WordPress Plugin Vulnerabilities

0-9 - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z
Name Published Title
themegrill-demo-importer 2020-02-16 ThemeGrill Demo Importer < 1.6.3 - Auth Bypass & Database...
cookie-law-info 2020-02-12 GDPR Cookie Consent < 1.8.3 - Improper Access Controls
participants-database 2014-08-01 Participants Database 1.5.4.8 - pdb-signup CSV_type Actio...
profile-builder 2015-11-11 Profile Builder < 2.2.5 - XSS
profile-builder-pro 2020-02-10 Profile Builder and Profile Builder Pro < 3.1.1 - User Re...
indeed-membership-pro 2020-02-24 Ultimate Membership Pro < 8.6.2 - Multiple CSRF Issues vi...
events-manager 2014-08-01 Events Manager 5.3.8 - Multiple Cross-Site Scripting (XSS)
events-manager-pro 2020-02-05 Events Manager Pro < 2.6.7.2 - CSV Injection
merge-minify-refresh 2020-02-05 Merge + Minify + Refresh < 1.10.7 - Authenticated Arbitra...
wp-fastest-cache 2016-07-13 WP Fastest Cache <= 0.8.5.9 - Local File Inclusion (LFI)
tutor 2020-02-04 Tutor LMS < 1.5.3 - Cross-Site Request Forgery (CSRF)
ninja-forms 2016-07-19 Ninja Forms <= 2.9.51 - Multiple Authenticated Cross-Site...
htaccess 2017-04-12 Multiple BestWebSoft Plugins - Authenticated Cross-Site S...
strong-testimonials 2020-02-01 Strong Testimonials < 2.40.1 - Stored Cross Site Scriptin...
auth0 2020-04-01 Login by Auth0 < 4.0.0 - Multiple Vulnerabilities
gistpress 2020-01-31 GistPress < 3.0.2 - Authenticated Stored XSS
custom-registration-form-bu... 2020-03-05 RegistrationMagic – Custom Registration Forms and User Lo...
custom-registration-form-bu... 2020-03-05 RegistrationMagic – Custom Registration Forms and User Lo...
code-snippets 2016-07-24 Code Snippets <= 2.6.1 - Authenticated Reflected Cross-Si...
elementor 2020-01-14 Elementor < 2.7.5 - Authenticated Arbitrary File Upload
elementor 2020-01-14 Elementor < 2.7.5 - Authenticated Arbitrary File Upload
portfolio-filter-gallery 2020-01-29 Portfolio Filter Gallery < 1.1.3 - CSRF & Reflected XSS
miniorange-saml-20-single-s... 2020-01-28 SAML SP Single Sign On < 4.8.84 - Cross-Site Scripting (X...
blnmrpb 2020-01-27 blnmrpb - Webshell in Fake Plugin
wps-hide-login 2020-01-27 WPS Hide Login < 1.5.5 - Secret Login Page Disclosure