WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
3d-flipbook-dflip-lite
Published
2026-05-27
Title
DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer < 2.4.30 - Missing Authorization
Slug
3d-image-gallery
Published
2025-08-26
Title
Image Gallery block – Create and display photo gallery/photo album. < 2.0.0 - Missing Authorization
Slug
3d-photo-gallery
Published
2025-02-20
Title
3D Photo Gallery <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
3d-presentation
Published
2024-10-31
Title
3D Presentation <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
3d-viewer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
3d-viewer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
3d-viewer
Published
2026-03-01
Title
3D viewer – Embed 3D Models < 1.8.6 - Missing Authorization
Slug
3dady-real-time-web-stats
Published
2022-09-23
Title
3dady Real Time Web Stats <= 1.0 - Stored Cross-Site Scripting via CSRF
Slug
3dprint
Published
2022-11-08
Title
3DPrint < 3.5.6.9 - Arbitrary File and Directory Deletion via CSRF
Slug
3dprint
Published
2022-09-08
Title
3DPrint < 3.5.6.9 - CSRF to arbitrary file downlad
Slug
3dprint-lite
Published
2021-09-23
Title
3DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload
Slug
3dprint-lite
Published
2021-10-11
Title
3D Print Lite < 1.9.1.6 - Reflected Cross-Site Scripting
Slug
3dprint-lite
Published
2024-11-15
Title
3DPrint Lite < 2.1 - Settings Update via CSRF
Slug
3dprint-lite
Published
2025-03-27
Title
3DPrint Lite < 2.1.3.6 - Cross-Site Request Forgery
Slug
3dprint-lite
Published
2025-04-07
Title
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'infill_text'
Slug
3dprint-lite
Published
2025-04-07
Title
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'material_text'
Slug
3dprint-lite
Published
2025-04-07
Title
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text'
Slug
3dprint-lite
Published
2025-04-07
Title
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'coating_text'
Slug
3dvieweronline-wp
Published
2025-01-08
Title
3DVieweronline < 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
3xsocializer
Published
2022-04-25
Title
3xSocializer <= 0.98.22 - Subscriber+ SQLi
Slug
4-author-cheer-up-donate
Published
2025-02-16
Title
4 author cheer up donate <= 1.3 - Reflected Cross-Site Scripting
Slug
404-error-monitor
Published
2024-11-15
Title
404 Error Monitor <= 1.1 - Cross-Site Request Forgery to Plugin Settings Update via updatePluginSettings Function
Slug
404-page
Published
2025-06-05
Title
404 Page by SeedProd < 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
404-redirection-manager
Published
2016-12-19
Title
404 Redirection Manager 1.0 - SQL Injection
Slug
404-redirection-manager
Published
2021-04-16
Title
404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting (XSS)