WordPress Plugin Vulnerabilities

0-9 - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z
Name Added Title
kama-clic-counter 2017-02-28 Kama Click Counter - Authenticated Blind SQL Injection
job-manager 2015-08-04 Job Manager <= 0.7.22 - Unauthenticated Stored Cross-Site...
job-manager 2015-08-31 Job Manager <= 0.7.25 - Insecure Direct Object Reference
job-manager 2015-11-24 Job Manager <= 0.7.24 - Authenticated Reflected Cross-Sit...
custom-admin-page 2017-04-13 Multiple BestWebSoft Plugins - Authenticated Reflected GE...
image-slider-widget 2015-05-14 Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scri...
image-slider-widget 2015-05-14 Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scri...
ip-blacklist-cloud 2015-03-01 IP Blacklist Cloud <= 3.4 - SQL Injection
ip-blacklist-cloud 2015-03-13 IP Blacklist Cloud <= 3.42 - Arbitrary File Disclosure
indexisto 2016-04-15 Indexisto WordPress Site Search <= 1.0.5 - Unauthenticate...
incoming-links 2015-05-31 Incoming Links <= 0.9.9b - referrers.php XSS
inboundio-marketing 2015-03-24 InBoundio Marketing Plugin <= 2.0.3 - Shell Upload
image-slider-widget 2015-05-14 Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scri...
image-metadata-cruncher 2015-02-17 Image Metadata Cruncher - Multiple Cross-Site Scripting (...
ibs-mappro 2015-07-11 IBS Mappro <= 0.6 - Directory Traversal
i-dump-iphone-to-wordpress-... 2015-04-09 Windows Desktop And iPhone Photo Uploader <= 1.8 - File U...
custom-admin-page 2017-04-13 Multiple BestWebSoft Plugins - Authenticated Reflected GE...
history-collection 2015-06-10 History Collection <= 1.1.1 - Arbitraty File Download
health-check 2019-01-28 Health Check & Troubleshooting <= 1.2.3 - Authenticated P...
health-check 2019-01-28 Health Check & Troubleshooting <= 1.2.3 - Authenticated L...
hdw-tube 2016-04-15 HDW WordPress Video Gallery <= 1.2 - Unauthenticated Refl...
gravity-forms-sms-notificat... 2017-12-19 Multiple Mediaburst/Clockwork Plugins - Cross-Site Script...
gravity-file-ajax-upload-free 2015-11-13 Gravity Upload Ajax <= 1.1 - Arbitrary File Upload
gracemedia-media-player 2019-03-18 GraceMedia Media Player 1.0 - Local File Inclusion (LFI)
googmonify 2015-08-24 Googmonify <= 0.5.1 - CSRF & XSS
custom-admin-page 2017-04-13 Multiple BestWebSoft Plugins - Authenticated Reflected GE...
custom-admin-page 2017-04-13 Multiple BestWebSoft Plugins - Authenticated Reflected GE...
google-mp3-audio-player 2017-02-09 Wordpress CodeArt Google MP3 Player - File Disclosure
google-maps 2016-08-16 Google Maps <= 2.1.3 - Authenticated Reflected Cross-Sit...
google-adsense-and-hotel-bo... 2015-08-24 Google Adsense & Hotel Booking <= 1.05 - Open Proxy
gocodes 2015-11-24 GoCodes <= 1.3.5 - Authenticated XSS & Blind SQL Injection
ghost 2016-05-02 Ghost Plugin <= 0.5.5 - Unrestricted Export Download
gd-bbpress-attachments 2015-07-09 GD bbPress Attachments <= 2.2 - Local File Inclusion
gd-bbpress-attachments 2015-07-09 GD bbPress Attachments <= 2.2 - Authenticated Reflected C...
gd-bbpress-attachments 2018-05-14 GD bbPress Attachments <= 2.5 - Authenticated Stored XSS
gravity-forms-sms-notificat... 2017-12-19 Multiple Mediaburst/Clockwork Plugins - Cross-Site Script...