WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wowhead-tooltips
Published
2025-04-24
Title
WoWHead Tooltips <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wowpth
Published
2025-02-20
Title
WoWPth <= 2.0 - Reflected XSS
Slug
wowpth
Published
2025-02-20
Title
WoWPth <= 2.0 - Reflected XSS
Slug
wowrestro
Published
2021-07-12
Title
WOWRestro < 1.1 - CSRF Bypass
Slug
wp-1-slider
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-2fa
Published
2022-04-14
Title
WP 2FA < 2.2.0 - Arbitrary 2FA Disabling via IDOR
Slug
wp-2fa
Published
2022-05-06
Title
WP 2FA < 2.2.1 - Reflected Cross-Site Scripting
Slug
wp-2fa
Published
2022-09-14
Title
WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
Slug
wp-2fa
Published
2024-01-02
Title
WP 2FA < 2.6.0 - Subscriber+ Arbitrary Email Sending
Slug
wp-2fa
Published
2024-01-02
Title
WP 2FA < 2.6.0 - Arbitrary Email Sending via CSRF
Slug
wp-2fa
Published
2024-04-16
Title
WP 2FA – Two-factor authentication for WordPress < 2.6.3 - Reflected Cross-Site Scripting
Slug
wp-2fa
Published
2024-06-20
Title
WP 2FA < 2.6.4 - Unauthenticated Information Exposure via Log File
Slug
wp-2fa
Published
2025-11-03
Title
WP 2FA < 3.0.0 - Second Factor Bypass
Slug
wp-3dbanner-rotator
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-3dflick-slideshow
Published
2014-08-01
Title
wp-3dflick-slideshow - Arbitrary File Upload
Slug
wp-3dflick-slideshow
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-404-auto-redirect-to-similar-post
Published
2023-08-11
Title
WP 404 Auto Redirect to Similar Post < 1.0.4 - Admin+ Stored XSS
Slug
wp-404-auto-redirect-to-similar-post
Published
2024-02-05
Title
WP 404 Auto Redirect to Similar Post < 1.0.4 - Reflected Cross-Site Scripting via request
Slug
wp-404-auto-redirect-to-similar-post
Published
2024-04-16
Title
WP 404 Auto Redirect to Similar Post < 1.0.5 - Reflected Cross-Site Scripting via Debug Mode URI
Slug
wp-able-player
Published
2025-01-07
Title
Able Player <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-about-author
Published
2025-02-24
Title
WP About Author < 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-abstracts-manuscripts-manager
Published
2023-05-08
Title
WP Abstracts < 2.6.4 - Reflected XSS
Slug
wp-abstracts-manuscripts-manager
Published
2023-06-27
Title
WP Abstracts < 2.6.3 - Cross-Site Request Forgery
Slug
wp-abstracts-manuscripts-manager
Published
2023-08-30
Title
WP Abstracts < 2.6.4 - Admin+ Stored XSS
Slug
wp-abstracts-manuscripts-manager
Published
2024-09-23
Title
WP Abstracts < 2.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting