WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
workreap_core
Published
2026-01-15
Title
Workreap Core <= 3.4.0 - Authentication Bypass
Slug
workscout-core
Published
2021-04-08
Title
WorkScout Core < 1.3.4 - Authenticated Stored XSS & XFS
Slug
workscout-core
Published
2025-09-22
Title
WorkScout-Core < 1.7.06 - Cross-Site Request Forgery
Slug
workscout-core
Published
2025-09-23
Title
WorkScout-Core < 1.7.06 - Reflected Cross-Site Scripting
Slug
workscout-core
Published
2026-01-21
Title
WorkScout-Core < 1.7.07 - Unauthenticated Stored Cross-Site Scripting
Slug
workscout-core
Published
2026-06-15
Title
Workscout Core < 1.7.12 - Unauthenticated Arbitrary File Deletion
Slug
world-cup-predictor
Published
2025-01-13
Title
World Cup Predictor <= 1.9.8 - Reflected Cross-Site Scripting
Slug
world-of-warcraft-armory-table
Published
2014-08-01
Title
World of Warcraft Armory Table 0.2.5 - WoWArmoryTable.php page Parameter Reflected XSS
Slug
world-prayer-time
Published
2024-10-30
Title
World Prayer Time <= 2.0 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
world-travel-information
Published
2021-10-05
Title
World Travel Information <= 1.0.0 - Reflected Cross-Site Scripting
Slug
worpit-admin-dashboard-plugin
Published
2025-01-30
Title
iControlWP – Multiple WordPress Site Manager < 4.5.0 - Unauthenticated PHP Object Injection
Slug
worpit-admin-dashboard-plugin
Published
2026-04-07
Title
iControlWP < 5.5.4 - Unauthenticated Privilege Escalation
Slug
worry-proof-backup
Published
2026-02-25
Title
Worry Proof Backup <= 0.2.4 - Authenticated (Subscriber+) Path Traversal via Backup Upload
Slug
wot-elementor-widgets
Published
2024-12-05
Title
Wot Elementor Widgets <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wovax-idx
Published
2024-12-14
Title
Wovax IDX <= 1.2.2 - Missing Authorization to Privilege Escalation
Slug
wow-carousel-for-divi-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wow-carousel-for-divi-lite
Published
2025-01-24
Title
Divi Carousel Lite < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Logo Carousel Widgets
Slug
wow-entrance-effects-wee
Published
2025-02-27
Title
WOW Entrance Effects (WEE!) <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wow-media-library-fix
Published
2025-12-12
Title
Fix Media Library <= 2.0 - Unauthenticated Information Exposure
Slug
wow-moodboard-lite
Published
2015-05-29
Title
Wow Moodboard Lite <= 1.1.1.1 - Open Redirect
Slug
wowhead-tooltips
Published
2025-04-24
Title
WoWHead Tooltips <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wowpress
Published
2026-04-07
Title
WowPress <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
wowpth
Published
2025-02-20
Title
WoWPth <= 2.0 - Reflected XSS
Slug
wowpth
Published
2025-02-20
Title
WoWPth <= 2.0 - Reflected XSS
Slug
wowrestro
Published
2021-07-12
Title
WOWRestro < 1.1 - CSRF Bypass