WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
12-step-meeting-list
Published
2025-01-24
Title
12 Step Meeting List < 3.16.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion
Slug
12-step-meeting-list
Published
2025-08-14
Title
12 Step Meeting List < 3.18.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
12-step-meeting-list
Published
2024-12-18
Title
12 Step Meeting List < 3.16.6 - Missing Authorization to Unauthenticated Settings Update
Slug
123-chat-videochat
Published
2023-08-14
Title
123.chat < 1.3.1 - Admin+ Stored XSS
Slug
123-chat-videochat
Published
2024-09-30
Title
123.chat - Video Chat <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting
Slug
123contactform-for-wordpress
Published
2021-01-20
Title
123ContactForm for WordPress <= 1.5.6 - Validation Bypass via Plugin Verification
Slug
123contactform-for-wordpress
Published
2021-01-20
Title
123ContactForm for WordPress <= 1.5.6 - Unauthenticated Arbitrary Post Creation
Slug
123contactform-for-wordpress
Published
2021-01-20
Title
123ContactForm for WordPress <= 1.5.6 - Unauthenticated Arbitrary File Upload
Slug
17track
Published
2025-02-21
Title
17TRACK for WooCommerce <= 1.2.10 - Reflected Cross-Site Scripting
Slug
1app-business-forms
Published
2022-11-30
Title
1app Business Forms <= 1.0.0 - Author+ Stored XSS
Slug
1player
Published
2014-08-01
Title
VideoJS - Cross-Site Scripting (XSS)
Slug
2-click-socialmedia-button
Published
2014-08-01
Title
2-Click-Socialmedia-Buttons <= 0.34 - Cross Site Scripting
Slug
2-click-socialmedia-button
Published
2014-08-01
Title
2-Click-Socialmedia-Buttons < 0.35 - Cross Site Scripting
Slug
2-click-socialmedia-buttons
Published
2012-05-11
Title
2 Click Socialmedia Buttons < 0.34 - Multiple XSS
Slug
2d-tag-cloud-widget-by-sujin
Published
2024-10-11
Title
2D Tag Cloud <= 6.0.2 - Reflected Cross-Site Scripting via add_query_arg Parameter
Slug
2j-slideshow
Published
2020-01-20
Title
2J SlideShow < 1.3.40 - Authenticated Arbitrary Plugin Deactivation
Slug
2j-slideshow
Published
2022-05-04
Title
Slideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting
Slug
2j-slideshow
Published
2023-10-02
Title
Images Slideshow by 2J <= 1.3.54 - Contributor+ Stored XSS
Slug
2j-slideshow
Published
2024-08-16
Title
Slideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting via 'post'
Slug
2kb-amazon-affiliates-store
Published
2017-09-20
Title
2kb Amazon Affiliates Store <= 2.1.0 - Authenticated Cross-Site Scripting (XSS)
Slug
2kb-amazon-affiliates-store
Published
2022-10-24
Title
2kb Amazon Affiliates Store <= 2.1.5 - Reflected XSS
Slug
2mb-autocode
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
3-word-address-validation-field
Published
2023-07-18
Title
what3words Address Field < 4.0.0 - Admin+ Sensitive Information Disclosure
Slug
3-word-address-validation-field
Published
2025-02-14
Title
what3words Address Field < 4.0.16 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
360-product-rotation
Published
2019-06-27
Title
360 Product Rotation <= 1.4.7 - Reflected XSS