https://wordsec.net/vulnerabilities/plugins/uncanny-automator-pro/uncanny-automator-pro-5301-missing-authorization-to-unauthenticated-license-setting-reset 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-library/link-library-78-authenticated-contributor-stored-cross-site-scripting 2025-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-slider-pro-drag-drop-slider-builder-for-woocommerce/woo-slider-pro-112-missing-authorization-to-authenticated-subscriber-arbitrary-content-deletion 2025-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/order-your-posts-manually/order-your-posts-manually-225-reflected-cross-site-scripting-via-_user_request 2023-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-builder-for-wpforms/pdf-builder-for-wpforms-1288-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/surveyjs/surveyjs-11220-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-vcard-generator/contact-form-vcard-generator-24-unauthenticated-stored-cross-site-scripting 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foxypress/foxypress-0426-cross-site-scripting 2012-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-edit-template-link/template-debugger-312-cross-site-request-forgery 2023-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lbstopattack/plugin-lbstopattack-112-cross-site-request-forgery 2022-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uncanny-toolkit-pro/uncanny-toolkit-pro-for-learndash-414-cross-site-request-forgery 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leadsquared-suite/leadsquared-suite-074-cross-site-request-forgery 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-testimonials/easy-testimonials-361-cross-site-request-forgery-bypass 2020-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kento-post-view-counter/kento-post-view-counter-28-reflected-cross-site-scripting 2016-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wplegalpages/privacy-policy-generator-terms-conditions-generator-wordpress-plugin-wp-legal-pages-327-cross-site-request-forgery 2024-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/autoparts/autoparts-158-unauthenticated-local-file-inclusion 2026-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/voyage-plus/voyage-plus-106-authenticated-contributor-stored-cross-site-scripting-via-post-content-shortcode 2026-05-11T19:04:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobsearch/jobsearch-253-cross-site-request-forgery 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cm-download-manager/cm-download-manager-291-cross-site-request-forgery-via-editheader 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-report-post/wp-report-post-212-authenticated-editor-sql-injection 2023-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/laurent/laurent-31-authenticated-contributor-local-file-inclusion 2026-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/improve-my-city/improve-my-city-16-unauthenticated-stored-cross-site-scripting 2025-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdatatables/wpdatatables-wordpress-data-table-dynamic-tables-table-charts-plugin-6504-unauthenticated-stored-cross-site-scripting-via-csvexcel-data-import 2026-04-20T09:28:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/postaffiliatepro/post-affiliate-pro-1249-authenticated-administrator-stored-cross-site-scripting 2023-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Avada/avada-7116-unauthenticated-sensitive-information-exposure-via-form-uploads-directory-listing 2024-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rock-convert/rock-convert-2102-authenticated-administrator-stored-cross-site-scripting 2022-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-code-placement/easy-code-placement-1811-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/recent-posts-slider-responsive/recent-posts-slider-responsive-101-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-elementor/essential-addons-for-elementor-best-elementor-templates-widgets-kits-woocommerce-builders-5815-authenticated-contributor-stored-cross-site-scripting-via-lightbox-and-modal-widget 2024-06-06T16:18:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor-pro/tutor-lms-pro-elearning-and-online-course-solution-383-authenticated-subscriber-insecure-direct-object-reference-to-viewedit-other-assignments 2025-10-24T17:30:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wr-contactform/wr-contactform-1110-sql-injection 2015-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exports-and-reports/exports-and-reports-091-csv-injection 2022-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kalium/kalium-3183-missing-authorization 2025-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slider-image/responsive-slider-image-slider-slideshow-for-wordpress-286-authenticated-sql-injection 2015-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nearby-now-reviews/nearby-now-reviews-52-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-01-08T21:19:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restaurant-solutions-checklist/restaurant-solutions-checklist-100-authenticated-admin-stored-cross-site-scripting 2024-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wr-age-verification/wr-age-verification-200-authenticated-subscriber-sql-injection 2024-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sweetdate/sweet-date-373-unauthenticated-privilege-escalation 2024-12-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-2941-authenticated-contributor-remote-code-execution 2026-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/good-old-gallery/good-old-gallery-212-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliate-toolkit-starter/affiliate-toolkit-wordpress-affiliate-plugin-333-authenticated-editor-stored-cross-site-scripting 2023-03-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shoutout/shoutout-402-reflected-cross-site-scripting 2026-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/beautique/beautique-15-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-appointments/easy-appointments-31214-unauthenticated-arbitrary-shortcode-execution 2025-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/recaptcha-for-all/recaptcha-for-all-226-cross-site-request-forgery 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wps-bidouille/wps-bidouille-1122-multiple-cross-site-request-forgery 2019-07-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-472-authenticated-sql-injection 2017-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blaze-slide-show-for-wordpress/blaze-slideshow-24-arbitrary-file-upload 2012-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yaysmtp/yaysmtp-264-authenticated-administrator-sql-injection 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter/newsletter-send-awesome-emails-from-wordpress-910-cross-site-request-forgery-to-newsletter-unsubscription 2026-01-19T11:44:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/motopress-hotel-booking-lite/hotel-booking-lite-484-insufficient-path-validation-to-unauthenticated-arbitrary-file-deletion-and-download 2023-12-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-products-slider/product-slider-for-woocommerce-11350-reflected-cross-site-scripting 2024-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/issuu-panel/issuu-panel-211-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetwidgets-for-elementor/jetwidgets-for-elementor-1012-cross-site-request-forgery-to-settings-update 2023-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tablepress/tablepress-224-authenticatedauthor-server-side-request-forgeryssrf-via-_get_import_files 2024-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-calendar/my-calendar-2330-reflected-cross-site-scripting 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-maker/quiz-maker-67082-cross-site-request-forgery 2025-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lemonade-sna-pinterest-edition/lemonade-social-networks-autoposter-pinterest-20-reflected-cross-site-scripting 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexible-invoices/flexible-pdf-invoices-for-woocommerce-amp-wordpress-6013-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/zermatt/zermatt-161-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluentform/contact-form-plugin-by-fluent-forms-for-quiz-survey-and-drag-drop-wp-form-builder-5115-php-object-injection-via-extractdynamicvalues 2024-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/glance-that/glance-that-49-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hero-banner-ultimate/hero-banner-ultimate-134-authenticated-contributor-stored-cross-site-scripting-via-shortcodes 2023-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blox-lite/blox-lite-128-authenticated-contributor-stored-cross-site-scripting 2025-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dl-yandex-metrika/dl-yandex-metrika-12-authenticated-admin-stored-cross-site-scripting 2024-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-to-any/addtoany-share-buttons-1747-authenticated-stored-cross-site-scripting 2021-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/superstorefinder-wp/super-store-finder-697-unauthenticated-sql-injection 2024-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sideblog/sideblog-wordpress-plugin-60-cross-site-request-forgery-to-settings-update-and-stored-cross-site-scripting 2022-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/toolbox/toolbox-14-sql-injection 2012-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shockingly-big-ie6-warning/shockingly-big-ie6-warning-163-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/outbound-link-manager/outbound-link-manager-12-cross-site-request-forgery 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supportboard/support-board-380-unauthenticated-local-file-inclusion 2025-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pre-publish-checklist/pre-publish-checklist-111-insecure-direct-object-reference-to-arbitrary-post-_ppc_meta_key-update 2023-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cookielay/cookielay-120-authenticated-contributor-stored-cross-site-scripting-via-cookielay-shortcode 2024-12-05T19:43:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/floatbox-plus/floatbox-plus-144-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluentform/wp-fluent-forms-3667-stored-cross-site-scripting 2021-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broken-link-checker/broken-link-checker-241-authenticated-admin-server-side-request-forgery 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-print/pdf-print-by-bestwebsoft-203-reflected-cross-site-scripting 2017-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletters-lite/newsletters-4642-directory-traversal 2017-05-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aiomatic-automatic-ai-content-writer/aiomatic-ai-content-writer-editor-chatbot-ai-toolkit-250-authenticated-subscriber-arbitrary-file-upload 2025-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gold-addons-for-elementor/gold-addons-for-elementor-132-missing-authorization-to-authenticated-subscriber-license-activationdeactivation 2024-12-05T19:43:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/very-simple-google-maps/very-simple-google-maps-284-authenticated-contributor-stored-cross-site-scripting 2023-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-users-media/wp-users-media-423-missing-authorization-via-wpusme_save_settings 2023-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-field-bulk-editor/custom-field-bulk-editor-191-reflected-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accordion-slider-gallery/accordion-slider-gallery-27-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/relevanssi-premium/relevanssi-a-better-search-free-premium-2163-4143-stored-cross-site-scripting 2021-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41153-unauthenticated-information-exposure 2025-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geo-mashup/geo-mashup-11318-authenticated-contributor-stored-cross-site-scripting 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kute-boutique/boutique-246-reflected-cross-site-scripting 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/white-label-branding-elementor/white-label-branding-for-elementor-page-builder-102-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tz-plus-gallery/tz-plusgallery-155-authenticated-editor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/links-in-captions/links-in-captions-12-authenticated-contributor-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/official-sendle-shipping-method/sendle-shipping-517-reflected-cross-site-scripting 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-categories/list-categories-04-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-05-29T15:51:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-tickets/event-tickets-41071-csv-injection 2019-09-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/curtain/curtain-102-authenticated-admin-stored-cross-site-scripting 2022-04-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletters-lite/newsletters-413-unauthenticated-sql-injection-via-wpmlsubscriber_id-parameter 2026-06-09T20:03:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcode-ajax/shortcode-loader-10-unauthenticated-arbitrary-shortcode-execution-via-code-parameter 2025-12-12T16:11:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kaswara/kaswara-modern-vc-addons-301-arbitrary-file-upload 2021-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mamurjor-employee-info/mamurjor-employee-info-100-cross-site-request-forgery-to-arbitrary-employee-and-related-data-manipulation 2026-01-06T20:30:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extensions-leaflet-map/extensions-for-leaflet-map-341-reflected-cross-site-scripting 2023-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/igniteup/igniteup-coming-soon-and-maintenance-mode-341-authenticated-admin-stored-cross-site-scripting 2022-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modern-events-calendar-lite/modern-events-calendar-lite-5164-unauthenticated-events-export 2021-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rss-aggregator/wp-rss-aggregator-42311-missing-authorization-to-authenticated-subscriber-feed-state-update 2024-07-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-tables/ninja-tables-easy-data-table-builder-5018-unauthenticated-php-object-injection-to-limited-remote-code-execution 2025-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sg-security/siteground-security-125-authorization-weakness-to-authentication-bypass 2022-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/book-press/bookpress-for-book-authors-127-missing-authorization 2025-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/aidreform/themes-from-chimpstudio-and-pixfill-various-versions-unauthenticated-arbitrary-file-upload 2022-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-digital-downloads/easy-digital-downloads-31-31141-unauthenticated-arbitrary-password-reset-to-privilege-escalation 2023-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xcloner-backup-and-restore/backup-restore-and-migrate-wordpress-sites-with-the-xcloner-plugin-4216-unauthenticated-plugin-settings-reset 2022-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdatatables/wpdatatables-2149-authenticated-contributor-stored-cross-site-scripting 2023-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-fortnox-integration/woocommerce-fortnox-integration-455-missing-authorization 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tribute-testimonial-gridslider/tribute-testimonials-wordpress-testimonial-gridslider-104-authenticated-contributor-stored-cross-site-scripting 2024-11-22T15:09:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/surecart/surecart-ecommerce-made-easy-for-selling-physical-products-digital-downloads-subscriptions-donations-payments-422-authenticated-subscriber-stored-cross-site-scripting 2026-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-gateway-stripe/stripe-gateway-760-cross-site-request-forgery 2023-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-superb-slideshow-transition-gallery-with-random-effect/woo-superb-slideshow-transition-gallery-with-random-effect-91-authenticated-contributor-sql-injection 2025-10-02T22:35:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-construction-mode/wp-construction-mode-18-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-field-suite/custom-field-suite-267-authenticated-contributor-stored-cross-site-scripting-via-cfspost_title 2024-06-19T13:17:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mshop-naver-talktalk/-120-authenticated-contributor-stored-cross-site-scripting 2024-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-page-styler/all-in-one-custom-login-page-711-missing-authorization-to-authenticated-subscriberprivilege-escalation 2024-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ht-mega-for-elementor/ht-mega-absolute-addons-for-elementor-246-authenticated-contributor-stored-cross-site-scripting-via-lightbox-widget 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pondol-carousel/pondol-carousel-10-reflected-cross-site-scripting 2016-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aio-time-clock-lite/all-in-one-time-clok-lite-13320-authenticated-admin-stored-cross-site-scripting 2022-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-addons/master-addons-for-elementor-20541-missing-authorization-on-duplicate-post 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addons-for-beaver-builder/livemesh-addons-for-beaver-builder-361-authenticated-editor-stored-cross-site-scripting 2024-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/znajdz-prace-z-pracapl/znajd-prac-z-pracapl-223-authenticated-contributor-stored-cross-site-scripting 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/adifier-system/adifier-system-314-unauthenticated-sql-injection 2023-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uncanny-learndash-toolkit/uncanny-toolkit-for-learndash-3702-authenticated-contributor-stored-cross-site-scripting 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/staticpress/staticpress-045-missing-authorization 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/external-rss-reader/silencesoft-rss-reader-06-cross-site-request-forgery-to-rss-feed-deletion 2025-08-22T15:52:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/topbar/topbar-100-cross-site-request-forgery-to-settings-update 2025-10-14T19:36:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/carzone/car-zone-37-authenticated-subscriber-php-object-injection 2026-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/heartland-management-terminal/heartland-management-terminal-13-0-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-liveblogs/easy-liveblogs-235-authenticated-contributor-stored-cross-site-scripting 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blossomthemes-email-newsletter/blossomthemes-email-newsletter-226-authenticated-admin-server-side-request-forgery 2024-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lifterlms/lifterlms-wp-lms-for-elearning-online-courses-quizzes-785-missing-authorization-to-authenticated-subscriber-arbitrary-post-deletion 2024-12-17T14:26:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ibtana-visual-editor/ibtana-1253-missing-authorization-to-authenticated-contributor-arbitrary-content-deletion 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/robo-gallery/photo-gallery-images-slider-in-rbs-image-gallery-3219-authenticated-author-stored-cross-site-scripting-via-image-title 2024-06-18T18:55:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/workreap/workreap-331-authentication-bypass-via-workreap_verify_user_account 2025-06-11T16:31:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ad-inserter/ad-inserter-287-authenticated-contributor-stored-cross-site-scripting-via-custom-field 2025-11-04T21:29:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/services-section/services-section-block-144-authenticated-contributor-stored-cross-site-scripting-via-link-block-attribute 2026-06-17T16:51:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bamboo-columns/bamboo-columns-161-authenticated-contributor-stored-cross-site-scripting 2023-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acf-front-end-editor/acf-front-end-editor-202-missing-authorization-to-authenticated-subscriber-arbitrary-content-update 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zephyr-modern-admin-theme/zephyr-admin-theme-141-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/edd-invoices/easy-digital-downloads-pdf-invoices-104-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/crm-customer-relationship-management-by-vcita/crm-and-lead-management-by-vcita-275-missing-authorization-to-authenticated-susbcriber-widget-toggle 2025-03-12T13:08:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/digiqole/digiqole-227-authenticated-contributor-local-file-inclusion 2025-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dportfolio/dportfolio-20-reflected-cross-site-scripting 2024-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-frontend/wp-user-frontend-368-missing-authorization-via-ajax-actions 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-parcel-pro/parcel-pro-184-reflected-cross-site-scripting 2024-10-17T15:42:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/classified-listing/classified-listing-3116-authenticated-contributor-local-file-inclusion 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-ping-optimizer/wordpress-ping-optimizer-235130-cross-site-request-forgery-to-log-clearing 2024-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fileorganizer/fileorganizer-114-authenticated-administrator-local-javascript-file-inclusion 2024-12-06T21:06:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tablesome/tablesome-128-missing-authorization 2026-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-builder-sandwich/page-builder-sandwich-front-end-wordpress-page-builder-plugin-510-sensitive-information-exposure 2024-03-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jabberbenachrichtigung/jabbernotification-099-rc2-reflected-cross-site-scripting-via-adminphp-path_info 2025-12-04T17:30:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lead-form-builder/responsive-contact-form-builder-lead-generation-plugin-197-authenticated-admin-stored-cross-site-scripting 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-wordpress-lms-plugin-4264-authenticated-contributor-stored-cross-site-scripting 2024-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accordions-wp/accordion-303-authenticated-editor-stored-cross-site-scripting 2026-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hide-admin-bar-based-on-user-roles/hide-admin-bar-based-on-user-roles-310-cross-site-request-forgery 2022-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-banners/easy-banners-14-cross-site-scripting 2014-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar/the-events-calendar-6151-unauthenticated-sql-injection 2025-09-11T12:26:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quillforms/quill-forms-330-cross-site-request-forgery 2023-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-comment-fields/comments-extra-fields-for-postpages-and-cpt-50-cross-site-request-forgery 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-networks-auto-poster-facebook-twitter-g/nextscripts-446-reflected-cross-site-scripting 2024-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/modernize/modernize-340-missing-authorization 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/http-headers/http-headers-1188-authenticatedadministrator-sql-injection 2023-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js-support-ticket/js-help-desk-best-help-desk-support-plugin-283-missing-authorization 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/exzo/exzo-124-missing-authorization 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maxbuttons/maxbuttons-92-authenticated-administrator-stored-cross-site-scripting 2022-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/verge3d/verge3d-494-missing-authorization 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-79-reflected-cross-site-scripting 2022-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcodes-finder/shortcodes-finder-154-reflected-cross-site-scripting-via-nonce 2024-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-map-block/wp-map-block-gutenberg-map-block-for-google-map-and-openstreet-map-122-stored-cross-site-scripting 2021-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-staging/wp-staging-wordpress-backup-plugin-migration-backup-restore-343-authenticated-admin-arbitrary-file-upload 