WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-autokeyword
Published
2025-04-10
Title
WP AutoKeyword <= 1.0 - Reflected Cross-Site Scripting
Slug
wp-autokeyword
Published
2025-06-05
Title
WP AutoKeyword <= 1.0 - Missing Authorization
Slug
wp-automatic
Published
2014-08-01
Title
Automatic 2.0.3 - csv.php q Parameter SQL Injection
Slug
wp-automatic
Published
2021-09-06
Title
WordPress Automatic < 3.53.3 - Unauthenticated Arbitrary Options Update
Slug
wp-automatic
Published
2024-03-13
Title
Automatic < 3.92.1 - Cross-Site Request Forgery to Privilege Escalation
Slug
wp-automatic
Published
2024-03-13
Title
Automatic < 3.92.1 - Unauthenticated Arbitrary File Download and Server-Side Request Forgery
Slug
wp-automatic
Published
2024-03-13
Title
Automatic < 3.92.1 - Unauthenticated SQL Injection
Slug
wp-automatic
Published
2024-04-19
Title
WordPress Automatic Plugin < 3.93.0 Cross-Site Request Forgery
Slug
wp-automatic
Published
2024-05-17
Title
WordPress Automatic < 3.95.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay Parameter
Slug
wp-automatic
Published
2025-06-10
Title
WordPress Automatic Plugin - AI content generator and auto poster plugin < 3.116.0 - Authenticated (Author+) Arbitrary File Upload
Slug
wp-automatic
Published
2025-08-25
Title
WordPress Automatic Plugin - AI content generator and auto poster plugin < 3.119.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-automatic-widget
Published
2024-11-08
Title
wp_automatic_widget <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-automedic
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-automedic
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-autosearch
Published
2022-12-12
Title
WP AutoComplete Search <= 1.0.4 - Unauthenticated SQLi
Slug
wp-autosuggest
Published
2018-12-11
Title
WP AutoSuggest 0.24 - Unauthenticated SQL Injection
Slug
wp-autoyoutube
Published
2014-08-01
Title
WP-AutoYoutube <= 0.1 - Blind SQL Injection
Slug
wp-awesome-buttons
Published
2024-10-24
Title
Awesome buttons <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via btn2 Shortcode
Slug
wp-awesome-faq
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-awesome-faq
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-awesome-import-export
Published
2025-03-04
Title
WordPress Awesome Import & Export Plugin - Import & Export WordPress Data <= 4.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary SQL Execution/Privilege Escalation
Slug
wp-awesome-login
Published
2024-10-25
Title
WP Awesome Login <= 0.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
wp-azure-offload
Published
2025-03-17
Title
WP Azure offload <= 2.0 - Reflected Cross-Site Scripting
Slug
wp-back-button
Published
2024-05-30
Title
WP Back Button <= 1.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-background-tile
Published
2025-01-16
Title
WP Background Tile <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting