WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wordpress-mobile-pack
Published
2015-07-18
Title
WordPress Mobile Pack <= 2.1.2 - Information Disclosure
Slug
wordpress-mobile-pack
Published
2023-07-07
Title
WordPress Mobile Pack <= 3.4.1 - Cross-Site Request Forgery
Slug
wordpress-mu-secure-invites
Published
2025-03-21
Title
Secure Invites <= 1.3 - Reflected Cross-Site Scripting
Slug
wordpress-multisite-user-sync
Published
2022-02-07
Title
Multisite User Sync/Unsync < 2.1.2 - Reflected Cross-Site Scripting
Slug
wordpress-nextgen-galleryview
Published
2023-06-15
Title
NextGen GalleryView <= 0.5.5 - Reflected XSS
Slug
wordpress-nextgen-galleryview
Published
2023-05-30
Title
NextGen GalleryView <= 0.5.5 - Cross-Site Request Forgery
Slug
wordpress-notification-bar
Published
2024-07-06
Title
WordPress Notification Bar <= 1.3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wordpress-paypal-donation
Published
2026-03-20
Title
WordPress PayPal Donation <= 1.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'amount' Shortcode Attribute
Slug
wordpress-ping-optimizer
Published
2022-08-23
Title
WordPress Ping Optimizer < 2.35.1.3.0 - Arbitrary Settings Update via CSRF
Slug
wordpress-ping-optimizer
Published
2024-03-20
Title
WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF
Slug
wordpress-plugin-for-simple-google-adsense-insertion
Published
2022-05-12
Title
WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF
Slug
wordpress-popular-posts
Published
2021-06-07
Title
WordPress Popular Posts < 5.3.3 - Authenticated Code Injection
Slug
wordpress-popular-posts
Published
2021-06-07
Title
WordPress Popular Posts < 5.3.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wordpress-popular-posts
Published
2021-07-03
Title
WordPress Popular Posts < 5.3.4 - Admin+ Stored Cross-Site Scripting
Slug
wordpress-popular-posts
Published
2022-06-29
Title
WordPress Popular Posts < 6.0.0 - Reflected Cross-Site Scripting
Slug
wordpress-popular-posts
Published
2022-11-18
Title
WordPress Popular Posts < 6.1.0 - Unauthenticated Views Manipulation
Slug
wordpress-popular-posts
Published
2023-10-18
Title
WordPress Popular Posts < 6.3.3 - Contributor+ Stored XSS
Slug
wordpress-popular-posts
Published
2025-01-03
Title
WordPress Popular Posts < 7.2.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
wordpress-popup
Published
2019-05-24
Title
Hustle < 6.0.8.1 - Unauthenticated CSV Injection
Slug
wordpress-popup
Published
2024-07-29
Title
Hustle < 7.8.5 - Admin+ Stored XSS
Slug
wordpress-popup
Published
2024-11-25
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.6 - Missing Authorization to Unpublished Form Exposure
Slug
wordpress-popup
Published
2024-11-26
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.6 - Missing Authorization to Unauthorized Form Submission
Slug
wordpress-popup
Published
2026-01-23
Title
Hustle < 7.8.9.3 - Subscriber+ Arbitrary File Upload via Module Import
Slug
wordpress-popup
Published
2026-01-25
Title
Hustle < 7.8.9.3 - Unauthenticated Information Exposure
Slug
wordpress-popup
Published
2026-04-07
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.11 - Missing Authorization to Unauthenticated Conversion Tracking Data Manipulation