2024-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/music-sheet-viewer/music-sheet-viewer-41-authenticated-contributor-stored-cross-site-scripting 2025-01-30T00:43:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/helpdeskwp/help-desk-wp-120-authenticated-editor-stored-cross-site-scripting 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/esselinknu-settings/esselinknu-settings-294-cross-site-request-forgery 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-to-bible/link-to-bible-259-authenticated-administrator-stored-cross-site-scripting 2024-07-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-password-reset/user-password-reset-10-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ntzantispam/ntz-antispam-20e-cross-site-request-forgery-to-settings-update 2024-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chart-expert/chart-expert-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-11-10T15:15:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contest-gallery/contest-gallery-2134-authenticated-author-arbitrary-file-deletion 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pretty-google-calendar/pretty-google-calendar-151-authenticatedcontributor-stored-cross-site-scripting-via-pretty_google_calendar-shortcode 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duplicate-page/duplicate-page-33-sql-injection 2019-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/car-rental/car-rental-by-bestwebsoft-112-authenticated-admin-stored-cross-site-scripting 2022-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/complianz-gdpr/complianz-gdprccpa-cookie-consent-644-cross-site-request-forgery-via-ajax_edit_item 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-album/gallery-image-and-video-gallery-with-thumbnails-203-authenticated-contributor-sql-injection 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/metform/metform-contact-form-survey-quiz-custom-form-builder-for-elementor-388-unauthenticated-sensitive-information-exposure 2024-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restaurant-reservations/five-star-restaurant-reservations-2716-unauthenticated-payment-bypass-via-php-type-juggling-in-payment_id-parameter 2026-04-29T20:28:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user/wp-user-70-authenticated-administrator-stored-cross-site-scripting 2022-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jw-player-7-for-wp/jw-player-for-wordpress-237-missing-authorization 2026-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/virusdie/virusdie-117-missing-authorization-to-authenticated-subscriber-api-key-disclosure 2026-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ewww-image-optimizer/ewww-image-optimizer-581-cross-site-request-forgery-bypass 2020-09-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-social-icons/easy-social-icons-308-reflected-cross-site-scripting 2021-09-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-with-yourmembership/yourmembership-single-sign-on-113-missing-authorization 2023-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/manager-for-icomoon/manager-for-icomoon-21-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-05-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bck-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang/thanh-ton-qut-m-qr-code-t-ng-momo-viettelpay-vnpay-v-40-ngn-hng-vit-nam-201-unauthenticated-stored-cross-site-scripting 2024-09-23T18:36:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dynamic-elementor-addons/dynamic-elementor-addons-100-authenticated-contributor-local-file-inclusion 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/peakshops/peakshops-159-authenticated-contributor-php-object-injection 2026-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-captcha/easy-captcha-10-missing-authorization-via-easy_captcha_update_settings 2023-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-donation-plugin-and-fundraising-platform-430-missing-authorization-to-authenticated-contributor-campaign-data-view-and-modification 2025-06-18T17:35:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-email-capture/wordpress-email-marketing-plugin-wp-email-capture-393-cross-site-request-forgery 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/siteguard/siteguard-wp-plugin-179-missing-authorization 2026-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/demomentsomtres-shortcodes/demomentsomtres-shortcodes-111-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-06-01T19:44:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mm-email2image/mm-email2image-025-cross-site-request-forgery-to-stored-cross-site-scripting 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-addon/ppom-for-woocommerce-3205-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2023-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-layout-builder/page-layout-builder-193-reflected-cross-site-scripting 2016-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/preferred-languages/preferred-languages-222-authenticated-administrator-stored-cross-site-scripting 2024-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/houzez-property-feed/houzez-property-feed-254-unauthenticated-arbitrary-file-download 2025-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-history/simple-history-331-authenticated-subscriber-csv-injection 2023-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax_multi_upload/ajax-multi-upload-11-arbitrary-file-upload 2012-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multiple-post-passwords/multiple-post-passwords-111-authenticated-administrator-stored-cross-site-scripting 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-google-sheets-connector/cf7-google-sheets-connector-5017-missing-authorization 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-post-to-pdf/wp-post-to-pdf-231-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/phonepe-payment-solutions/phonepe-payment-solutions-1015-authenticated-subscriber-server-side-request-forgery 2023-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/vilva/vilva-122-cross-site-request-forgery-to-notice-dismissal 2024-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/appten-image-rotator/image-rotator-20-reflected-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/findall/findall-business-directory-wordpress-theme-14-unauthenticated-local-file-inclusion 2026-03-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-clean-up/wp-clean-up-123-cross-site-request-forgery-via-wp_clean_up_optimize 2023-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fomo-payment-gateway-for-woocommerce/fomo-pay-chinese-payment-solution-204-reflected-cross-site-scripting 2025-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ldd-directory-lite/ldd-directory-lite-35-reflected-cross-site-scripting 2022-10-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hmapsprem/hero-maps-premium-customizable-google-maps-plugin-239-authenticated-subscriber-sql-injection 2025-03-06T19:33:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/noo-jobmonster/jobmonster-479-authentication-bypass 2025-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slidedeck2/slidedeck-2-233-localremote-file-inclusion 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fast-video-and-image-display/fast-video-and-image-display-252-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sparkle-demo-importer/sparkle-demo-importer-147-missing-authorization-to-authorizedsubscriber-postpagesattachements-deletion-and-demo-data-import 2024-06-21T11:04:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-generator-addon-for-elementor-page-builder/pdf-generator-addon-for-elementor-page-builder-210-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcom-member/wpcom-member-176-unauthenticated-time-based-sql-injection 2025-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/doneren-met-mollie/doneren-met-mollie-2102-unauthenticated-reflected-cross-site-scripting-via-search 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wedesigntech-portfolio/wedesigntech-portfolio-102-missing-authorization 2025-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gigpress/gigpress-238-sql-injection 2015-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hc-custom-wp-admin-url/hc-custom-wp-admin-url-14-cross-site-request-forgery 2022-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vk-google-job-posting-manager/vk-google-job-posting-manager-1222-authenticated-contributor-stored-cross-site-scripting 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-banners/custom-banners-322-cross-site-request-forgery-bypass 2021-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nexter-extension/nexter-extension-203-reflected-cross-site-scripting-via-post-and-post_id 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-monster/event-management-tickets-booking-146-authenticated-administrator-stored-cross-site-scripting-via-settings 2023-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-media/download-media-142-missing-authorization-via-generate_link_for_media 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-data-filter-and-taxonomy-filter/mdtf-meta-data-and-taxonomies-filter-1333-authenticated-contributor-sql-injection 2024-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restrict-user-registration/restrict-user-registration-101-cross-site-request-forgery-to-settings-update 2025-10-02T22:32:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tracking-code-manager/tracking-code-manager-1115-cross-site-scripting 2017-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-avatar/profilepress-4132-information-disclosure-via-debug-log 2023-10-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-user-profile-registration-login-member-directory-content-restriction-membership-plugin-2101-unauthenticated-blind-sql-injection 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/progress-planner/progress-planner-180-missing-authorization-to-authenticated-subscriber-arbitrary-options-update 2025-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kimili-flash-embed/kimili-flash-embed-253-authenticated-contributor-stored-cross-site-scripting 2024-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-data-access/wp-data-access-537-authenticated-subscriber-privilege-escalation 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/browse-as/browse-as-02-authenticated-subscriber-authentication-bypass-via-cookie 2025-05-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contextual-related-posts/contextual-related-posts-421-authenticated-contributor-stored-cross-site-scripting-via-other_attributes 2026-04-17T21:46:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/futurio-extra/futurio-extra-162-authenticated-admin-sql-injection 2022-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-warfare/social-sharing-plugin-social-warfare-443-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/goqsmile/goqsmile-101-reflected-cross-site-scripting 2024-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accordion/accordion-all-versions-arbitrary-file-upload 2013-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-maintenance-mode/yith-maintenance-mode-137-stored-cross-site-scripting 2021-09-15T11:59:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scw-seat-reservation/advance-seat-reservation-management-for-woocommerce-31-unauthenticated-sql-injection 2025-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geodirectory/geodirectory-2370-missing-authorization-via-geodirectory_rated 2024-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-category-selection-widget/woocommerce-product-categories-selection-widget-20-reflected-cross-site-scripting 2023-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-maintenance/wp-maintenance-6192-ip-spoofing-to-maintenance-mode-bypass 2024-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amazonjs/amazon-js-010-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/percent-to-infograph/percent-to-infograph-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-02-13T18:28:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/twitscription/twitscription-011-reflected-cross-site-scripting-via-adminphp-path_info 2025-12-04T17:29:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ecommerce-paypal/easy-paypal-buy-now-button-181-cross-site-request-forgery 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscriptions-memberships-for-paypal/subscriptions-memberships-for-paypal-117-unauthenticated-fake-payment-creation 2025-11-21T18:49:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/news/news-01-cross-site-scripting 2011-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bbs-e-popup/bbs-e-popup-245-reflected-cross-site-scripting 2023-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geo-my-wp/geo-my-wordpress-4504-missing-authorization-via-get_field_options_ajax 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integromat-connector/make-formerly-integromat-connector-152-authenticated-subscriber-information-disclosure 2022-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-logout-shortcode/login-logout-shortcode-110-authenticated-contributor-stored-cross-site-scripting-via-class-parameter 2024-10-03T13:33:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/taxonomy-switcher/taxonomy-switcher-103-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/fingo/findgo-1355-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-ups-pickup/opsi-israel-domestic-shipments-268-missing-authorization 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ignitiondeck/ignitiondeck-2010-missing-authorization 2025-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpadverts/wpadverts-classifieds-plugin-230-missing-authorization 2026-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/numinous/numinous-130-missing-authorization 2026-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-video-gallery/all-in-one-gallery-249-admin-local-file-inclusion 2021-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gdpr-cookie-compliance/gdpr-cookie-compliance-4124-cross-site-request-forgery-to-license-modification 2023-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gdy-modular-content/gdy-modular-content-0992-reflected-cross-site-scripting 2025-01-06T15:38:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ladipage/ladiapp-43-missing-authorization 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ratings-shorttags/review-ratings-16-cross-site-request-forgery-to-stored-cross-site-scripting 2024-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-221-authenticated-admin-cross-site-scripting 2007-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/doccure/doccure-150-unauthenticated-arbitrary-user-password-change 2025-09-08T05:36:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusion-slider/universal-slider-165-authenticated-contributor-php-object-injection 2024-06-18T14:43:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uipress-lite/uipress-lite-effortless-custom-dashboards-admin-themes-and-pages-3508-missing-authorization-to-authenticated-subscriber-plugin-settings-update 2025-11-20T19:17:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rafflepress/giveaways-and-contests-by-rafflepress-11216-authenticated-editor-stored-cross-site-scripting 2024-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/invelity-products-feeds/invelity-products-feeds-126-cross-site-request-forgery-to-arbitrary-file-deletion 2026-03-20T15:21:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/letsrecover-woocommerce-abandoned-cart/letsrecover-110-authenticated-admin-sql-injection 2022-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/currency-switcher-woocommerce/currency-switcher-2111-authorization-bypass 2019-11-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tinymce-colorpicker/tinymce-color-picker-12-cross-site-request-forgery 2014-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-ping-optimizer/wordpress-ping-optimizer-235123-cross-site-request-forgery 2022-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mage-eventpress/wpevently-448-authenticated-contributor-php-object-injection 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unusedcss/rapidload-power-up-for-autoptimize-171-cross-site-request-forgery 2023-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-invisible-recaptcha/cf7-invisible-recaptcha-133-cross-site-request-forgery-via-vsz_cf7_invisible_recaptcha_page 2023-03-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bnm-blocks/magazine-companion-123-authenticated-contributor-stored-cross-site-scripting 2025-11-10T15:05:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/marker-io/markerio-118-cross-site-request-forgery 2024-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recall/wp-recall-registration-profile-commerce-more-16268-insecure-direct-object-reference-to-unauthenticated-arbitrary-password-update 2024-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aweber-web-form-widget/aweber-7320-authenticated-admin-stored-cross-site-scripting 2025-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddyboss-platform/buddyboss-platform-178-sql-injection 2021-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-restful/wp-restful-01-multiple-cross-site-scripting 2014-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-support/awesome-support-wordpress-helpdesk-support-plugin-317-cross-site-scripting 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-1093-authenticated-administrator-stored-cross-site-scripting 2024-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-post-block/advanced-post-block-display-posts-pages-or-custom-posts-on-your-page-1134-missing-authorization-to-information-disclosure 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userfeedback-lite/user-feedback-1101-missing-authorization 2026-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscribe-to-unlock-lite/subscribe-to-unlock-lite-130-authenticated-contributor-local-file-inclusion 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foxypress/foxypress-0421-arbitrary-file-upload 2012-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/albo-pretorio-on-line/albo-pretorio-online-461-reflected-cross-site-scripting 2023-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scormcloud/scorm-cloud-for-wordpress-107-sql-injection 2011-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-social-share-buttons3/easy-social-share-buttons-94-authenticated-subscriber-local-file-inclusion 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/metform/metform-elementor-contact-form-builder-331-authenticated-subscriber-information-disclosure-via-mf_last_name-shortcode 2023-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-any-api/contact-form-to-any-api-112-authenticated-administrator-sql-injection-via-form_id 2023-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coming-soon-by-boomdevs/boomdevs-wordpress-coming-soon-104-unauthenticated-information-exposure 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-shamsi/wp-shamsi-433-missing-authorization-leading-to-authenticated-subscriber-attachment-deletion 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jeg-elementor-kit/jeg-elementor-kit-301-authenticated-contributor-stored-cross-site-scripting-via-countdown-widget 2026-01-07T14:17:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/author-discussion/author-discussion-022-authenticated-subscriber-sql-injection 2024-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder-pro/profile-builder-310-privilege-escalation 2020-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oxyextras/oxyextras-144-unauthenticated-cross-site-scripting 2024-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirection/redirection-2212-reflected-cross-site-scripting 2012-05-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qtranslate/qtranslate-2539-cross-site-request-forgery 2013-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rss-poster/wp-rss-poster-100-sql-injection 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-real-estate/essential-real-estate-435-missing-authorization-to-stored-cross-site-scripting 2023-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-upload/wordpress-file-upload-4247-missing-authorization 2024-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/radio-player/radio-player-live-shoutcast-icecast-and-any-audio-stream-player-for-wordpress-2073-missing-authorization-to-authenticated-subscriber-information-disclosure 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpbot-pro/wpbot-pro-wordpress-chatbot-1362-authenticated-subscriber-arbitrary-file-deletion 2025-05-16T16:36:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-form-builder/easy-form-builder-393-missing-authorization-to-authenticated-subscriber-sensitive-form-response-data-exposure 2026-02-13T14:26:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webtexttool/textmetrics-364-missing-authorization 2026-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/graphina-elementor-charts-and-graphs/graphina-304-missing-authorization 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/1-flash-gallery/1-flash-gallery-190-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sms-ovh/sms-ovh-01-reflected-cross-site-scripting 2021-09-09T16:20:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-simple-paypal-shopping-cart/wordpress-simple-paypal-shopping-cart-512-unauthenticated-information-exposure-via-file_url-parameter 2025-04-22T19:00:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-webinarsystem/webinarpress-13327-authenticated-administrator-server-side-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-order-export-lite/advanced-order-export-for-woocommerce-409-authenticated-customer-stored-cross-site-scripting 2026-06-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/permalink-manager/permalink-manager-lite-243-reflected-cross-site-scripting 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-post-type-page-template/custom-post-type-page-template-11-cross-site-request-forgery 2023-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagerecycle-pdf-image-compression/imagerecycle-pdf-image-compression-3113-missing-authorization-to-settings-update-in-optimizeallon 2024-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pluscaptcha/pluscaptcha-206-reflected-cross-site-scripting 2015-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/get-custom-field-values/get-custom-field-values-40-arbitrary-post-metadata-access 2021-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sunshine-photo-cart/sunshine-photo-cart-328-missing-authorization 2024-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/betheme/betheme-2662-missing-authorization-to-post-title-change 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/site-mode/coming-soon-maintenance-mode-111-unauthenticated-local-file-inclusion 2025-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nmedia-user-file-uploader/frontend-file-manager-232-missing-authorization 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-addons-for-gutenberg/spectra-wordpress-gutenberg-blocks-2150-authenticated-contributor-stored-cross-site-scripting 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restore-permanently-delete-post-or-page-data/restore-permanently-delete-post-or-page-data-10-cross-site-request-forgery 2025-08-22T15:52:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/primary-addon-for-elementor/primary-addon-for-elementor-157-authenticated-contributor-stored-cross-site-scripting 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-spoiler/simple-spoiler-12-13-unauthenticated-arbitrary-shortcode-execution 2024-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-invoice/wp-invoice-web-invoice-and-billing-410-missing-authorization 2016-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/safety-exit/safety-exit-170-authenticated-admin-stored-cross-site-scripting 2024-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/private-google-calendars/private-google-calendars-20250811-missing-authorization-to-authenticated-subscriber-settings-reset 2025-11-10T15:11:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vertical-scroll-recent-post/vertical-scroll-recent-post-138-reflected-cross-site-scripting 2022-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cmsmasters-content-composer/cmsmasters-content-composer-258-missing-authorization 2025-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforms-lite/contact-form-by-wpforms-11002-cross-site-request-forgery 2026-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp01/wp01-speed-security-seo-consultant-262-authenticated-subscriber-arbitrary-file-download 2025-03-14T14:25:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/simplecharm/simplecharm-143-reflected-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/envira-gallery-lite/gallery-plugin-for-wordpress-envira-photo-gallery-1110-missing-authorization-to-authenticated-contributor-gallery-conversion 2025-11-07T20:58:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formidable/formidable-form-builder-20503-unauthenticated-stored-cross-site-scripting 2017-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ari-fancy-lightbox/ari-fancy-lightbox-1317-authenticated-author-stored-cross-site-scripting 2024-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/workscout-core/workscout-core-1706-unauthenticated-stored-cross-site-scripting 2026-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/anarkali/anarkali-109-unauthenticated-local-file-inclusion 2026-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sg-helper/sg-helper-10-authenticated-administrator-stored-cross-site-scripting-via-svg-file-upload 2024-12-03T14:20:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-addons-for-gutenberg/spectra-266-missing-authorization 2023-07-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mystickyelements/my-sticky-elements-233-missing-authorization 2025-12-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/t1/t1-theme-190-open-redirect 2023-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spice-blocks/spice-blocks-2074-missing-authorization 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-photo-album-plus/wp-photo-album-plus-9108001-unauthenticated-sql-injection 2026-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/404-solution/404-solution-2357-authenticated-admin-sql-injection 2024-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-menu-manager/admin-menu-manager-103-cross-site-request-forgery 2025-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-status-notifier/post-status-notifier-lite-and-premium-1116-reflected-cross-site-scripting-via-page 2024-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wptobe-signinup/wptobe-signinup-112-reflected-cross-site-scripting 2025-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theaisle-core/the-aisle-core-205-unauthenticated-local-file-inclusion 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userfeedback-lite/user-feedback-create-interactive-feedback-form-user-surveys-and-polls-in-seconds-180-missing-authorization-to-information-disclosure 2025-10-24T17:09:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/menu-icons/menu-icons-by-themeisle-01313-authenticated-author-stored-cross-site-scripting-via-svg-upload 2024-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-secure-maintainance/wp-secure-maintenance-16-authenticated-admin-stored-cross-site-scripting 2024-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cloudflare/cloudflare-4122-missing-authorization-via-initproxy 2024-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-image-alt-text-generator-for-wp/ai-image-alt-text-generator-for-wp-106-reflected-cross-site-scripting 2025-01-30T00:50:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirects/redirects-121-missing-authorization 2023-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visitors-online/visitors-online-by-bestwebsoft-100-reflected-cross-site-scripting 2017-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pretty-url/pretty-url-154-reflected-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/archivist-custom-archive-templates/archivist-custom-archive-templates-174-authenticatedadmin-stored-cross-site-scripting 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aawp/amazon-affiliate-317-reflected-cross-site-scripting 2022-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-migration/all-in-one-wp-migration-762-unauthenticated-reflected-cross-site-scripting 2022-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ovabookpro/bookpro-110-unauthenticated-arbitrary-file-deletion 2026-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wish-list-for-woocommerce/wishlist-for-woocommerce-322-authenticated-contributor-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/delhivery-logistics-courier/delhivery-logistics-courier-10107-authenticated-subscriber-sql-injection 2024-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/navayan-subscribe/navayan-subscribe-113-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/halstein/halstein-18-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dc-woocommerce-multi-vendor/wc-marketplace-413-missing-authorization 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/u-design-core/udesign-core-4141-authenticated-contributor-stored-cross-site-scripting 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-spam-remover/user-spam-remover-11-unauthenticated-information-exposure 2025-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supreme-addons-for-beaver-builder-lite/supreme-addons-for-beaver-builder-109-authenticated-contributor-stored-cross-site-scripting-via-auto_qrcodesabb-shortcode 2025-07-23T20:52:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/canto/canto-190-blind-server-side-request-forgery-via-downloadphp 2020-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customize-login-page/customize-login-page-11-cross-site-request-forgery 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contactme/contact-form-by-contactmecom-23-cross-site-scripting 2015-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newspack-ads/newspack-ads-1471-authenticated-contributor-stored-cross-site-scripting 2024-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-quiz/wp-adv-quiz-102-authenticated-admin-stored-cross-site-scripting-via-quiz-title 2024-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-manager/events-manager-645-reflected-cross-site-scripting 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/h5pxapikatchu/snordians-h5pxapikatchu-0417-unauthenticated-stored-cross-site-scripting-via-insert_data 2025-11-13T13:59:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpack-lite-for-elementor/powerpack-elementor-addons-free-widgets-extensions-and-templates-290-authenticated-contributor-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cms-press/cms-press-023-authenticated-administrator-stored-cross-site-scripting 2023-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-urls/simple-urls-114-reflected-cross-site-scripting 2023-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/limit-login-attempts-reloaded/limit-login-attempts-reloaded-22526-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-12-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/daily-prayer-time-for-mosques/daily-prayer-time-20230308-cross-site-request-forgery 2023-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-contact-form/quick-contact-form-8031-authenticated-contributor-stored-cross-site-scripting 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-live-chat-support/wp-live-chat-support-8032-unprotected-functions 2019-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-admin-login-styler-wpzest/custom-admin-login-page-wpzest-120-authenticated-administrator-stored-cross-site-scripting 2023-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fancier-author-box/fancier-author-box-by-thematosoup-14-authenticated-admin-stored-cross-site-scripting 2022-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wplms/wplms-4900-cross-site-request-forgery 2023-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-post-real-time-statistics/wp-post-statistics-visitors-visits-counter-25-cross-site-scripting 2022-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widget-options/widget-options-advanced-conditional-visibility-for-gutenberg-blocks-classic-widgets-423-authenticated-contributor-remote-code-execution 2026-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/emergency-password-reset/emergency-password-reset-80-cross-site-request-forgery 2024-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/relocate-upload/relocate-upload-0241-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/werkstatt-plugin/werkstatt-166-authenticated-contributor-local-file-inclusion 2025-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/discy/discy-51-cross-site-request-forgery-to-settings-update 2022-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-chat-box/firebase-support-chat-management-311-missing-authorization-to-authenticated-subscriber-privilege-escalation 2026-05-26T17:20:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/adforest/adforest-6011-missing-authorization 2025-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dtracker/dtracker-15-authorization-bypass 2017-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-shopify/wp-shopify-153-reflected-cross-site-scripting 2025-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/furikake/furikake-010-open-redirect 2018-01-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/hostiko/hostiko-9436-unauthenticated-stored-cross-site-scripting 2026-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/royal-elementor-kit/royal-elementor-kit-10116-cross-site-request-forgery-to-notice-dismissal 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack/element-pack-pro-7210-missing-authorization 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youtube-video-player/youtube-embed-playlist-and-popup-238-contributor-stored-cross-site-scripting 2021-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dagda/dagda-theme-50-arbitrary-file-upload 2012-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html5-video-player/html5-video-player-mp4-video-player-plugin-and-block-2532-missing-authorization-in-multiple-functions-via-h5vp_ajax_handler 2024-09-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/structured-content/structured-content-162-authenticated-contributor-stored-cross-site-scripting 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modal-window/modal-window-create-popup-modal-window-539-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/olympus-shortcodes/olympus-shortcodes-104-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-slimstat/slimstat-analytics-533-unauthenticated-stored-cross-site-scripting-via-fh-parameter 2026-01-08T18:00:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sermon-browser/sermon-browser-0436-sql-injection 2011-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ns-maintenance-mode-for-wp/ns-maintenance-mode-for-wp-131-unauthenticated-information-exposure 2025-10-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/precise-columns/precise-columns-10-authenticated-contributor-stored-cross-site-scripting 2025-11-10T15:10:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formidable/formidable-forms-601-ip-spoofing-via-http-header 2023-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mailster/wp-mailster-18170-authenticated-contributor-stored-cross-site-scripting 2024-12-02T20:47:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/epicwin-subscribers/epicwin-plugin-15-cross-site-request-forgery-to-sql-injection 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recipe-maker/wp-recipe-maker-1032-insecure-direct-object-reference-to-unauthenticated-arbitrary-post-metadata-modification-via-recipeid-parameter 2026-02-26T15:59:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/Ultimate_VC_Addons/ultimate-addons-for-wpbakery-page-builder-31914-authenticated-contributor-stored-cross-site-scripting 2023-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-optimization/image-optimizer-by-elementor-171-missing-authorization 2026-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-spreadsheets/cf7-spreadsheets-232-authenticated-subscriber-stored-cross-site-scripting 2025-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcrm/wpcrm-crm-for-contact-form-cf7-woocommerce-320-reflected-cross-site-scripting 2025-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premmerce/premmerce-1320-authenticated-subscriber-stored-cross-site-scripting-via-premmerce_wizard_actions-ajax-endpoint 2026-02-06T20:25:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sms-alert/sms-alert-order-notifications-390-missing-authorization 2026-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpjobboard/wpjobboard-553-unauthenticated-stored-cross-site-scripting 2020-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widgetize-pages-light/widgetize-pages-light-30-authenticated-administrator-stored-cross-site-scripting 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/underconstruction/underconstruction-109-cross-site-request-forgery 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vk-block-patterns/vk-block-patterns-1310-missing-authorization 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/moosend-email-marketing/moosend-website-connector-10189-missing-authorization 2022-12-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-2-factor-authentication/minioranges-google-authenticator-555-authenticated-admin-cross-site-scripting 2022-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/namaste-lms/namaste-lms-2591-authenticated-admin-stored-cross-site-scripting 2023-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-form/jotform-online-forms-131-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpvivid-backuprestore/migration-backup-staging-wpvivid-0935-sensitive-information-disclosure 2020-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-no-cache/content-no-cache-prevent-specific-content-from-being-cached-012-unauthenticated-private-content-disclosure 2024-12-23T20:43:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-logger/login-logger-121-cross-site-request-forgery 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/carzine/carzine-146-reflected-cross-site-scripting 2025-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpglobus/wpglobus-multilingual-everything-196-cross-site-scripting-via-wpglobus_optionpost_typepost 2018-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/web-minimalist-200901/web-minimalist-200901-11-cross-site-scripting 2011-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpmastertoolkit/wpmastertoolkit-1131-authenticated-admin-arbitrary-file-upload 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-bootstrap-blocks/all-bootstrap-blocks-1319-authenticated-contributor-stored-cross-site-scripting 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-post-type-ui/custom-post-type-ui-1180-missing-authorization-to-unauthenticated-previously-administrator-custom-post-type-modification 2025-12-03T18:13:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/primary-addon-for-elementor/primary-addon-for-elementor-158-authenticated-contributor-stored-cross-site-scripting 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/shiftup/shiftup-13-unauthenticated-php-object-injection 2026-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-copysafe-web/copysafe-web-protection-314-authenticated-contributor-stored-cross-site-scripting 2024-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pz-frontend-manager/pz-frontend-manager-106-missing-authorization-to-arbitrary-user-deletion-via-datatype-parameter 2026-04-07T17:39:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletters-lite/newsletters-410-unauthenticated-local-file-inclusion 2025-07-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-google-data-studio/embed-google-datastudio-100-authenticated-contributor-stored-cross-site-scripting 2025-09-11T14:48:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/motors-car-dealership-classified-listings/motors-car-dealership-classified-listings-plugin-1463-authenticated-subscriber-stored-cross-site-scripting 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/category-icon/category-icon-102-authenticated-editor-stored-cross-site-scripting 2025-12-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcodes-ui/shortcodes-ui-198-cross-site-request-forgery 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetpack/jetpack-342-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anyclip-media/anyclip-luminous-studio-133-authenticated-administrator-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sms/wp-sms-5412-authenticated-stored-cross-site-scripting 2021-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-iconics/wp-iconics-004-authenticated-contributor-stored-cross-site-scripting 2025-11-10T15:25:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gdpr-tools/gdpr-tools-102-authenticated-subscriber-stored-cross-site-scripting 2025-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ap-plugin-scripteo/ads-pro-plugin-50-authenticated-contributor-stored-cross-site-scripting 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learning-management-system/masteriyo-lms-1114-missing-authorization 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ced-good-market-integration/cedcommerce-integration-for-good-market-106-unauthenticated-local-file-inclusion 2025-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-extra-fields/wp-extra-fields-101-reflected-cross-site-scripting 2025-02-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-313-authenticated-contributor-stored-cross-site-scripting-via-header_size 2021-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexo-posts-manager/flexo-posts-manager-10001-reflected-cross-site-scripting 2025-06-14T14:20:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/panda/panda-121-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/screenshot-machine-shortcode/jsm-screenshot-machine-shortcode-230-authenticated-contributor-stored-cross-site-scripting 2025-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/age-verification/age-verification-04-open-redirect 2012-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ad-inserter/ad-inserter-ad-manager-and-adsense-ads-280-reflected-cross-site-scripting 2025-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mediacommander/mediacommander-bring-folders-to-media-posts-and-pages-231-missing-authorization-to-authenticated-author-media-folder-deletion 2025-12-12T16:18:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/game-tabs/game-tabs-040-cross-site-scripting 2014-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lupsonline-link-netwerk/seo-flow-by-lupsonline-221-cross-site-request-forgery-to-stored-cross-site-scripting 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-education/wp-education-126-cross-site-request-forgery-to-arbitrary-plugin-activation 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-maintenance-mode/woocommerce-maintenance-mode-201-reflected-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-responsive-slider-with-lightbox/thumbnail-slider-with-lightbox-1021-authenticated-contributor-dom-based-stored-cross-site-scripting 2025-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-elementor-addons-header-footer-template-library-dynamic-grid-carousel-remote-arrows-576-authenticated-contributor-stored-cross-site-scripting-via-title_tag 2024-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-coming-soon-page/coming-soon-page-responsive-coming-soon-maintenance-mode-1118-cross-site-request-forgery 2018-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/planaday-api/planaday-api-114-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/Ultimate_VC_Addons/ultimate-addons-for-wpbakery-31611-cross-site-scripting 2017-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ws-form/ws-form-lite-and-pro-11013-unauthenticated-stored-cross-site-scripting 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-eMember/wp-emember-1065-reflected-cross-site-scripting-via-editrecord 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobsearch/jobsearch-wp-job-board-181-missing-authorization-on-jobsearch_update_job_import_schedule_call-function 2021-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kitring/kitring-28-unauthenticated-local-file-inclusion 2025-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uploading-svgwebp-and-ico-files/uploading-svg-webp-and-ico-files-101-authenticated-stored-cross-site-scripting 2022-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gdpr-cookie-compliance/gdpr-cookie-compliance-402-missing-authorization 2019-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-music-player/wp-music-player-13-authenticated-administrator-sql-injection 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-by-rank-math/rank-math-seo-10119-authenticated-contributor-stored-cross-site-scripting 2023-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-5948-authenticated-subscriber-sql-injection 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/academist-membership/academist-membership-116-authentication-bypass-via-account-takeover 2025-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/citadela-directory/citadela-listing-5200-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/snsavaz/avaz-28-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/debounce-io-email-validator/debounce-email-validator-580-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-18T19:33:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advance-wc-analytics/advanced-wc-analytics-3190-missing-authorization-to-unauthenticated-settings-update 2026-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/backupbuddy/backupbuddy-8580-8741-arbitrary-file-download 2022-09-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gigpress/gigpress-2310-sql-injection 2015-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-order-cancellation-return/order-cancellation-returns-for-woocommerce-1112-authenticated-subscriber-insecure-direct-object-reference 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-time-capsule/backup-and-staging-by-wp-time-capsule-12221-authenticated-contributor-sql-injection 2024-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-advanced-product-information/advanced-product-information-for-woocommerce-114-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nopeamedia/print-pdf-generator-and-publisher-120-cross-site-request-forgery 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arprice-responsive-pricing-table/pricing-table-plugin-36-unauthenticated-sql-injection 2022-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-avatar/profilepress-41514-authenticated-admin-stored-cross-site-scripting-via-labels 2024-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/listingpro-plugin/listingpro-plugin-294-authenticated-author-local-file-inclusion 2024-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/a3-portfolio/a3rev-multiple-plugins-various-versions-cross-site-request-forgery-to-settings-changes 2022-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/huzzaz-video-gallery/video-gallery-by-huzzaz-105-authenticated-contributor-stored-cross-site-scripting 2025-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-woo-search/advanced-woo-search-296-reflected-cross-site-scripting 2024-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/litespeed-cache/litespeed-cache-651-unauthenticated-privilege-escalation 2024-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modular-connector/modular-connector-251-cross-site-request-forgery-via-postconfirmoauth 2026-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-blog/jetblog-244-reflected-cross-site-scripting 2025-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/urbango-membership/urbango-membership-104-unauthenticated-privilege-escalation 2025-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/eximius/eximius-22-authenticated-subscriber-arbitrary-file-upload 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpbot-pro/wpbot-pro-wordpress-chatbot-1355-missing-authorization-to-authenticated-subscriber-simple-text-response-creation 2025-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-1323-reflected-cross-site-scripting-via-ip 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kb-support/kb-support-160-missing-authorization 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-and-client-message-after-order-for-woocommerce/admin-and-customer-messages-after-order-for-woocommerce-orderconvo-14-missing-authorization-to-unauthenticated-information-disclosure 2025-11-24T19:18:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/skype-online-status/skype-legacy-buttons-31-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/search-analytics/wp-search-analytics-145-authenticated-administrator-stored-cross-site-scripting 2023-04-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cookie-notice/cookie-notice-compliance-for-gdpr-ccpa-246-authenticated-contributor-stored-cross-site-scripting-via-cookies_revoke_shortcode-shortcode 2023-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-made-easy/events-made-easy-1550-cross-site-request-forgery-to-stored-cross-site-scripting 2015-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/menu-shortcode/menu-shortcode-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-205-user-metadata-information-disclosure 2006-09-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gt3-photo-video-gallery/photo-gallery-gt3-image-gallery-gutenberg-block-gallery-27724-reflected-cross-site-scripting 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/giveasap/simple-giveaways-2450-authenticatedadmin-stored-cross-site-scripting-via-form-fields 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mailster/wp-mailster-18170-unauthenticated-sensitive-information-exposure 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-child/mainwp-child-533-missing-authorization-to-unauthenticated-privilege-escalation 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-bank/gallery-bank-wordpress-photo-gallery-plugin-4050-stored-cross-site-scripting-via-gallery-description 2022-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-seopress/seopress-500-503-stored-cross-site-scripting 2021-08-16T15:33:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coschedule-by-todaymade/coschedule-3311-unauthenticated-sensitive-information-exposure 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/apimo/apimo-connector-264-missing-authorization 2026-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/page-builder-pagelayer-208-authenticated-contributor-stored-cross-site-scripting-via-button-widget-custom-attributes 2026-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletters-lite/newsletters-4994-authenticated-contributor-stored-cross-site-scripting-via-newsletters_video-shortcode 2024-10-28T23:13:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acf-flexible-layouts-manager/acf-flexible-layouts-manager-116-missing-authorization-to-unauthenticated-custom-field-update 2025-11-17T20:17:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-slimstat/slimstat-analytics-355-stored-cross-site-scripting 2015-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-login-with-eve-online-google-facebook/oauth-single-sign-on-sso-oauth-client-62614-missing-authorization 2026-02-05T18:30:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-slider-3/smart-slider-3-35122-missing-authorization-to-limited-file-upload 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/disqus-popular-posts/disqus-popular-posts-211-reflected-cross-site-scripting 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tablesome/tablesome-11351-missing-authorization 2025-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pawfriends/pawfriends-pet-shop-and-veterinary-wordpress-13-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ip-metaboxes/ip-metaboxes-211-unauthenticated-stored-cross-site-scripting 2023-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetpack/jetpack-403-cross-site-scripting 2016-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chat-help/chat-help-click-to-chat-button-form-313-missing-authorization-to-unauthenticated-sensitive-information-exposure 2025-11-18T17:40:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rocket/wp-rocket-2103-local-file-inclusion 2017-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yournewsapp/blappsta-mobile-app-plugin-your-native-mobile-iphone-app-and-android-app-0888-unauthenticated-sql-injection 2025-10-02T22:15:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-security-audit-log/wp-activity-log-522-unauthenticated-stored-cross-site-scripting 2025-02-12T19:09:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/idx-broker-platinum/impress-for-idx-broker-305-reflected-cross-site-scripting 2021-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widgetkit-for-elementor/all-in-one-addons-for-elementor-widgetkit-239-contributor-stored-cross-site-scripting 2021-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/letsrecover-woocommerce-abandoned-cart/letsrecover-110-unauthenticated-sql-injection-via-ajax-action 2022-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ipharm/ipharm-123-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/document-data-automation/document-data-automation-161-cross-site-request-forgery 2024-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-extra-fields/profile-extra-fields-by-bestwebsoft-127-missing-authorization-to-sensitive-information-exposure 2023-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/fluida/fluida-188-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-specifications/product-specifications-for-woocommerce-060-reflected-cross-site-scripting-via-arbitrary-query-string-parameter 2023-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-replicate-post/wp-replicate-post-402-authenticated-contributor-sql-injection 2023-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobhunt/wp-jobhunt-71-authentication-bypass 2025-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wedevs-project-manager/wp-project-manager-2625-unauthenticated-sensitive-information-exposure 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-elementor-page-builder/the-plus-addons-for-elementor-addons-for-elementor-page-templates-widgets-mega-menu-woocommerce-647-unauthenticated-email-relay 2026-02-21T19:49:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ldd-directory-lite/ldd-directory-lite-33-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/magone/magone-90-reflected-cross-site-scripting 2026-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/homelancer/homelancer-101-missing-authorization 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-manager/contact-manager-91-unauthenticated-php-object-injection 2026-02-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smtp-mailer/smtp-mailer-1124-unauthenticated-information-exposure 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-youtube-channel-pagination/advanced-youtube-channel-pagination-10-authenticatedadministrator-stored-cross-site-scripting 2023-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/infographic-and-list-builder-ilist/ai-infographic-maker-467-authenticated-contributor-stored-cross-site-scripting 2024-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-smart-filters/jetsmartfilters-367-authenticated-subscriber-sensitive-information-exposure 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-show-login-form/wordpress-login-form-to-anywhere-02-authenticated-administrator-stored-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cpo-companion/cpo-companion-104-authenticated-administrator-stored-cross-site-scripting 2023-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feed-changer/feed-changer-02-authenticated-admin-stored-cross-site-scripting 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pixabay-images/pixabay-images-23-arbitrary-file-upload 2015-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter-manager/newsletter-manager-102-cross-site-scripting-via-test_mailphp 2012-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/indigitall-web-push-notifications/iurny-by-indigitall-whatsapp-chat-web-push-notifications-free-322-authenticated-admin-stored-cross-site-scripting 2023-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-order-limit-lite/order-limit-for-woocommerce-302-missing-authorization 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-lister-for-ebay/wp-lister-lite-for-ebay-363-reflected-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mavis-https-to-http-redirect/mavis-https-to-http-redirection-143-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user/wp-user-70-unauthenticated-sql-injection 2022-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cm-answers/cm-answers-326-missing-authorization 2024-12-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-1016-cross-site-request-forgery-to-arbitrary-postpage-deletion 2025-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-registration-form-builder-with-submission-manager/registrationmagic-6072-missing-authorization 2026-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-blocks/jetblocks-for-elementor-1318-authenticated-contributor-stored-cross-site-scripting 2025-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pandavideo/panda-video-140-authenticated-contributor-stored-cross-site-scripting 2024-07-08T20:01:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/display-product-variations-dropdown-on-shop-page/display-product-variations-dropdown-on-shop-page-113-missing-authorization 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/canonical-attachments/canonical-attachments-17-unauthenticated-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-maps-advanced/inline-google-maps-511-cross-site-request-forgery 2022-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ce21-suite/ce21-suite-231-unauthenticated-sensitive-information-exposure-to-privilege-escalation 2025-11-03T15:24:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-multi-design-video-carousel/ultimate-multi-design-video-carousel-14-authenticated-editor-stored-cross-site-scripting 2025-10-02T22:32:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rss-feed-widget/rss-feed-widget-280-reflected-cross-site-scripting 2020-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-vertical-reel-scroll-slideshow/image-vertical-reel-scroll-slideshow-90-authenticated-administrator-stored-cross-site-scripting 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-contact-forms/simple-contact-forms-164-unauthenticated-local-file-inclusion 2025-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-block/fancypost-601-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easyazon/easyazon-amazon-associates-affiliate-510-missing-authorization-on-ajax-actions 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-roles/user-role-10-authenticated-administrator-stored-cross-site-scripting 2025-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yotuwp-easy-youtube-embed/video-gallery-youtube-playlist-channel-gallery-by-yotuwp-138-missing-authorization 2022-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easycart/easycart-1130-3020-privilege-escalation 2015-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpbookit-pro/wpbookit-pro-1618-missing-authorization 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mosaic-generator/mosaic-generator-105-authenticated-contributor-stored-cross-site-scripting-via-c-parameter 2025-08-11T14:05:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nd-stats-for-envato-sales-by-item/envato-sales-by-item-11-unauthenticated-sql-injection-via-ajax-call 2022-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-374-authenticated-administrator-sql-injection 2025-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/justicia/justicia-lawyer-wordpress-theme-12-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/export-all-post-meta/export-all-post-meta-121-missing-authorization 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/addison/addison-148-unauthenticated-php-object-injection 2025-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/demo-user-dzs-showcase-your-admin-safely/demo-user-dzs-showcase-your-admin-safely-110-authenticated-subscriber-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-tool-tip/awesome-tool-tip-10-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-booking-widget/simple-booking-widget-11-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contest-gallery/contest-gallery-2814-unauthenticated-sql-injection 2026-03-02T04:44:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-table-builder/wp-table-builder-wordpress-table-plugin-146-authenticated-admin-stored-cross-site-scripting 2023-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-map-plugin/wp-maps-store-locatorgoogle-mapsopenstreetmapmapboxlistingdirectory-filters-487-authenticated-contributor-stored-cross-site-scripting-via-put_wpgm-shortcode 2026-04-15T17:46:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/walk-score/walk-score-plugin-055-cross-site-scripting 2014-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirection-plus/redirection-plus-200-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-simple-firewall/shield-security-blocks-bots-protects-users-and-prevents-security-breaches-2109-missing-authorization-to-authenticated-subscriber-email-mfa-update 2026-02-18T16:16:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/epic-bootstrap-buttons/epic-bootstrap-buttons-10-authenticated-contributor-stored-cross-site-scripting-via-icol-parameter 2025-10-02T22:12:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpjobboard/wpjobboard-5101-reflected-cross-site-scripting 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-front-end-profile/wp-frontend-profile-131-unauthenticated-privilege-escalation 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ml-slider/slider-gallery-and-carousel-by-metaslider-image-slider-video-slider-3940-authenticated-editor-php-object-injection 2025-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-stock-alert/woocommerce-product-stock-alert-201-information-disclosure 2023-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar/the-events-calendar-682-missing-authorization-to-unauthenticated-password-protected-event-disclosure 2024-11-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-custom-fields-groups/all-custom-fields-groups-104-reflected-cross-site-scripting 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-471-cross-site-request-forgery-via-widget-editing 2017-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anant-addons-for-elementor/anant-addons-for-elementor-120-authenticated-contributor-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-language-translator/google-language-translator-6019-missing-authorization-via-admin-notifications 2023-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tencentcloud-cos/tencentcloud-cos-107-missing-authorization-via-ajax-actions 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youtube-embed-plus/embed-plus-plugin-for-youtube-1181-cross-site-request-forgery 2017-07-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/emailkit/emailkit-161-authenticated-author-arbitrary-file-read-via-path-traversal 2026-01-06T14:21:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-3268-privilege-escalation-via-accept-to-be-teacher-action-parameter 2020-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/minhnhut-link-gateway/minhnhut-link-gateway-361-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-03-20T15:14:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-best-elementor-templates-widgets-kits-woocommerce-builders-5919-authenticated-contributor-stored-cross-site-scripting-via-interactive-circles 2024-05-09T19:28:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-cloudflare-turnstile/simple-cloudflare-turnstile-1231-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/another-events-calendar/another-events-calendar-170-reflected-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usc-e-shop/welcart-e-commerce-295-authenticated-administrator-php-object-injection 2023-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscribe-to-comments-reloaded/subscribe-to-comments-reloaded-240119-improper-authorization-to-unauthenticated-arbitrary-subscription-management 2026-05-04T14:11:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-cumulus/wp-cumulus-122-cross-site-scripting-via-xmlpath 2011-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-css-editor/custom-css-140-missing-authorization 2025-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatewoo/automatewoo-571-authenticated-shop-manager-sql-injection 2023-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-customers-manager/woocommerce-customers-manager-301-cross-site-request-forgery-to-customer-deletion-via-delete 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videojs-html5-video-player-for-wordpress/videojs-html5-video-player-for-wordpress-450-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/carspot/carspot-246-reflected-cross-site-scripting 2026-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cpo-companion/cpo-companion-110-authenticated-contributor-stored-cross-site-scripting 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oshine-modules/oshine-modules-338-unauthenticated-server-side-request-forgery 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profiler-what-slowing-down/profiler-what-slowing-down-your-wp-100-missing-authentication-to-unauthenticated-arbitrary-plugin-reactivation-via-state-restoration 2025-06-06T16:15:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobs/wp-jobs-15-sql-injection 2017-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/piotnet-addons-for-elementor/piotnet-addons-for-elementor-2430-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets 2024-08-22T19:57:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/structured-content/structured-content-163-authenticated-contributor-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-affiliate/wc-affiliate-216-authenticated-subscriber-php-object-injection 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-block/fancypost-best-ultimate-post-block-post-grid-layouts-carousel-slider-for-gutenberg-elementor-531-authenticated-author-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/syntaxhighlighter/syntaxhighlighter-evolved-371-authenticated-contributor-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-floating-cart-lite/xt-floating-cart-for-woocommerce-282-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-11-04T22:58:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-scheduler/multi-scheduler-100-cross-site-request-forgery 2020-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-svg-upload/wp-svg-upload-100-authenticated-author-stored-cross-site-scripting-via-svg 2025-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ali2woo-lite/ali2woo-lite-336-reflected-cross-site-scripting 2024-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/LayerSlider/layerslider-779-cross-site-request-forgery 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7/contact-form-7-352-arbitrary-file-upload 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/spare/spare-17-cross-site-request-forgery 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-random-redirect/better-random-redirect-1320-authenticated-administrator-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/big-store/big-store-208-missing-authorization 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-widget-elementor/void-contact-form-7-widget-for-elementor-page-builder-241-authenticated-author-stored-cross-site-scripting 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/registered-user-sync-activecampaign/user-sync-activecampaign-132-missing-authorization 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bbs-e-franchise/bbs-e-franchise-114-sql-injection 2016-11-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photostack-gallery/photostack-gallery-041-unauthenticated-sql-injection-via-postid-parameter 2026-02-13T18:10:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-elementor-addons/happy-addons-for-elementor-3210-insecure-direct-object-reference-to-authenticated-contributor-post-duplication-via-post_id-parameter 2026-03-10T19:07:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/grandrestaurant/grand-restaurant-wordpress-70-missing-authorization-to-unauthenticated-arbitrary-options-deletion 2025-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/layouts-for-elementor/layouts-for-elementor-111-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/different-shipping-and-billing-address-for-woocommerce/multiple-shipping-and-billing-address-for-woocommerce-15-unauthenticated-php-object-injection 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-networks-auto-poster-facebook-twitter-g/nextscripts-social-networks-auto-poster-446-authenticated-contributor-stored-cross-site-scripting-via-nxs_fbembed-shortcode 2026-03-09T21:33:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/unicamp/unicamp-263-unauthenticated-local-file-inclusion 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maxbuttons/maxbuttons-983-authenticated-administrator-stored-cross-site-scripting 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foobox-image-lightbox/lightbox-modal-popup-wordpress-plugin-foobox-2728-authenticated-contributor-stored-dom-based-cross-site-scripting-via-html-data-attributes 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real-time-auto-find-and-replace/better-find-and-replace-176-authenticated-administrator-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ipanorama-360-virtual-tour-builder-lite/ipanorama-360-wordpress-virtual-tour-builder-181-missing-authorization 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easyappointments/easyappointments-142-cross-site-request-forgery-to-settings-update 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wonderm00ns-simple-facebook-open-graph-tags/open-graph-and-twitter-card-tags-2241-unauthenticated-cross-site-scripting 2018-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/calais-auto-tagger/wp-calais-auto-tagger-20-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/save-as-pdf-by-pdfcrowd/save-as-pdf-321-authenticated-admin-stored-cross-site-scripting 2024-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulk-editor/wolf-wordpress-posts-bulk-editor-and-manager-professional-1087-authenticated-editor-sql-injection 2026-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-spell-check/wp-spell-check-921-cross-site-request-forgery 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress-course-review/learnpress-course-review-419-authenticated-learnpress-student-stored-cross-site-scripting 2026-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/falang/falang-multilanguage-1361-cross-site-request-forgery 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/squirrly-seo/seo-plugin-by-squirrly-seo-12120-missing-authorization 2023-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-manager/events-manager-calendar-bookings-tickets-and-more-663-unauthenticated-sql-injection-via-event-status-parameter 2025-02-20T16:21:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/magazine-saga/magazine-saga-127-unauthenticated-local-file-inclusion 2025-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-css-js-php/custom-css-js-php-207-unauthenticated-remote-code-execution 2026-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-csv-importer/wp-import-ultimate-csv-xml-importer-for-wordpress-720-728-authenticated-subscriber-remote-code-execution-via-code-injection 2025-09-16T17:10:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exclusive-addons-for-elementor/exclusive-addons-for-elementor-268-authenticated-contributor-stored-cross-site-scripting-via-link-anything 2024-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-egg/content-egg-540-cross-site-request-forgery 2022-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bunnycdn/bunnynet-230-authenticated-contributor-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-list/contact-list-easy-business-directory-staff-directory-and-address-book-plugin-2941-reflected-cross-site-scripting 2021-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/2kb-amazon-affiliates-store/2kb-amazon-affiliates-store-211-reflected-cross-site-scripting 2017-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kali-forms/kali-forms-211-unauthenticated-arbitrary-post-deletion 2020-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/posts-table-filterable/tableon-wordpress-posts-table-filterable-1051-unauthenticated-sql-injection 2026-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/softme/softme-1124-missing-authorization 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-google-recaptcha/wp-captcha-pro-538-missing-authorization-to-authenticated-subscriber-arbitrary-file-upload 2026-06-05T05:58:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stax-addons-for-elementor/elementor-addons-widgets-and-enhancements-stax-143-missing-authorization-in-toggle_widget 2023-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-wiki-tooltip/wp-wiki-tooltip-202-authenticated-contributor-stored-cross-site-scripting 2025-02-18T19:21:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-shipping-dpd-baltic/woocommerce-shipping-dpd-baltic-128-authenticated-admin-stored-cross-site-scripting 2022-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comments-import-export-woocommerce/wordpress-comments-import-export-235-cross-site-request-forgery 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/offsprout-page-builder/offsprout-page-builder-221-2152-authenticated-contributor-privilege-escalation-via-permission_callback-function 2025-05-30T18:09:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cardoza-facebook-like-box/easy-social-like-box-popup-sidebar-widget-283-cross-site-scripting 2014-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-post/event-post-594-missing-authorization 2024-05-23T18:07:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-settings/advanced-settings-301-cross-site-request-forgery 2025-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accordion_slider_pro/accordion-slider-pro-12-authenticated-contributor-sql-injection 