logoWordPressPluginsThemesAPISubmitContact
search-icon
logo
search-icon
WordPressPluginsThemesAPISubmitContactSecurity Scanner
Register

WordPress Plugin Vulnerabilities

Slug

Published

Title

Slug

1-flash-gallery

Published

2014-08-01

Title

1-flash-gallery <= 1.9.0 - XSS in ZeroClipboard.swf

Slug

1-flash-gallery

Published

2014-08-01

Title

1 Flash Gallery - Arbitrary File Upload Exploit (MSF)

Slug

1-jquery-photo-gallery-slideshow-flash

Published

2014-08-01

Title

ZooEffect 1.08 - HTTP Referer Reflected XSS

Slug

123contactform-for-wordpress

Published

2021-01-20

Title

123ContactForm for WordPress <= 1.5.6 - Unauthenticated Arbitrary File Upload

Slug

123contactform-for-wordpress

Published

2021-01-20

Title

123ContactForm for WordPress <= 1.5.6 - Unauthenticated Arbitrary Post Creation

Slug

123contactform-for-wordpress

Published

2021-01-20

Title

123ContactForm for WordPress <= 1.5.6 - Validation Bypass via Plugin Verification

Slug

1player

Published

2014-08-01

Title

VideoJS - Cross-Site Scripting (XSS)

Slug

2-click-socialmedia-button

Published

2014-08-01

Title

2-Click-Socialmedia-Buttons <= 0.32.2 - Cross Site Scripting

Slug

2-click-socialmedia-button

Published

2014-08-01

Title

2-Click-Socialmedia-Buttons <= 0.34 - Cross Site Scripting

Slug

2-click-socialmedia-buttons

Published

2012-05-11

Title

2 Click Socialmedia Buttons < 0.34 - Multiple XSS

Slug

2j-slideshow

Published

2020-01-20

Title

2J SlideShow < 1.3.40 - Authenticated Arbitrary Plugin Deactivation

Slug

2kb-amazon-affiliates-store

Published

2017-09-20

Title

2kb Amazon Affiliates Store <= 2.1.0 - Authenticated Cross-Site Scripting (XSS)

Slug

360-product-rotation

Published

2019-06-27

Title

360 Product Rotation <= 1.4.7 - Reflected XSS

Slug

3bubble-amazon-s3-html-5-video-with-adverts

Published

2015-07-07

Title

S3Bubble Cloud Video With Adverts & Analytics <= 0.7 - Arbitrary File Download

Slug

3d-cover-carousel

Published

2021-09-08

Title

3D Cover Carousel <= 1.0 - Reflected Cross-Site Scripting

Slug

3d-flipbook-dflip-lite

Published

2021-09-15

Title

Dflip Lite < 1.7.10 - Contributor+ Stored Cross-Site Scripting

Slug

3dprint-lite

Published

2021-10-11

Title

3D Print Lite < 1.9.1.6 - Reflected Cross-Site Scripting

Slug

3dprint-lite

Published

2021-09-23

Title

3DPrint Lite <= 1.9.1.4 - Unauthenticated Arbitrary File Upload

Slug

404-redirection-manager

Published

2021-04-16

Title

404 SEO Redirection <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)

Slug

404-redirection-manager

Published

2021-04-16

Title

404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting (XSS)

Slug

404-redirection-manager

Published

2016-12-19

Title

404 Redirection Manager 1.0 - SQL Injection

Slug

404-to-301

Published

2021-10-11

Title

404 to 301 < 3.0.9 - Logs Deletion via CSRF

Slug

404-to-301

Published

2021-06-18

Title

404 to 301 < 3.0.8 - Broken Access Control

Slug

404-to-301

Published

2019-02-26

Title

Freemius Library <= 2.2.3 - Authenticated Option Update

Slug

404-to-301

Published

2016-08-27

Title

404 to 301 <= 2.3.0 - Unauthenticated Stored Cross-Site Scripting (XSS)