WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
xforwoocommerce
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
xforwoocommerce
Published
2024-04-25
Title
XforWooCommerce <= 2.0.2 - Authenticated (Subscriber+) Local File Inclusion
Slug
xhanch-my-twitter
Published
2014-08-01
Title
Xhanch my Twitter - CSRF in admin/setting.php
Slug
xili-dictionary
Published
2025-03-27
Title
xili-dictionary < 2.12.5.1 - Reflected Cross-Site Scripting
Slug
xili-dictionary
Published
2025-06-23
Title
xili-dictionary <= 2.12.5.2 - Reflected Cross-Site Scripting
Slug
xili-language
Published
2014-08-01
Title
xili-language - index.php lang Parameter XSS
Slug
xili-language
Published
2025-04-01
Title
xili-language < 2.21.3 - Reflected Cross-Site Scripting
Slug
xili-language
Published
2025-09-22
Title
xili-language <= 2.21.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
xili-tidy-tags
Published
2023-03-14
Title
xili-tidy-tags < 1.12.04 - Cross-Site Request Forgery
Slug
xili-tidy-tags
Published
2024-11-11
Title
xili-tidy-tags < 1.12.05 - Reflected Cross-Site Scripting
Slug
xili-tidy-tags
Published
2025-05-08
Title
xili-tidy-tags <= 1.12.06 - Reflected Cross-Site Scripting
Slug
xili-tidy-tags
Published
2025-09-22
Title
xili-tidy-tags <= 1.12.06 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
xisearch-bar
Published
2025-06-13
Title
XiSearch bar <= 2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
xl-tab
Published
2024-09-30
Title
XLTab – Accordions and Tabs for Elementor Page Builder < 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
xl-tab
Published
2024-12-05
Title
XLTab – Accordions and Tabs for Elementor Page Builder < 1.5 - Authenticated (Contributor+) Post Disclosure
Slug
xllentech-english-islamic-calendar
Published
2021-05-27
Title
Xllentech English Islamic Calendar < 2.6.8 - Authenticated SQL Injection
Slug
xlsx-viewer
Published
2025-01-16
Title
XLSXviewer <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
xm-backup
Published
2025-08-25
Title
XM-Backup <= 0.9.1 - Cross-Site Request Forgery
Slug
xmasb-quotes
Published
2025-08-26
Title
XmasB Quotes <= 1.6.1 - Reflected Cross-Site Scripting
Slug
xml-file-export-import-for-stampscom-and-woocommerce
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
xml-for-avito
Published
2025-01-10
Title
XML for Avito < 2.5.3 - Reflected Cross-Site Scripting
Slug
xml-for-google-merchant-center
Published
2023-04-24
Title
XML for Google Merchant Center < 3.0.2 - Reflected XSS
Slug
xml-for-google-merchant-center
Published
2025-01-21
Title
XML for Google Merchant Center < 3.0.12 - Reflected Cross-Site Scripting
Slug
xml-multilanguage-sitemap-generator
Published
2024-12-14
Title
XML Multilanguage Sitemap Generator <= 2.0.6 - Missing Authorization
Slug
xml-sitemap-feed
Published
2024-05-07
Title
XML Sitemap & Google News < 5.4.9 - Unauthenticated Local File Inclusion