2025-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-logo/custom-logo-22-authenticated-administrator-stored-cross-site-scripting-via-logo-path-setting 2026-02-25T12:48:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-floating-content/advanced-floating-content-382-authenticated-subscriber-sql-injection 2024-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tm-islamic-helper/tm-islamic-helper-101-reflected-cross-site-scripting 2024-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seriously-simple-stats/seriously-simple-stats-151-reflected-cross-site-scripting 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/medicenter/medicenter-health-medical-clinic-wordpress-theme-146-missing-authorization 2025-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/terms-descriptions/terms-descriptions-347-authenticated-administrator-stored-cross-site-scripting 2024-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/soledad/soledad-859-unauthenticated-limited-local-file-inclusion 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/filester/file-manager-pro-18-authenticated-admin-stored-cross-site-scripting 2023-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-bookmarks/wp-bookmarks-11-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/locker-content/locker-content-100-unauthenticated-information-exposure 2025-11-24T19:16:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webpurifytextreplace/webpurify-profanity-filter-402-missing-authorization-to-unauthenticated-plugin-settings-change-via-webpurify_save_options 2026-02-03T19:32:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/blixed/blix-091-blixed-10-blixkrieg-22-reflected-cross-site-scripting 2007-07-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/click-to-call-or-chat-buttons/click-to-call-or-chat-buttons-140-authenticatedadmin-stored-cross-site-scripting 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jay-login-register/jay-login-register-2401-authentication-bypass-via-cookie 2025-12-12T16:06:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/optimole-wp/image-optimization-service-by-optimole-410-insecure-direct-object-reference-to-authenticated-author-media-offload 2025-10-17T18:03:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.3/wordpress-core-542-self-cross-site-scripting-via-theme-folder-name 2020-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/schema-scalpel/schema-scalpel-161-authenticated-contributor-stored-cross-site-scripting-via-post-title-in-json-ld-schema 2025-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flash-album-gallery/album-and-image-gallery-with-lightbox-flagallery-photo-portfolio-255-sql-injection 2013-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-share-boost/social-share-boost-44-authenticated-contributor-stored-cross-site-scripting-via-ssboost-shortcode 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photoblocks-grid-gallery/gallery-photoblocks-126-authenticated-contributor-stored-cross-site-scripting 2022-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/worker/manage-wp-worker-492-authentication-bypass 2020-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-staging/migration-backup-restore-343-authenticated-administrator-server-side-request-forgery 2024-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/u-design-core/udesign-core-4140-missing-authorization 2025-09-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/service-updates-for-customers/services-updates-for-customers-10-reflected-cross-site-scripting 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcode-for-redirection/redirecter-10-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iteras/iteras-180-cross-site-request-forgery 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-editor/wp-editor-1291-authenticated-administrator-directory-traversal-to-arbitrary-file-update 2025-04-16T17:10:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rajce/rajce-042-authenticated-contributor-server-side-request-forgery 2025-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real3d-flipbook-lite/3d-flipbook-pdf-viewer-pdf-embedder-real-3d-flipbook-wordpress-plugin-371-authenticated-author-stored-cross-site-scripting 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-95-unauthenticated-arbitrary-file-upload 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instawp-connect/instawp-connect-1-click-wp-staging-migration-01038-missing-authorization-to-unauthenticated-api-setuparbitrary-options-updateadministrative-user-creation 2024-06-11T21:44:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor-pro/tutor-lms-pro-395-authentication-bypass-via-social-login 2026-03-09T16:33:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/devbuddy-twitter-feed/devbuddy-twitter-feed-400-authenticated-administrator-stored-cross-site-scripting-via-settings 2023-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/funnelcockpit/funnelcockpit-143-reflected-cross-site-scripting 2025-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restaurant-reservations/five-star-restaurant-reservations-278-cross-site-request-forgery 2025-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetpack/jetpack-127-authenticatedcontributor-clickjacking-via-iframe-injection 2023-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-trim-interface/admin-trim-interface-351-unauthenticated-full-path-disclosure 2024-07-26T13:08:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vrm360/vrm-360-3d-model-viewer-121-authenticated-contributor-arbitrary-file-upload 2023-11-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/posts-by-tag/posts-by-tag-321-authenticated-contributor-stored-cross-site-scripting 2025-10-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/csv-import/csv-import-10-reflected-cross-site-scripting 2016-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-donations/donations-made-easy-smart-donations-4012-authenticated-contributor-stored-cross-site-scripting 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/etruel-del-post-copies/wp-delete-post-copies-602-authenticated-admin-stored-cross-site-scripting 2025-11-20T20:39:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/church-admin/church-admin-508-missing-authorization 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/constant-contact-forms-by-mailmunch/constant-contact-forms-by-mailmunch-212-reflected-cross-site-scripting 2024-11-12T13:25:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xv-random-quotes/xv-random-quotes-140-cross-site-request-forgery-to-settings-reset 2025-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/tiger/tiger-20-authenticated-subscriber-stored-cross-site-scripting 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp_roknewspager/roknewspager-117-cross-site-scripting 2013-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webcam-2way-videochat/webcam-2way-videochat-441-cross-site-scripting 2014-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broken-link-notifier/broken-link-notifier-135-missing-authorization 2026-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscribe2/subscribe2-1040-cross-site-request-forgery 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/greenville/greenville-private-school-university-education-wordpress-theme-132-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/betterlinks/betterlinks-160-improper-authorization-to-data-import-and-export 2023-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/more-link-modifier/more-link-modifier-103-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/owl-carousel/owl-carousel-053-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-order-export-lite/advanced-order-export-for-woocommerce-154-csv-injection 2018-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arforms-form-builder/arforms-form-builder-161-missing-authorization 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ibtana-visual-editor/ibtana-1249-authenticated-contributor-stored-cross-site-scripting 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mortgage-calculators-wp/mortgage-calculators-wp-153-authenticated-stored-cross-site-scripting 2022-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sitepress-multilingual-cms/wpml-multilingual-cms-360-473-authenticated-contributor-stored-cross-site-scripting-via-wpml_language_switcher-shortcode 2025-05-01T17:11:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/myshouts-shoutbox/author-munzir-09-reflected-cross-site-scripting 2025-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/appexperts/appexperts-145-authenticated-subscriber-sql-injection 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-menu/jetmenu-249-missing-authorization 2025-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/frontend-post-submission-manager-lite/frontend-post-submission-manager-lite-127-unauthenticated-open-redirect-via-requested_page-parameter 2026-02-17T16:14:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/global-flash-galleries/global-flash-gallery-0134-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-support-plus-responsive-ticket-system/support-plus-responsive-ticket-system-41-sql-injection 2014-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gocodes/gocodes-135-authenticated-blind-sql-injection 2015-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/faqs/faqs-102-reflected-cross-site-scripting 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-plugin-manager/plugin-manager-147-cross-site-request-forgery 2025-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learn-manager/wp-lms-best-wordpress-lms-plugin-115-cross-site-scripting 2021-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/electio-core/electio-core-14-unauthenticated-sql-injection 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/groundhogg/groundhogg-421-authenticated-sales-rep-arbitrary-file-upload 2025-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-31021-authenticated-contributor-stored-cross-site-scripting-via-csti 2025-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xcloner-backup-and-restore/backup-restore-and-migrate-wordpress-sites-with-the-xcloner-plugin-310-multiple-cross-site-request-forgery 2014-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/virtual-hdm-for-taxservice-am/tax-service-electronic-hdm-120-unauthenticated-arbitrary-sql-injection 2025-11-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iamport-for-woocommerce/portone-325-reflected-cross-site-scripting 2024-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-tabs/jettabs-229-authenticated-subscriber-information-exposure 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slider-blocks/gutslider-all-in-one-block-slider-272-authenticated-contributor-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/store-manager-connector/emagicone-store-manager-for-woocommerce-132-unauthenticated-sql-injection 2026-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sms-alert/sms-alert-order-notifications-woocommerce-378-unauthenticated-sql-injection 2025-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/3d-flipbook-dflip-lite/pdf-flipbook-3d-flipbook-dearflip-2226-authenticated-contributor-stored-cross-site-scripting 2024-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar/the-events-calendar-61517-authenticated-author-arbitrary-file-read-via-ajax_create_import 2026-03-09T14:40:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/license-manager-for-woocommerce/license-manager-for-woocommerce-306-improper-authorization-to-authenticatedcontributor-sensitive-information-exposure 2024-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html-forms/html-forms-1324-authenticated-administrator-sql-injection 2022-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforms-lite/wpforms-lite-1931-authenticated-contributor-stored-cross-site-scripting-via-fieldhtml-parameter 2025-02-03T20:01:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-classified-listings/ultimate-classified-listings-13-unauthenticated-local-file-inclusion 2024-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-shopify/wp-shopify-159-authenticated-contributor-local-file-inclusion 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/curly/curly-33-authenticated-subscriber-insecure-direct-object-reference 2026-01-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-pack-addon/the-pack-elementor-addons-211-authenticated-contributor-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/community-events/community-events-151-unauthenticated-sql-injection 2025-10-08T13:32:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cute-news-ticker/cute-news-ticker-10-authenticated-contributor-stored-cross-site-scripting-via-color-shortcode-attribute 2025-12-05T17:43:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/podlove-podcasting-plugin-for-wordpress/podlove-podcast-publisher-425-open-redirect 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enhanced-e-commerce-for-woocommerce-store/conversiosio-google-analytics-and-google-shopping-plugin-for-woocommerce-461-authenticated-sql-injection 2022-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/albo-pretorio-on-line/albo-pretorio-online-466-authenticated-contributor-stored-cross-site-scripting 2024-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-hover-effects-visual-composer-extension/image-hover-effects-for-wpbakery-page-builder-40-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photographers-galleries/photographers-galleries-118-authenticated-contributor-stored-cross-site-scripting 2025-10-21T20:21:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hydra-booking/hydra-booking-110-1118-missing-authorization-to-authenticated-subscriber-privilege-escalation-via-tfhb_reset_password_callback-function 2025-07-28T20:38:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mf-gig-calendar/mf-gig-calendar-12-authenticated-contributor-stored-cross-site-scripting-via-event_title-and-event_time 2023-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-wp/my-wp-customize-adminfrontend-1240-authenticated-admin-stored-cross-site-scripting 2024-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-geonames/wp-geonames-1901-authenticated-contributor-stored-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-avatar/paid-membership-plugin-ecommerce-user-registration-form-login-form-user-profile-restrict-content-profilepress-4164-unauthenticated-arbitrary-shortcode-execution 2025-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wooframework-branding/wooframework-branding-101-reflected-cross-site-scripting 2015-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blog2social/blog2social-social-media-auto-post-scheduler-874-missing-authorization-to-authenticated-subscriber-arbitrary-post-modification 2026-02-17T21:30:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gravityformswebhooks/gravity-forms-webhooks-160-authenticated-admin-server-side-request-forgery-via-webhook 2025-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-login-new-user-after-registration/auto-login-new-user-after-registration-196-cross-site-request-forgery-to-settings-modification 2023-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-gdpr-compliance/wp-gdpr-compliance-142-arbitrary-options-update-and-action-calling 2018-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-simple-booking-calendar/wp-simple-booking-calendar-206-authenticated-sql-injection 2021-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theme-importer/theme-importer-10-cross-site-request-forgery 2025-10-14T19:46:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter-by-supsystic/newsletter-by-supsystic-156-authenticated-admin-time-based-blind-sql-injection 2021-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-extend/ajax-extend-10-unauthenticated-remote-code-execution 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-301-redirects/simple-301-redirects-200-203-unauthenticated-redirect-export 2021-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/meloo/meloo-282-authenticated-subscriber-php-object-injection 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-elementor-addons-553-authenticated-contributor-stored-cross-site-scripting-via-link 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instagram-slider-widget/social-slider-feed-222-missing-authorization 2024-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/propertyhive/propertyhive-2112-missing-authorization 2025-11-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/razorpay-payment-button-elementor/razorpay-payment-button-for-elementor-125-reflected-cross-site-scripting 2024-11-12T13:21:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woorewards/myrewards-573-missing-authorization 2026-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/prepost-seo/prepost-seo-30-authenticatedadministrator-stored-cross-site-scripting 2023-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribers/email-subscribers-newsletters-416-cross-site-scripting 2019-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/drag-and-drop-multiple-file-upload-for-woocommerce/drag-and-drop-multiple-file-upload-for-woocommerce-116-unauthenticated-arbitrary-file-upload-via-upload-function 2025-05-08T20:19:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aa-calculator/aa-cash-calculator-10-reflected-cross-site-scripting-via-invoice 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-lite/easy-contact-form-lite-1123-authenticated-contributor-stored-cross-site-scripting 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sprout-invoices/client-invoicing-by-sprout-invoices-2087-missing-authorization 2025-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pwa-for-wp/pwa-for-wp-amp-plugin-108-cross-site-scripting 2019-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premmerce-woocommerce-wishlist/premmerce-wishlist-for-woocommerce-1110-missing-authorization-to-authenticated-subscriber-arbitrary-wishlist-deletion 2025-12-11T15:05:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-maker/form-maker-by-10web-11335-sql-injection 2020-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-carousel-free/carousel-slider-gallery-by-wp-carousel-image-carousel-photo-gallery-post-carousel-post-grid-product-carousel-product-grid-for-woocommerce-263-authenticated-contributor-stored-cross-site-scripting-via-sp_wp_carousel_shortcode 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geeky-bot/geekybot-ai-copilot-chatbot-woocommerce-lead-gen-zero-prompt-content-122-unauthenticated-arbitrary-file-upload 2026-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/get-url-cron/get-url-cron-147-cross-site-request-forgery-via-geturlcron_action_handle 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/otter-pro/otter-blocks-pro-263-authenticatedcontributor-stored-cross-site-scripting-via-file-field-css 2024-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-215-authentication-bypass 2020-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-blocks/essential-blocks-for-gutenberg-483-missing-authorization 2025-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetwidgets-for-elementor/jetwidgets-for-elementor-1013-authenticated-contributor-stored-cross-site-scripting 2023-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/order-delivery-date/order-delivery-date-pro-for-woocommerce-1260-unauthenticated-arbitrary-post-title-disclosure 2025-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-plugin-lite-version-2921-reflected-cross-site-scripting 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/memberlite-shortcodes/memberlite-shortcodes-138-authenticated-contributor-stored-cross-site-scripting 2023-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/manage-shipyaari-shipping/shipyaari-shipping-management-10-authenticated-administrator-stored-cross-site-scripting 2023-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-post-author/wp-post-author-382-authenticated-administrator-sql-injection 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforms-user-registration/wpforms-user-registration-210-missing-authorization-to-authenticated-contributor-privilege-escalation 2024-07-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/starter-templates/starter-templates-by-fancywp-200-unauthenticated-blind-server-side-request-forgery 2025-01-30T00:46:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/table-of-contents-creator/table-of-contents-creator-1641-reflected-cross-site-scripting 2026-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/series/series-201-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-cron-manager/advanced-cron-manager-241-subscriber-arbitrary-eventsschedules-creationdeletion 2022-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flynax-bridge/flynax-bridge-220-unauthenticated-privilege-escalation-via-account-takeover 2025-04-23T19:43:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/theflash/the-flash-115-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/360-view/360-view-110-authenticated-contributor-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/external-media/external-media-1036-authenticated-contributor-server-side-request-forgery 2025-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-zendesk/wp-zendesk-for-contact-form-7-wpforms-elementor-formidable-and-ninja-forms-113-cross-site-request-forgery 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter-page-redirects/ai-magic-104-unauthenticated-privilege-escalation 2024-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restaurant-pickup-delivery-dine-in/pickup-delivery-dine-in-date-time-109-authenticated-admin-stored-cross-site-scripting 2023-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addons-for-beaver-builder/livemesh-addons-for-beaver-builder-392-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thim-elementor-kit/thim-elementor-kit-128-missing-authorization 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-form-integration/afi-the-easiest-integration-plugin-1920-reflected-cross-site-scripting 2024-11-12T18:26:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easycart/shopping-cart-ecommerce-store-542-authenticated-admin-local-file-inclusion-via-import_file_url 2023-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/copyscape-premium/copyscape-premium-138-cross-site-request-forgery 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/calculated-fields-form/calculated-fields-form-11120-missing-authorization-to-feedback-submission 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/w3-total-cache-0941-weak-validation-of-amazon-sns-push-messages 2016-11-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-widget-elementor/void-contact-form-7-widget-for-elementor-page-builder-23-missing-authorization 2024-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mage-eventpress/event-manager-and-tickets-selling-plugin-for-woocommerce-379-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/digitimber-cpanel-integration/digitimber-cpanel-integration-146-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cornerstone/cornerstone-789-missing-authorization 2026-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-church-donation/wp-church-donation-17-cross-site-request-forgery 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webful-simple-grocery-shop/wordpress-simple-shop-12-reflected-cross-site-scripting 2021-09-09T16:20:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lead-capturing-call-to-actions-by-vcita/contact-form-and-calls-to-action-by-vcita-271-missing-authorization-to-authenticated-subscriber-contactwidget-toggle 2025-01-30T16:51:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-save-remote-images-drafts/auto-save-remote-images-drafts-109-authenticated-contributor-server-side-request-forgery 2025-09-09T17:42:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sahifa/sahifa-240-cross-site-request-forgery 2013-01-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gsheetconnector-wpforms/wpforms-google-sheet-connector-400-missing-authorization 2025-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-846-cross-site-request-forgery-to-admin-role-change-to-customer-user-meta-update-via-save_customer 2023-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-simple-paypal-shopping-cart/wordpress-simple-paypal-shopping-cart-513-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-04-30T22:01:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/do-spaces-sync/digitalocean-spaces-sync-221-authenticated-administrator-stored-cross-site-scripting 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/devformatter/developer-formatter-20130141-cross-site-request-forgery 2013-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-special-textboxes/special-text-boxes-59109-authenticated-admin-stored-cross-site-scripting 