Reflected XSS