WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-automatic
Published
2024-05-17
Title
WordPress Automatic < 3.95.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay Parameter
Slug
wp-automatic
Published
2025-06-10
Title
WordPress Automatic Plugin - AI content generator and auto poster plugin < 3.116.0 - Authenticated (Author+) Arbitrary File Upload
Slug
wp-automatic
Published
2025-08-25
Title
WordPress Automatic Plugin - AI content generator and auto poster plugin < 3.119.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-automatic-widget
Published
2024-11-08
Title
wp_automatic_widget <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-automedic
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-automedic
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-autosearch
Published
2022-12-12
Title
WP AutoComplete Search <= 1.0.4 - Unauthenticated SQLi
Slug
wp-autosuggest
Published
2018-12-11
Title
WP AutoSuggest 0.24 - Unauthenticated SQL Injection
Slug
wp-autoyoutube
Published
2014-08-01
Title
WP-AutoYoutube <= 0.1 - Blind SQL Injection
Slug
wp-awesome-buttons
Published
2024-10-24
Title
Awesome buttons <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via btn2 Shortcode
Slug
wp-awesome-faq
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-awesome-faq
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-awesome-import-export
Published
2025-03-04
Title
WordPress Awesome Import & Export Plugin - Import & Export WordPress Data <= 4.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary SQL Execution/Privilege Escalation
Slug
wp-awesome-login
Published
2024-10-25
Title
WP Awesome Login <= 0.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
wp-azure-offload
Published
2025-03-17
Title
WP Azure offload <= 2.0 - Reflected Cross-Site Scripting
Slug
wp-back-button
Published
2024-05-30
Title
WP Back Button <= 1.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-background-tile
Published
2025-01-16
Title
WP Background Tile <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-backgrounds-lite
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
wp-backitup
Published
2014-07-16
Title
WP Backitup <= 1.9.1 - Backup File Disclosure
Slug
wp-backitup
Published
2024-03-05
Title
Backup and Restore WordPress < 1.50 - Unauthenticated Sensitive Data Exposure
Slug
wp-backitup
Published
2024-08-12
Title
Backup and Restore WordPress <= 1.50 - Missing Authorization
Slug
wp-backitup
Published
2024-08-12
Title
Backup and Restore WordPress <= 1.50 - Missing Authorization
Slug
wp-backitup
Published
2024-08-12
Title
Backup and Restore WordPress <= 1.50 - Cross-Site Request Forgery
Slug
wp-backitup
Published
2025-01-06
Title
Backup and Restore Wordpress <= 1.50 - Cross-Site Request Forgery to Backup Trigger
Slug
wp-backitup
Published
2026-01-21
Title
BackItUp <= 2.1.0 - Missing Authorization