2021-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluentform/fluent-forms-customizable-contact-forms-survey-quiz-conversational-form-builder-5116-611-authenticated-subscriber-php-object-injection-to-arbitrary-file-read 2025-09-02T10:27:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flash-player-widget/flash-player-widget-13-content-spoofing 2013-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/payment-gateway-stripe-and-woocommerce-integration/payment-gateway-of-stripe-for-woocommerce-507-missing-authorization 2026-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-slider/master-slider-responsive-touch-slider-251-authenticated-blind-sql-injection 2015-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/icegram-rainmaker/icegram-collect-138-authenticatedcontributor-cross-site-scripting-via-shortcode 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/404page/smart-custom-404-error-page-1147-reflected-cross-site-scripting 2024-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/robo-gallery/photo-gallery-images-slider-in-rbs-image-gallery-329-missing-authorization 2022-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adverts-click-tracker/wordpress-adverts-plugin-14-missing-authorization 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-registration-form-builder-with-submission-manager/registrationmagic-5259-reflected-cross-site-scripting 2024-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/newsup/newsup-5010-missing-authorization-to-authenticated-subscriber-plugin-installation 2025-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/universal-video-player-and-bg/video-player-fullscreen-video-background-241-authenticated-administrator-sql-injection 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-1322-authenticated-admin-stored-cross-site-scripting-via-mailchimp-api-key 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seed-social/seed-social-203-authenticated-admin-stored-cross-site-scripting 2022-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking/booking-calendar-843-sql-injection 2018-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-popup-creator/popup-mailchimp-getresponse-and-activecampaign-intergrations-326-missing-authorization-to-unauthenticated-db-table-truncation 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dom/dom-124-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inline-stock-quotes/inline-stock-quotes-02-authenticated-contributor-stored-cross-site-scripting-via-stock-shortcode 2025-08-11T14:04:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-share-buttons-adder/simple-share-buttons-adder-8411-authenticatedadministrator-stored-cross-site-scripting-via-css-settings 2024-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bakes-and-cakes/bakes-and-cakes-129-missing-authorization 2026-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tuxedo-big-file-uploads/big-file-uploads-211-cross-site-request-forgery-via-actions 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/drift/drift-150-authenticated-contributor-stored-cross-site-scripting-via-post-title 2026-02-18T15:05:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woc-open-close/open-close-woocommerce-store-491-missing-authorization 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/onair2/qt-kentharadio-202-onair2-3992-server-side-request-forgery-remote-file-inclusion 2021-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yotuwp-easy-youtube-embed/video-gallery-1312-authenticated-administrator-stored-cross-site-scripting 2023-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wps-team/team-members-best-wordpress-team-plugin-with-team-slider-team-showcase-team-builder-341-authenticated-contributor-stored-cross-site-scripting 2025-04-30T18:14:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-maker/quiz-maker-67088-authenticated-admin-stored-cross-site-scripting 2025-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/x-forms-express/nex-forms-lite-wordpress-contact-form-builder-34-cross-site-scripting 2014-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/karzo/karzo-26-unauthenticated-local-file-inclusion 2025-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailpoet/mailpoet-551-authenticated-administrator-stored-cross-site-scripting 2025-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/epaperflip-publisher/epaperflip-publisher-1-authenticated-contributor-stored-cross-site-scripting-via-publicationid-shortcode-attribute 2026-06-08T15:04:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uncanny-learndash-toolkit/uncanny-toolkit-for-learndash-3703-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-extra/wp-extra-62-missing-authorization-to-arbitrary-email-sending 2023-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-166-reflected-cross-site-scripting 2022-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/donate-extra/donate-extra-202-reflected-cross-site-scripting 2022-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/devnex-addons-for-elementor/devnex-addons-for-elementor-109-authenticated-contributor-local-file-inclusion 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rss-aggregator/wp-rss-aggregator-4234-authenticated-admin-stored-cross-site-scripting-via-rss-feed-source 2024-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-monitor/download-monitor-164-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-232-stored-cross-site-scripting 2022-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/scape/scape-multipurpose-wordpress-theme-1516-unauthenticated-arbitrary-file-deletion 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/player/video-player-1522-reflected-cross-site-scripting 2023-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aesop-story-engine/aesop-story-engine-232-authenticated-contributor-stored-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-wordpress-plugin-for-online-courses-and-education-3725-authenticated-subscriber-sql-injection 2026-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easycart/shopping-cart-ecommerce-store-564-sensitive-information-exposure 2024-05-10T09:18:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-post-notes/page-post-notes-134-missing-authorization-to-authenticated-subscriber-note-updatedeletion 2025-11-06T17:14:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/last-email-address-validator/leav-last-email-address-validator-171-cross-site-request-forgery-to-plugin-settings-update 2026-01-15T18:32:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementskit-lite/elementskit-elementor-addons-307-312-authenticated-contributor-stored-cross-site-scripting-via-image-accordion-widget 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-migration-duplicator/wordpress-backup-migration-144-authenticated-subscriber-stored-cross-site-scripting 2023-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/open-brain/open-brain-050-cross-site-request-forgery 2026-04-14T19:46:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder-block/popup-builder-with-gamification-multi-step-popups-page-level-targeting-and-woocommerce-triggers-213-unauthenticated-sql-injection-via-id 2025-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-donation-plugin-and-fundraising-platform-3141-unauthenticated-php-object-injection-to-remote-code-execution 2024-08-19T13:55:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/debug-log-viewer/debug-log-viewer-203-missing-authorization 2025-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woosms-sms-module-for-woocommerce/bulkgate-sms-plugin-for-woocommerce-302-missing-authorization-via-multiple-ajax-actions 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/liquido/liquido-1012-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/side-menu-lite/side-menu-lite-add-sticky-fixed-buttons-226-sql-injection 2021-07-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flower-delivery-by-florist-one/flower-delivery-by-florist-one-39-authenticated-contributor-stored-cross-site-scripting 2024-12-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-manager/file-manager-and-file-manager-pro-multiple-versions-directory-traversal 2024-03-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-custom-fields-table-field/table-field-add-on-for-acf-and-scf-1330-authenticated-contributor-stored-cross-site-scripting-via-table-cell-content 2026-01-05T19:00:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordfence/wordfence-security-firewall-malware-scan-336-stored-cross-site-scripting 2012-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-sql-backup/wordpress-sql-backup-352-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-maker/form-maker-by-10web-1132-authenticated-sql-injection 2019-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.3/wordpress-core-233-improper-authorization-checks 2007-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/projectopia-core/projectopia-wordpress-project-management-5119-missing-authorization-to-unauthenticated-arbitrary-attachment-deletion 2025-12-04T20:37:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/frames/frames-157-missing-authorization 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/change-wp-admin-login/change-wp-admin-login-113-protection-mechanism-failure-to-login-page-disclosure 2023-07-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adrotate/adrotate-ad-manager-adsense-ads-39-394-sql-injection 2014-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/health-check/health-check-troubleshooting-171-authenticated-admin-path-traversal 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rest-api-to-miniprogram/rest-api-to-miniprogram-477-authenticated-subscriber-media-attachment-deletion 2023-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addon-elements-for-elementor-page-builder/addon-elements-for-elementor-1143-authenticated-contributor-stored-cross-site-scripting 2025-12-13T16:57:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/featured-image-from-url/featured-image-from-url-fifu-527-missing-authorization-to-password-protected-post-disclosure 2025-09-25T16:00:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ws-force-login-page/ws-force-login-page-303-authenticated-administrator-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-payu-paisa/woocommerce-payu-india-211-improper-input-validation 2019-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-latest-posts/wp-latest-posts-374-reflected-cross-site-scripting 2015-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insert-php/woody-ad-snippets-224-missing-authorization-to-settings-import 2019-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-members/wp-members-3541-authenticated-contributor-stored-cross-site-scripting 2025-07-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/couponxxl-cpt/couponxxl-custom-post-types-30-unauthenticated-privilege-escalation 2025-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor-pro/tutor-lms-pro-270-missing-authorization 2024-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-21-denial-of-service 2007-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nokia-mapsplaces/nokia-maps-places-167-open-redirect 2014-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tour-booking-manager/wptravelly-187-authenticated-contributor-php-object-injection 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visualizer/visualizer-tables-and-charts-manager-for-wordpress-31112-authenticated-contributor-sql-injection 2025-12-01T17:52:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/welcome-email-editor/welcome-email-editor-505-missing-authorization-via-ajax_handler 2023-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/publitio/publitio-221-authenticated-contributor-server-side-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ancient-world-linked-data-for-wordpress/ancient-world-linked-data-021-authenticated-contributor-stored-cross-site-scripting 2024-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mobile-app-for-woocommerce/shopapper-0453-unauthenticated-stored-cross-site-scripting 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/orpheus/orpheus-13-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-pro/premium-addons-pro-2824-reflected-cross-site-scripting 2023-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-survey-and-poll/wordpress-survey-poll-quiz-survey-and-poll-plugin-for-wordpress-12-sql-injection 2015-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/platformly-for-woocommerce/platformly-for-woocommerce-116-unauthenticated-blind-server-side-request-forgery 2025-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/gita/gita-111-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-docs/wp-docs-213-reflected-cross-site-scripting 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cashbill-payment-method/cashbillpl-patnoci-woocommerce-321-authenticated-administrator-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-activity-plus-reloaded/activity-plus-reloaded-for-buddypress-112-authenticated-contributor-stored-cross-site-scripting 2025-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/error-log-viewer/error-log-viewer-by-bestwebsoft-116-authenticated-administrator-arbitrary-file-read 2025-10-10T20:39:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wooenvato/woocommerce-envato-affiliates-121-reflected-cross-site-scripting 2025-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-security-pro/wordpress-security-42-admin-stored-cross-site-scripting 2022-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bcorp-shortcodes/bcorp-shortcodes-023-unauthenticated-php-object-injection 2023-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/canalplan-ac/canalplan-531-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tripay-payment-gateway/tripay-payment-gateway-327-authenticated-administrator-stored-cross-site-scripting 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-email-template/wp-html-mail-2211-html-injection 2019-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bic-media/bic-media-widget-10-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wemail/wemail-email-marketing-newsletter-builder-email-automations-for-woocommerce-212-reflected-cross-site-scripting 2026-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-homepage-slideshow/homepage-slideshow-plugin-22-arbitrary-file-upload 2012-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/handl-utm-grabber/handl-utm-grabber-tracker-280-reflected-cross-site-scripting 2025-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/progress-tracker/progress-tracker-093-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/free-google-fonts/google-fonts-for-wordpress-300-reflected-cross-site-scripting 2023-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-exporter/woocommerce-store-exporter-272-reflected-cross-site-scripting-via-filter 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-331-unauthenticated-privilege-escalation-via-stm_lms_register-ajax-action 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-manager-pro/file-manager-pro-834-reflected-cross-site-scripting 2024-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rehub-framework/rehub-framework-1962-authenticated-subscriber-sql-injection 2024-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-578-authenticated-subscriber-sql-injection 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/erp/wp-erp-complete-hr-solution-with-recruitment-job-listings-woocommerce-crm-accounting-1131-authenticated-accountingmanager-sql-injection 2024-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/antihacker/anti-hacker-419-missing-authorization-to-arbitrary-plugin-install 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-popup/hustle-email-marketing-lead-generation-optins-popups-78101-missing-authorization 2026-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/marra/marra-12-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-plugin/gallery-by-bestwebsoft-469-authenticated-author-stored-cross-site-scripting 2023-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pretty-simple-popup-builder/pretty-simple-popup-builder-109-authenticated-administrator-stored-cross-site-scripting 2024-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/intuitive-custom-post-order/intuitive-custom-post-order-313-missing-authorization-to-authenticated-settings-change 2023-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cp-appointment-calendar/cp-appointment-calendar-115-unauthenticated-sql-injection 2015-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/website-file-changes-monitor/melapress-file-monitor-202-authenticated-admin-authenticated-sql-injection 2025-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dentalcare-cpt/dental-care-cpt-202-authenticated-contributor-php-object-injection 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-table-builder/wp-table-builder-205-reflected-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brizy/brizy-10126-authorization-bypass-to-settings-updates 2020-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-reviews-plugin-for-google/widgets-for-google-reviews-1321-authenticated-contributor-stored-cross-site-scripting-via-trustindex-shortcode 2025-12-10T15:02:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thai-lottery-widget/thai-lottery-widget-25-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-04T20:35:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anyvar/anyvar-011-cross-site-scripting 2017-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pray-for-me/pray-for-me-104-cross-site-request-forgery-to-settings-update 2024-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formfacade/formfacade-100-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mybooktable/mybooktable-bookstore-by-stormhill-media-214-cross-site-scripting 2015-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pandavideo/panda-video-140-authenticated-contributor-local-file-inclusion 2024-07-08T20:01:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shopengine/shopengine-411-cross-site-request-forgery-via-get_product 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/orbisius-simple-notice/orbisius-simple-notice-113-authenticated-administrator-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/poll-maker/poll-maker-577-unauthenticated-race-condition-to-multi-vote 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sms/wp-sms-65-cross-site-request-forgery-to-subscriber-deletion 2024-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor-pro/elementor-website-builder-pro-more-than-just-a-page-builder-32510-authenticated-contributor-sensitive-information-exposure-via-shortcode 2025-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusion/fusion-161-authenticated-contributor-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blog2social/blog2social-social-media-auto-post-scheduler-754-authenticated-author-stored-cross-site-scripting-via-file-upload 2024-07-31T18:01:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-ajax-filters/advanced-ajax-product-filters-1681-reflected-cross-site-scripting 2025-02-27T16:18:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/business-directory-plugin/business-directory-6419-cross-site-request-forgery 2025-12-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/csv-to-sorttable/csv-to-sorttable-42-authenticated-contributor-local-file-inclusion 2025-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-affiliate-links/easy-affiliate-links-372-authenticated-contributor-stored-cross-site-scripting 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modern-footnotes/modern-footnotes-1415-authenticated-administrator-stored-cross-site-scripting 2023-03-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arconix-shortcodes/arconix-shortcodes-2113-authenticated-contributor-stored-cross-site-scripting-via-box-shortcode 2024-10-29T00:48:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/no-future-posts/no-future-posts-14-stored-cross-site-scripting 2022-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alphaomega-captcha-anti-spam/alphaomega-captcha-amp-anti-spam-filter-33-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/fleur/fleur-20-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/collect-and-deliver-interface-for-woocommerce/cdi-collect-and-deliver-interface-for-woocommerce-519-multiple-cross-site-scripting 2022-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailchimp-subscribe-sm/mailchimp-subscribe-forms-41-authenticated-contributor-stored-cross-site-scripting 2025-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sms/wsms-formerly-wp-sms-sms-mms-notifications-with-otp-and-2fa-for-woocommerce-71-authenticated-administrator-stored-cross-site-scripting 2026-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/defender-security/defender-security-410-sensitive-information-exposure-via-log-file 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youzify/youzify-122-insecure-direct-object-reference 2023-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sanzo/sanzo-243-authenticated-subscriber-stored-cross-site-scripting 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/business-manager/business-manager-145-stored-cross-site-scripting 2021-10-14T13:46:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webinar-ignition/webinarignition-40604-missing-authorization 2025-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-manager/events-manager-594-cross-site-scripting 2018-07-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broken-link-checker/broken-link-checker-1108-cross-site-scripting 2015-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cost-calculator-builder/cost-calculator-builder-3142-improper-authorization 2023-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-websites-showcase/product-website-showcase-10-unauthenticated-arbitrary-file-upload 2024-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce/woocommerce-651-authenticated-admin-html-injection 2022-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/private-comment/private-comment-004-authenticated-administrator-stored-cross-site-scripting-via-label-text-setting 2026-02-17T18:31:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wphrm/wphrm-human-resource-management-system-11-sql-injection 2017-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/limit-login-attempts-plus/limit-login-attempts-plus-109-unauthenticated-stored-cross-site-scripting 2023-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-simple-login-registration-plugin/simple-login-registration-102-cross-site-scripting 2013-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/elegant-grunge/elegant-grunge-103-cross-site-scripting 2011-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cache-images/cache-images-32-missing-authorization 2022-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profit-products-tables-for-woocommerce/active-products-tables-for-woocommerce-1068-authenticated-contributor-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-and-post-lister/page-and-post-lister-121-missing-authorization-to-authenticated-subscriber-arbitrary-post-deletion 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ameliabooking/booking-for-appointments-and-events-calendar-amelia-23-authenticated-subscriber-privilege-escalation 2026-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusion-builder/avada-builder-31114-authenticated-contributor-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aruba-hispeed-cache/aruba-hispeed-cache-303-missing-authorization 2026-01-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpsso/wpsso-core-18181-missing-authorization 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/language-switcher-for-transposh/language-switcher-for-transposh-159-reflected-cross-site-scripting 2024-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-filebase/wp-filebase-3423-reflected-cross-site-scripting 2017-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortpixel-adaptive-images/shortpixel-adaptive-images-371-cross-site-request-forgery-via-shortpixel_ai_handle_page_action 2023-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-elementor-addons-header-footer-template-library-dynamic-grid-carousel-remote-arrows-5101-authenticated-contributor-stored-cross-site-scripting-via-age-gate 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-wp-smtp/easy-wp-smtp-151-authenticated-admin-directory-traversal 2022-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weekly-schedule/weekly-schedule-342-stored-cross-site-scripting 2021-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geo-my-wp/geo-my-wordpress-402-authenticatedadministrator-sql-injection 2023-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accordion-slider/accordion-slider-1911-authenticted-contributor-stored-cross-site-scripting-via-html-attribute 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oneclick-whatsapp-order/oneclick-chat-to-order-1042-authenticated-administrator-stored-cross-site-scripting 