WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wordpress-multisite-user-sync
Published
2022-02-07
Title
Multisite User Sync/Unsync < 2.1.2 - Reflected Cross-Site Scripting
Slug
wordpress-nextgen-galleryview
Published
2023-06-15
Title
NextGen GalleryView <= 0.5.5 - Reflected XSS
Slug
wordpress-nextgen-galleryview
Published
2023-05-30
Title
NextGen GalleryView <= 0.5.5 - Cross-Site Request Forgery
Slug
wordpress-notification-bar
Published
2024-07-06
Title
WordPress Notification Bar <= 1.3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wordpress-ping-optimizer
Published
2022-08-23
Title
WordPress Ping Optimizer < 2.35.1.3.0 - Arbitrary Settings Update via CSRF
Slug
wordpress-ping-optimizer
Published
2024-03-20
Title
WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF
Slug
wordpress-plugin-for-simple-google-adsense-insertion
Published
2022-05-12
Title
WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF
Slug
wordpress-popular-posts
Published
2021-06-07
Title
WordPress Popular Posts < 5.3.3 - Authenticated Code Injection
Slug
wordpress-popular-posts
Published
2021-06-07
Title
WordPress Popular Posts < 5.3.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wordpress-popular-posts
Published
2021-07-03
Title
WordPress Popular Posts < 5.3.4 - Admin+ Stored Cross-Site Scripting
Slug
wordpress-popular-posts
Published
2022-06-29
Title
WordPress Popular Posts < 6.0.0 - Reflected Cross-Site Scripting
Slug
wordpress-popular-posts
Published
2022-11-18
Title
WordPress Popular Posts < 6.1.0 - Unauthenticated Views Manipulation
Slug
wordpress-popular-posts
Published
2023-10-18
Title
WordPress Popular Posts < 6.3.3 - Contributor+ Stored XSS
Slug
wordpress-popular-posts
Published
2025-01-03
Title
WordPress Popular Posts < 7.2.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
wordpress-popup
Published
2019-05-24
Title
Hustle < 6.0.8.1 - Unauthenticated CSV Injection
Slug
wordpress-popup
Published
2024-07-29
Title
Hustle < 7.8.5 - Admin+ Stored XSS
Slug
wordpress-popup
Published
2024-11-25
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.6 - Missing Authorization to Unpublished Form Exposure
Slug
wordpress-popup
Published
2024-11-26
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.6 - Missing Authorization to Unauthorized Form Submission
Slug
wordpress-popup
Published
2026-01-23
Title
Hustle < 7.8.9.3 - Subscriber+ Arbitrary File Upload via Module Import
Slug
wordpress-popup
Published
2026-01-25
Title
Hustle < 7.8.9.3 - Unauthenticated Information Exposure
Slug
wordpress-seo
Published
2014-08-01
Title
Yoast SEO - Security issue which allowed any user to reset settings
Slug
wordpress-seo
Published
2014-08-01
Title
Yoast SEO < 1.4.7 - Reset Settings Feature Access Restriction Bypass
Slug
wordpress-seo
Published
2015-03-11
Title
Yoast SEO < 1.7.4 - Blind SQL Injection
Slug
wordpress-seo
Published
2015-06-12
Title
Yoast SEO < 2.2 - Authenticated Stored DOM XSS
Slug
wordpress-seo
Published
2016-05-06
Title
Yoast SEO <= 3.2.4 - Subscriber Settings Sensitive Data Exposure