WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-attachment-export
Published
2015-07-15
Title
WP Attachment Export < 0.2.4 - Unauthenticated Posts Download
Slug
wp-attachments
Published
2022-10-18
Title
WP Attachments < 5.0.5 - Admin+ Stored Cross-Site Scripting
Slug
wp-attachments
Published
2022-12-21
Title
WP Attachments < 5.0.6 - Admin+ Stored XSS
Slug
wp-attachments
Published
2023-10-16
Title
WP Attachments < 5.0.12 - Arbitrary Settings Update via CSRF
Slug
wp-attachments
Published
2025-05-27
Title
WP Attachments < 5.1 - Reflected Cross-Site Scripting via attachment_id Parameter
Slug
wp-attachments
Published
2025-12-31
Title
Attachments < 5.2.1 - Missing Authorization
Slug
wp-attest
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-attest
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-attractive-donations-system-easy-stripe-paypal-donations
Published
2025-09-22
Title
WP Attractive Donations System < 1.29 - Cross-Site Request Forgery
Slug
wp-auctions
Published
2024-12-02
Title
WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-auctions
Published
2024-12-02
Title
WordPress Auction Plugin <= 3.7 - Unauthenticated SQL Injection
Slug
wp-auctions
Published
2024-12-17
Title
WordPress Auction <= 3.7 - Editor+ SQL Injection
Slug
wp-auctions
Published
2024-12-17
Title
WordPress Auction <= 3.7 - Editor+ Stored XSS
Slug
wp-auctions
Published
2025-01-03
Title
WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) SQL Injection
Slug
wp-audio-gallery
Published
2025-11-20
Title
WP AUDIO GALLERY <= 2.0 - Authenticated (Subscriber+) Arbitrary File Deletion via 'audio_upload' Parameter
Slug
wp-audio-gallery
Published
2026-02-18
Title
WP AUDIO GALLERY <= 2.0 - Authenticated (Subscriber+) Arbitrary File Read via .htaccess Manipulation
Slug
wp-audio-gallery-playlist
Published
2014-08-01
Title
wp audio gallery playlist <= 0.12 - SQL Injection
Slug
wp-auto-affiliate-links
Published
2015-07-15
Title
Auto Affiliate Links < 5.0 - Authenticated Blind SQL Injection
Slug
wp-auto-affiliate-links
Published
2023-02-22
Title
Auto Affiliate Links < 6.3.0.3 - Settings Update via CSRF
Slug
wp-auto-affiliate-links
Published
2023-11-07
Title
Auto Affiliate Links < 6.4.2.5 - Settings Update to Stored XSS via CSRF
Slug
wp-auto-affiliate-links
Published
2023-11-20
Title
Auto Affiliate Links < 6.4.2.6 - Cross-Site Request Forgery
Slug
wp-auto-affiliate-links
Published
2024-03-11
Title
Auto Affiliate Links < 6.4.3.1 - Missing Authorization via aalAddLink
Slug
wp-auto-affiliate-links
Published
2024-01-09
Title
Auto Affiliate Links < 6.4.2.8 - Cross-Site Request Forgery
Slug
wp-auto-affiliate-links
Published
2024-05-06
Title
Auto Affiliate Links < 6.4.4 - Authenticated (Editor+) SQL Injection
Slug
wp-auto-affiliate-links
Published
2024-09-18
Title
Auto Affiliate Links < 6.4.7 - Admin+ SQL Injection