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/auramart/auramart-207-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/academy/academy-lms-1925-unauthenticated-sensitive-information-exposure 2024-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusion-builder/avada-builder-31113-unauthenticated-arbitrary-shortcode-execution 2025-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addon-jobsearch-chat/addon-jobsearch-chat-30-reflected-cross-site-scripting 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-updraftplus-extension/mainwp-updraftplus-extension-406-missing-authorization 2023-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-map-plugin/wp-google-map-plugin-311-cross-site-scripting 2016-07-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-map-block/wp-map-block-202-authenticated-contributor-stored-cross-site-scripting 2025-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-free-version-103024-unauthenticated-insecure-direct-object-reference 2026-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clover-online-orders/smart-online-order-for-clover-160-missing-authorization 2026-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/talkback-secure-linkback-protocol/talkback-10-unauthenticated-php-object-injection 2024-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/set-bulk-post-categories/set-bulk-post-categories-11-cross-site-request-forgery-to-bulk-post-category-update 2026-01-23T19:23:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lottiefiles/lottiefiles-300-missing-authorization 2026-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/barcode-scanner-with-inventory-order-manager-161-authenticated-subscriber-sql-injection 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/charitable/charitable-18104-authenticated-custom-sql-injection-via-s-search-parameter 2026-05-12T15:46:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/puzzles/puzzles-wp-magazine-review-with-store-wordpress-theme-rtl-424-unauthenticated-php-object-injection 2025-02-12T16:10:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real-media-library-lite/real-media-library-media-library-folder-file-manager-41828-authenticated-author-stored-cross-site-scripting 2023-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/canadian-nutrition-facts-label/canadian-nutrition-facts-label-30-authenticated-contributor-stored-cross-site-scripting-via-nutrition-label-custom-post-type 2025-12-05T17:47:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jeg-elementor-kit/jeg-elementor-kit-264-authenticated-contributor-cross-site-scripting-via-elementor-widget-url-custom-attributes 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/timetics/timetics-appointment-booking-calendar-scheduling-system-1052-missing-authorization 2026-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gutenverse/gutenverse-ultimate-wordpress-fse-blocks-addons-ecosystem-346-authenticated-contributor-stored-cross-site-scripting-via-imageload 2026-04-03T13:45:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scratch-win-giveaways-for-website-facebook/scratch-win-giveaways-and-contests-280-missing-authorization-to-unauthenticated-coupon-creation 2025-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliate-links/affiliate-links-lite-26-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elementor-inner-sections-by-boomdevs/prime-elementor-addons-133-authenticated-contributor-stored-cross-site-scripting-via-widget-html-tag-settings 2026-06-08T19:49:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-334-missing-authorization-to-booking-price-maniputlation 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rescue-shortcodes/rescue-shortcodes-28-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-pay-counter/post-pay-counter-2731-arbitrary-settings-change 2017-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/open-external-links-in-a-new-window/external-links-in-new-window-new-tab-142-tabnabbing 2022-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revslider/slider-revolution-6619-authenticated-author-php-object-injection 2023-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-metabox/gallery-metabox-15-missing-authorization-via-refresh_metabox 2023-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leyka/leyka-3303-authenticated-administrator-stored-cross-site-scripting 2023-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/order-auto-complete-for-woocommerce/order-auto-complete-for-woocommerce-120-authenticated-administrator-stored-cross-site-scripting 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/triss/triss-26-reflected-cross-site-scripting 2025-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-with-phone-number/login-with-phone-number-1716-unauthorized-account-password-change-to-privilege-escalation 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alpine-photo-tile-for-instagram/alpine-phototile-for-instagram-1276-reflected-cross-site-scripting 2015-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newstatpress/newstatpress-098-authenticated-sql-injection 2015-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/coachify/coachify-107-cross-site-request-forgery-to-notice-dismissal 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/decent-comments/decent-comments-302-unauthenticated-information-exopsure 2026-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-3625-denial-of-service-via-large-form-submissions 2023-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bit-form/bit-form-contact-form-plugin-21310-authenticated-administrator-arbitrary-file-upload 2024-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-theme-331-stored-cross-site-scripting 2023-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-social-buttons/simple-social-media-share-buttons-540-authenticated-administrator-stored-cross-site-scripting 2025-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-registration/event-registration-60202-sql-injection 2016-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatorwp/automatorwp-5213-authenticated-administrator-sql-injection 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7/contact-form-7-594-unauthenticated-open-redirect 2024-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/curatorio/curatorio-show-all-your-social-media-posts-in-a-beautiful-feed-191-authenticated-contributor-stored-cross-site-scripting-via-feed_id-attribute 2024-10-09T13:30:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-ajax-page-loader/advanced-ajax-page-loader-277-arbitrary-file-upload 2016-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/frontpage-manager/frontpage-manager-13-cross-site-request-forgery-via-admin_page 2024-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ht-mega-for-elementor/ht-mega-absolute-addons-for-elementor-291-authenticated-author-sensitive-information-exposure 2025-07-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arforms/arforms-371-unauthenticated-arbitrary-file-deletion 2019-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-exporter/export-all-posts-products-orders-refunds-users-213-unauthenticated-php-object-injection 2025-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-516-authenticated-contributor-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-slideshow/content-slideshow-241-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-05-26T17:26:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.9/wordpress-core-592-gutenberg-1272-prototype-pollution-via-block-editor 2022-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluentform/fluentform-4325-authenticated-administrator-sql-injection 2023-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcut-macros/shortcut-macros-13-missing-authorization-to-settings-update 2022-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-discord-post-plus/wp-discord-post-plus-supports-unlimited-channels-102-cross-site-request-forgery 2025-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-1315-unauthenticated-blind-sql-injection-via-ip 2022-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/houzez-theme-functionality/houzez-theme-functionality-412-missing-authorization 2025-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Avada/avada-514-cross-site-request-forgery 2017-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/justified-gallery/justified-gallery-170-authenticated-contributor-stored-cross-site-scripting 2022-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/portfolio-and-projects/portfolio-and-projects-137-cross-site-request-forgery-via-wpos_anylc_admin_init_process 2023-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/daily-prayer-time-for-mosques/daily-prayer-time-20230320-authenticated-contributor-stored-cross-site-scripting 2023-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagerestrict/page-restrict-255-cross-site-request-forgery-via-pr_admin_page 2024-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jquery-lightbox/lightpress-lightbox-233-authenticated-contributor-stored-cross-site-scripting 2025-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-link-directory/simple-link-directory-883-missing-authorization 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gwolle-gb/gwolle-guestbook-492-unauthenticated-stored-cross-site-scripting-via-gwolle_gb_content-parameter 2025-07-09T12:49:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-thank-you-page-customizer/thank-you-page-customizer-for-woocommerce-118-missing-authorization 2025-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ht-instagram/ht-feed-127-cross-site-request-forgery-leading-to-limited-plugin-activation 2023-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp3-music-player-by-sonaar/mp3-audio-player-for-music-radio-podcast-by-sonaar-4101-unauthenticated-arbitrary-file-download 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cubewp-framework/cubewp-all-in-one-dynamic-content-framework-1124-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rabbit-loader/rabbitloader-21913-missing-authorization-via-multiple-ajax-actions 2024-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-donation-plugin-and-fundraising-platform-4130-unauthenticated-stored-cross-site-scripting-via-name 2025-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-content-copy-protector/wp-content-copy-protection-no-right-click-355-authenticated-administrator-stored-cross-site-scripting 2023-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-sermons/advanced-sermons-34-authenticated-contributor-stored-cross-site-scripting 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/head-meta-data/head-meta-data-20251118-authenticated-contributor-stored-cross-site-scripting-via-post-meta 2026-01-20T01:55:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-networks-auto-poster-facebook-twitter-g/nextscripts-social-networks-auto-poster-447-authenticated-contributor-php-object-injection 2026-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-load-more/wordpress-infinite-scroll-ajax-load-more-5602-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-email/contact-form-email-1331-missing-authorization-to-feedback-submission 2023-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-storymap/storymap-21-cross-site-request-forgery 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdoodlez/wp-doodlez-1010-unauthenticated-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videowhisper-live-streaming-integration/broadcast-live-video-live-streaming-4295-full-path-disclosure 2014-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-inventory-manager/wp-inventory-manager-21013-cross-site-request-forgery-via-delete_item 2023-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/north-wp/north-575-authenticated-contributor-php-object-injection 2026-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor-lms-elementor-addons/tutor-lms-elementor-addons-213-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-hashtags/social-hashtags-300-cross-site-scripting 2012-10-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wholesale-market-for-woocommerce/wholesale-market-for-woocommerce-106-unauthenticated-arbitrary-file-download 2022-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anonymous-restricted-content/anonymous-restricted-content-165-unauthenticated-content-restriction-bypass-to-sensitive-information-exposure 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/canto/canto-308-unauthenticated-remote-file-inclusion 2024-06-13T15:59:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-images-widget/social-images-widget-21-missing-authorization-to-unauthenticated-arbitrary-plugin-settings-deletion 2025-11-24T19:13:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cookie-notice/cookie-notice-compliance-for-gdpr-ccpa-246-authenticated-contributor-stored-cross-site-scripting-via-cookies_policy_link-shortcodes 2023-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/health-check/health-check-troubleshooting-123-path-traversal 2019-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profit-products-tables-for-woocommerce/active-products-tables-for-woocommerce-use-constructor-to-create-tables-108-unauthenticated-sql-injection 2026-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inpost-gallery/inpost-gallery-2143-cross-site-request-forgery 2025-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usermaven/usermaven-121-cross-site-request-forgery 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mashsharer/social-media-share-buttons-386-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2022-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insert-php/woody-code-snippets-245-reflected-cross-site-scripting 2022-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-membership/simple-membership-329-reflected-cross-site-scripting 2016-07-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slideshow-se/slideshow-se-2520-authenticated-author-stored-cross-site-scripting 2024-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-chinese-conversion/wp-chinese-conversion-1116-unauthenticated-stored-cross-site-scripting 2023-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-security-and-firewall/all-in-one-wp-security-firewall-419-reflected-cross-site-scripting 2016-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shorten-url/short-url-168-cross-site-request-forgery 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-digital-downloads/easy-digital-downloads-3381-authenticated-contributor-stored-cross-site-scripting-via-edd_receipt-shortcode 2025-05-28T19:44:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-gdpr-cookie-consent/wp-gdpr-cookie-consent-100-authenticated-subscriber-stored-cross-site-scripting-via-ninja_gdpr_ajax_actions-ajax-action 2026-06-08T15:05:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hive-support/hive-support-125-authenticated-subscriber-missing-authorization-via-hs_update_ai_chat_settings-and-hive_lite_support_get_all_binbox 2025-06-05T17:48:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/fotawp/fota-wp-141-missing-authorization-via-fotawp_install_and_activate_plugins 2024-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/justified-image-gallery/justified-image-gallery-10-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-migration/all-in-one-wp-migration-204-missing-authorization-to-database-export 2015-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-travel/wp-travel-ultimate-travel-booking-system-tour-management-engine-1140-authenticated-contributor-sql-injection 2026-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/interactive-geo-maps/interactive-geo-maps-159-authenticated-editor-stored-cross-site-scripting 2023-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/genealogical-tree/genealogical-tree-225-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/marketer-addons/marketer-addons-101-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-user-profiles-groups-and-communities-5942-authenticated-subscriber-limited-server-side-request-forgery 2025-02-17T13:43:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-history/simple-history-track-log-and-audit-wordpress-changes-5260-authenticated-subscriber-account-takeover-via-missing-authorization-on-event-reaction-endpoint 2026-05-29T20:38:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/king-addons/king-addons-for-elementor-51138-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-widgets 2026-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-parcel-pro/parcel-pro-1611-open-redirect-via-redirect 2023-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auxin-elements/shortcodes-and-extra-features-for-phlox-theme-2154-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-automatic/wordpress-automatic-plugin-ai-content-generator-and-auto-poster-plugin-31180-cross-site-request-forgery-to-stored-cross-site-scripting 2025-08-25T20:27:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-members/wp-members-354-authenticated-contributor-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-caldav2ics/wp-caldav2ics-134-cross-site-request-forgery 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter/newsletter-681-reflected-cross-site-scripting 2020-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforms-lite/contact-form-by-wpforms-1922-missing-authorization 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-manager/events-manager-6471-authenticated-contributor-stored-cross-site-scripting 2024-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/portfolio-builder-elementor/elementor-portfolio-builder-100-authenticated-contributor-stored-cross-site-scripting 2024-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-products-filter/husky-137-authenticated-contributor-local-file-inclusion 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-multiple-addresses/woocommerce-multiple-addresses-1071-authenticated-subscriber-privilege-escalation 2025-05-06T13:28:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/truebooker-appointment-booking/truebooker-107-cross-site-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/campaign-monitor-wp/campaign-monitor-forms-by-optin-cat-257-reflected-cross-site-scripting 2024-12-02T21:32:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-social-media-icons/social-media-share-icons-291-authenticated-administrator-stored-cross-site-scripting 2024-07-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qwiz-online-quizzes-and-flashcards/qwizcards-361-stored-cross-site-scripting 2021-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-table-builder/wp-table-builder-2019-incorrect-authorization-to-authenticated-subscriber-arbitrary-table-creation 2026-01-08T18:58:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/perfmatters/perfmatters-216-cross-site-request-forgery 2023-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/db-access/db-access-087-authenticated-subscriber-sql-injection 2025-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ap-pricing-tables-lite/ap-pricing-tables-lite-114-reflected-cross-site-scripting 2022-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/templatera/templatera-230-authenticated-contributor-stored-cross-site-scripting 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-by-rank-math/rank-math-seo-10231-htaccess-file-manipulation-to-remote-code-execution 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/betterdocs/betterdocs-best-documentation-faq-knowledge-base-plugin-with-ai-support-instant-answer-for-elementor-gutenberg-333-unauthenticated-php-object-injection 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-content-filter/wp-content-filter-censor-all-offensive-content-from-your-site-301-authenticated-administrator-stored-cross-site-scripting 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/palatio/palatio-16-unauthenticated-local-file-inclusion 2025-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mage-eventpress/wpevently-446-missing-authorization 2025-07-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ns-simple-intro-loader/ns-simple-intro-loader-223-reflected-cross-site-scripting 2025-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/optimize-more-images/optimize-more-images-113-missing-authorization 2026-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woofunnels-aero-checkout/funnelkit-checkout-3103-authenticatedsubscriber-missing-authorization-to-settings-change 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ad-widget/wordpress-ad-widget-2200-authenticated-admin-stored-cross-site-scripting 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videowhisper-video-conference-integration/webcam-video-conference-31-cross-site-scripting 2013-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-portfolio/gallery-portfolio-146-missing-authorization-via-multiple-ajax-actions 2023-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newspack-newsletters/newspack-newsletters-2132-cross-site-request-forgery 2024-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simply-schedule-appointments/simply-schedule-appointments-1575-unauthenticated-sensitive-information-exposure 2022-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/code-generator/code-generate-10-reflected-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nmedia-user-file-uploader/frontend-file-manager-234-authenticated-subscriber-arbitrary-file-deletion 2025-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ubermenu/uber-menu-382-authenticated-contributor-stored-cross-site-scripting-via-multiple-shortcodes 2024-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpb-floating-menu-or-categories/wpb-floating-menu-or-categories-sticky-floating-side-menu-categories-with-icons-108-authenticated-editor-stored-cross-site-scripting-via-icon-css-class-category-field 2026-05-20T14:09:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beeteam368-extensions/beeteam368-extensions-235-authenticated-subscriber-arbitrary-file-upload 2025-07-11T18:49:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/age-restriction/age-restriction-302-authenticated-subscriber-privilege-escalation 2025-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-geek/event-geek-252-authenticated-admin-stored-cross-site-scripting 2021-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wishlist-member-x/wishlist-member-x-3290-missing-authorization 2026-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-saml-20-single-sign-on/saml-single-sign-on-saml-sso-login-4920-reflected-cross-site-scripting 2022-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dx-delete-attached-media/dx-delete-attached-media-2051-cross-site-request-forgery-via-add_to_base 2023-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/decorator-woocommerce-email-customizer/webtoffee-ecommerce-marketing-automation-211-missing-authorization 2025-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nextgen-gallery/nextgen-gallery-2110-unrestricted-file-upload 2015-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-lister-for-amazon/wp-lister-lite-for-amazon-2616-reflected-cross-site-scripting 2024-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-jetpack/booster-for-woocommerce-548-reflected-cross-site-scripting-in-pdf-invoicing-module 2021-12-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rencontre/rencontre-dating-site-322-cross-site-request-forgery 2019-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js-support-ticket/js-help-desk-best-help-desk-support-plugin-277-authenticated-subscriber-insecure-direct-object-reference 2023-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-moneybird/integration-of-moneybird-for-woocommerce-212-reflected-cross-site-scripting 2021-09-09T16:20:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/3d-viewer/3d-viewer-embed-3d-models-185-missing-authorization 2026-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/material-design-for-contact-form-7/material-design-for-contact-form-7-264-missing-authorization-to-arbitrary-settings-update 2022-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feedwordpress/feedwordpress-20210713-reflected-cross-site-scripting 2022-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-bulk-editor/bear-bulk-editor-and-products-manager-professional-for-woocommerce-by-pluginusnet-115-cross-site-request-forgery 2026-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theplus_elementor_addon/the-plus-addons-for-elementor-pro-419-the-plus-addons-for-elementor-206-authenticated-contributor-privilege-escalation 2021-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-downloader/media-downloader-0474-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tainacan/tainacan-02112-authenticated-subscriber-sql-injection 2025-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-google-recaptcha/advanced-google-recaptcha-129-authenticated-subscriber-limited-sql-injection-via-ssearch-parameter 2025-03-27T19:32:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meeting-scheduler-by-vcita/online-booking-scheduling-calendar-for-wordpress-by-vcita-451-authenticated-subscriber-stored-cross-site-scripting 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-cafe/wpcafe-2227-authenticated-contributor-local-file-inclusion 2024-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/testimonial-rotator/testimonial-rotator-302-authenticated-stored-cross-site-scripting 2020-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instawp-connect/instawp-connect-1-click-wp-staging-migration-01044-authentication-bypass-to-admin 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-loading-effects/page-loading-effects-200-authenticated-admin-stored-cross-site-scripting 2023-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/classic-addons-wpbakery-page-builder-addons/classic-addons-wpbakery-page-builder-30-authenticated-contributor-limited-local-php-file-inclusion 2024-12-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-ads-manager/simple-ads-manager-294116-denial-of-service 2015-07-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lawyer-directory/lawyer-directory-133-authenticated-subscriber-privilege-escalation 2026-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-post/event-post-5910-cross-site-request-forgery 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/medical-addon-for-elementor/medical-addon-for-elementor-161-authenticated-contributor-stored-cross-site-scripting 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/imba/imba-150-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/parcelpanel/shipment-tracking-tracking-and-order-tracking-for-woocommerce-parcelpanel-free-to-install-382-authenticated-subscriber-sql-injection 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adwork-media-ez-content-locker/adwork-media-ez-content-locker-30-reflected-cross-site-scripting 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-shortcodes/shortcodes-by-angie-makes-207-authenticated-stored-cross-site-scripting 2016-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sydney/sydney-256-missing-authorization-to-authenticated-subscriber-limited-theme-options-update 2025-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/constructor/constructor-165-missing-authorization 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/watu/watu-quiz-3382-authenticated-admin-stored-cross-site-scripting 2023-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tectite-forms/tectite-forms-13-cross-site-request-forgery-to-settings-update 2026-06-01T19:43:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-blogster-lite/video-blogster-lite-12-cross-site-request-forgery 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/e-shot-form-builder/e-shot-102-missing-authorization-to-authenticated-subscriber-sensitive-information-exposure-via-api-token-via-eshot_form_builder_get_account_data-ajax-action 2026-03-20T15:09:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/depicter/slider-popup-builder-by-depicter-add-image-slider-carousel-slider-exit-intent-popup-popup-modal-coupon-popup-post-slider-carousel-321-authenticated-author-stored-cross-site-scripting 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/adventure-journal/adventure-journal-172-authenticated-contributor-stored-cross-site-scripting 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/suretriggers/ottokit-all-in-one-automation-platform-formerly-suretriggers-1082-unauthenticated-privilege-escalation 2025-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-search-pro/ajax-search-pro-4187-authenticated-subscriber-sql-injection 2020-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kalium/kalium-3183-cross-site-request-forgery 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-ultra-pro/booking-ultra-pro-1120-authenticated-administrator-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/patron-button-and-widgets-by-codebard/codebards-patron-button-and-widgets-for-patreon-219-reflected-cross-site-scripting-via-cb_p6_tab 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-register-using-jwt/wp-login-and-register-using-jwt-300-missing-authorization-to-authenticated-subscriber-api-key-exposure 2025-11-18T17:17:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-activity-log-pro/user-activity-log-pro-233-tracking-bypass-via-ip-spoofing 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mass-pagesposts-creator/mass-pagesposts-creator-122-missing-authorization 2018-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpsection/wpsection-138-authenticated-contributor-local-file-inlcusion 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-1324-cross-site-request-forgery-to-question-deletion 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-vertical-image-slider/wordpress-vertical-image-slider-plugin-12-cross-site-scripting 2015-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp-timetable/timetable-and-event-schedule-by-motopress-2411-authenticated-contributor-sql-injection 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-2837-authenticated-contributor-stored-cross-site-scripting 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcodes-ultimate/wp-shortcodes-plugin-shortcodes-ultimate-703-authenticated-contributor-stored-cross-site-scripting-via-su_qrcode-shortcode 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/database-cleaner/database-cleaner-105-authenticated-admin-arbitrary-file-read 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mobilize/mobilize-307-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yellow-pencil-visual-theme-customizer/yellowpencil-visual-css-style-editor-758-reflected-cross-site-scripting-livelink 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/check-email/check-log-email-105-reflected-cross-site-scripting 2022-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rollover-tab/rollover-tab-132-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/job-board-manager/job-board-manager-2160-authenticated-contributor-php-object-injection 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seraphinite-accelerator/seraphinite-accelerator-22814-missing-authorization-to-authenticated-subscriber-log-clearing 2026-03-03T21:55:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wt-smart-coupons-for-woocommerce/smart-coupons-for-woocommerce-223-missing-authorization 2025-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/featured-image-via-url/featured-image-via-url-01-authenticated-contributor-arbitrary-file-upload 2025-12-04T17:21:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-stats-manager/wp-visitor-statistics-real-time-traffic-47-sql-injection 2021-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-404-pro/custom-404-pro-371-cross-site-request-forgery 2023-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bubble-menu/bubble-menu-304-authenticated-admin-stored-cross-site-scripting 2023-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-manager-for-wp-e-commerce/smart-manager-8520-authenticated-administrator-sql-injection 2025-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bridge-core/bridge-core-33-missing-authorization-to-authenticated-subscriber-demo-import 2024-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ezplayer/ezplayer-1010-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpgform/google-forms-093-remote-code-execution 2018-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-last-modified-info/wp-last-modified-info-165-stored-cross-site-scripting 2020-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-calendars/event-calendar-104-missing-authorization-to-unauthenticated-arbitrary-calendar-deletion 2024-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/starbox/starbox-349-authenticated-contributor-stored-cross-site-scripting 2024-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-image-attributes-from-filename-with-bulk-updater/auto-image-attributes-from-filename-with-bulk-updater-add-alt-text-image-title-for-image-seo-49-authenticated-author-stored-cross-site-scripting-via-image-attribute 2026-06-01T12:44:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/twchat/two-way-chat-314-authenticated-admin-local-file-inclusion 2021-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/featured-content-gallery/featured-content-gallery-320-authenticated-administrator-stored-cross-site-scripting 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coblocks/coblocks-3113-missing-authorization 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/linet-erp-woocommerce-integration/linet-erp-woocommerce-integration-357-cross-site-request-forgery 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-colorbox/wordpress-colorbox-lightbox-plugin-114-stored-cross-site-scripting 2020-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sheets-to-wp-table-live-sync/flextable-google-sheets-connector-3191-authenticated-administrator-stored-cross-site-scripting 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trx_addons/themerex-addons-2385-unauthenticated-arbitrary-file-upload 2026-03-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theme-junkie-team-content/theme-junkie-team-content-011-authenticated-contributor-stored-cross-site-scripting 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-page-visit-counter/advanced-page-visit-counter-615-subscriber-blind-sql-injection 2022-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cartflows/cartflows-checkout-funnel-builder-for-woocommerce-2119-authenticated-administrator-php-object-injection 2026-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-revisions-manager/wp-revisions-manager-102-cross-site-request-forgery 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-horizontal-vertical-and-accordion-tabs/wp-responsive-tabs-horizontal-vertical-and-accordion-tabs-1117-authenticated-contributor-stored-cross-site-scripting 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geo-mashup/geo-mashup-11319-authenticated-subscriber-sql-injection-via-geo_mashup_null_fields-parameter 2026-05-01T19:15:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/invoice-payment-for-woocommerce/link-invoice-payment-for-woocommerce-280-missing-authorization-to-unauthenticated-arbitrary-partial-payment-creationcancellation 2026-01-26T18:22:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ocim-mp3/ocim-mp3-all-versions-cross-site-scripting 2016-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-post-comment-rating/wp-post-rating-246-missing-authorization-to-vote-manipulation 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cost-calculator-builder-pro/cost-calculator-builder-pro-3215-unauthenticated-sql-injection-via-data 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-email/contact-form-email-1324-authenticated-admin-stored-cross-site-scripting 2021-11-11T14:20:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bravis-addons/bravis-addons-130-authenticated-subscriber-arbitrary-file-upload 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-monitor/download-monitor-444-admin-sql-injection-via-orderby-parameter 2021-10-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpshop/wpshop-2-e-commerce-200-260-authenticated-subscriber-privilege-escalation-via-account-takeover 2025-05-06T13:34:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cyclone-slider/cyclone-slider-320-authenticated-admin-arbitrary-file-upload 2022-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-maker/quiz-maker-6494-missing-authorization-to-email-disclosure 2023-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/idonate/idonate-blood-donation-request-and-donor-management-system-2115-missing-authorization-to-unauthenticated-arbitrary-post-deletion 2025-11-21T19:24:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addons-for-elementor/elementor-addons-by-livemesh-834-authenticated-contributor-stored-cross-site-scripting-via-posts-carousel-widget 2024-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clickwhale/clickwhale-link-manager-link-shortener-and-click-tracker-for-affiliate-links-link-pages-241-reflected-cross-site-scripting 2025-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ecommerce-product-catalog/ecommerce-product-catalog-plugin-for-wordpress-355-unauthenticated-sql-injection 2026-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/show-notice-or-message-on-admin-area/show-notice-or-message-on-admin-area-20-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-contact-form-7-db-handler/wp-contact-form-7-db-handler-30-cross-site-request-forgery-to-arbitrary-file-deletion-via-contact_form-parameter 2026-05-27T18:05:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/memorialday/memorialday-104-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-17T17:31:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/soundcloud-ultimate/soundcloud-ultimate-15-cross-site-request-forgery 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-custom-login-page/simple-custom-login-page-103-authenticated-admin-stored-cross-site-scripting 2026-06-01T13:00:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-login-woocommerce/loginsignup-popup-15-missing-authorization 2020-05-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/triplea-cryptocurrency-payment-gateway-for-woocommerce/cryptocurrency-payment-gateway-for-woocommerce-2025-missing-authorization-to-unauthenticated-tracking-status-update 2025-11-17T20:53:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mappress-google-maps-for-wordpress/mappress-maps-2733-reflected-cross-site-scripting 2022-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stax-addons-for-elementor/elementor-addons-widgets-and-enhancements-stax-150-authenticated-contributor-stored-cross-site-scripting 2024-07-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ovic-addon-toolkit/ovic-addon-toolkit-261-missing-authorization 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anchor-episodes-index/anchor-episodes-index-spotify-for-podcasters-217-authenticated-contributor-stored-cross-site-scripting 2023-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dmca-badge/dmca-protection-badge-220-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-site-enhancements/admin-and-site-enhancements-ase-751-authenticated-stored-cross-site-scripting-via-svg 2024-11-11T16:57:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fgallery/fgallery-241-sql-injection 2008-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/skt-nurcaptcha/skt-nurcaptcha-350-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/split-test-for-elementor/split-test-for-elementor-183-authenticated-editor-sql-injection 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-by-rank-math/rank-math-seo-with-ai-best-seo-tools-10217-authenticated-contributor-stored-cross-site-scripting 2024-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sms-vatansms-com/vatansms-wp-sms-101-reflected-cross-site-scripting-via-page-parameter 2026-05-19T12:06:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/googlemapper-2/googlemapper-203-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetgridbuilder/jetgridbuilder-112-authenticated-contributor-local-file-inclusion 2024-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/creatorlms/creator-lms-1112-missing-authorization 2026-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gwolle-gb/gwolle-guestbook-210-stored-cross-site-scripting 2017-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/site-offline/site-offline-156-authenticated-administrator-stored-cross-site-scripting 2023-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-media-shortcodes/social-media-shortcodes-130-authenticated-contributor-stored-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recipe-maker/wp-recipe-maker-1022-insecure-direct-object-reference-to-sensitive-information-exposure 2025-12-11T20:23:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adrotate/adrotate-ad-manager-adsense-ads-368-sql-injection 2011-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-3235-authenticated-contributor-basic-information-exposure-via-get_image_alt-function 2024-10-14T12:07:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/icalendrier/icalendrier-180-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/indianic-testimonial/testimonial-23-sql-injection 2013-09-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geodirectory/geodirectory-28119-authenticated-contributor-stored-cross-site-scripting 2025-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-import/import-any-xml-or-csv-file-to-wordpress-345-cross-site-scripting 2017-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brizy-pro/brizy-pro-280-cross-site-request-forgery 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-twitter-feeds/awesome-twitter-feeds-10-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ticketsource-events/sell-tickets-online-ticketsource-ticket-shop-for-wordpress-302-authenticated-contributor-stored-cross-site-scripting 2024-12-19T18:05:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-analytify/analytify-dashboard-510-missing-authorization-to-opt-in 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jonradio-private-site/my-private-site-3014-improper-access-control-to-sensitive-information-exposure-via-rest-api 2024-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/virtual-hdm-for-taxservice-am/tax-service-electronic-hdm-112-unauthenticated-sql-injection 2024-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/header-footer-elementor/elementor-header-footer-builder-157-stored-cross-site-scripting 2021-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/estatik-mortgage-calculator/mortgage-calculator-estatik-2012-authenticated-contributor-local-file-inclusion 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-engine/ai-engine-chatgpt-chatbot-2263-authenticated-editor-arbitrary-file-upload 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-4043-missing-authorization-to-unauthenticated-private-or-password-protected-events-disclosure 2024-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/option-tree/option-tree-253-cross-site-scripting 2015-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/order-delivery-date-for-woocommerce/order-delivery-date-for-woocommerce-3200-reflected-cross-site-scripting-via-orddd_lite_custom_startdate-and-orddd_lite_custom_enddate 2023-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ambience/ambience-unspecified-versions-cross-site-scripting 2013-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/truebooker-appointment-booking/truebooker-103-unauthenticated-sql-injection 2024-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rselements-lite/rs-elements-elementor-addon-115-authenticated-contributor-stored-cross-site-scripting 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/hestia/hestia-312-cross-site-request-forgery-to-notice-dismissal 2024-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-lazy-load/advanced-lazy-load-160-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addons-for-elementor/elementor-addons-by-livemesh-837-authenticated-contributor-stored-cross-site-scripting-via-posts-grid 2024-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fv-wordpress-flowplayer/fv-flowplayer-video-player-7314727-unauthenticated-sql-injection 2019-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-crowdfunding/wp-crowdfunding-2112-missing-authorization-to-authenticated-subscriber-woocommerce-installation 2024-12-12T20:17:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-content-writing-assistant/ai-content-writing-assistant-content-writer-chatgpt-image-generator-all-in-one-117-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-wholesale-prices/wholesale-suite-215-authenticated-subscriber-cross-site-scripting 2022-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/church-admin/church-admin-4027-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easyme-connect/easyme-connect-303-cross-site-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foyer/foyer-175-content-injection-via-improper-access-control 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpfront-notification-bar/wpfront-notification-bar-200-authenticated-stored-cross-site-scripting 2021-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-3141-missing-authorization-to-unauthenticated-sensitive-information-disclosure-via-tokenrefresh-rest-endpoint 2026-06-30T17:19:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maps-for-wp/maps-for-wp-125-authenticated-administrator-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/strx-magic-floating-sidebar-maker/strx-magic-floating-sidebar-maker-141-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-adsense-and-hotel-booking/google-adsense-and-hotel-booking-105-open-proxy 2015-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-206-multiple-cross-site-request-forgery-issues 2018-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-addons-for-elementor-171057-authenticated-contributor-server-side-request-forgery-via-csv-url-parameter 2026-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feed-them-social/feed-them-social-for-twitter-feed-youtube-and-more-299-cross-site-request-forgery-to-settings-update 2022-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brizy/brizy-page-builder-2443-authenticatedcontributor-stored-cross-site-scripting-via-form-functionality 2024-06-04T17:42:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adsense-click-fraud-monitoring/adsense-click-fraud-monitoring-186-reflected-cross-site-scripting 2015-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-meta-robots/wordpress-meta-robots-21-sql-injection 2015-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar/the-events-calendar-free-pro-640-missing-authorization-to-authenticated-contributor-arbitrary-events-access 2024-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sloth-logo-customizer/sloth-logo-customizer-202-cross-site-request-forgery-to-stored-cross-site-scripting 2023-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buying-buddy-idx-crm/buying-buddy-idx-crm-230-authenticated-contributor-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zstore-manager-basic/zstore-manager-basic-3311-missing-authorization-to-authenticated-subscriber-cache-clearing 2025-01-30T00:40:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-blocks-for-gutenberg/premium-blocks-gutenberg-blocks-for-wordpress-2142-authenticated-contributor-stored-cross-site-scripting 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shared-counts/shared-counts-social-media-share-buttons-141-missing-authorization-to-arbitrary-email-sending 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/perfect-portfolio/perfect-portfolio-120-cross-site-request-forgery-to-notice-dismissal 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/matrix-pre-loader/preloader-matrix-201-cross-site-request-forgery 2023-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-stripe/easy-stripe-11-unauthenticated-remote-code-execution 2025-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stop-user-enumeration/stop-user-enumeration-172-protection-mechanism-bypass 2025-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wen-responsive-columns/wen-responsive-columns-132-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/plethora-tabs-accordions/plethora-plugins-tabs-accordions-118-authenticated-contributor-stored-cross-site-scripting-via-anchor 2025-01-24T16:27:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tlitl-auto-twitter-poster/tlitl-auto-twitter-poster-34-authenticated-administrator-stored-cross-site-scripting 2025-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accesspress-anonymous-post-pro/accesspress-anonymous-post-pro-319-unauthenticated-arbitrary-file-upload 2017-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/colibri-page-builder/colibri-page-builder-10248-missing-authorization 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oopspam-anti-spam/oopspam-anti-spam-spam-protection-for-wordpress-forms-comments-no-captcha-1262-unauthenticated-stored-cross-site-scripting 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/front-end-only-users/front-end-users-3232-authenticated-admin-sql-injection 2025-04-01T20:34:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/recurring-donation/recurring-paypal-donations-17-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/u-design-core/udesign-core-4140-authenticated-contributor-local-file-inclusion 2025-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-from-ftp/media-from-ftp-1116-authenticated-author-improper-privilege-management 2023-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scroll-top-advanced/scroll-top-advanced-25-authenticated-subscriber-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/payment-gateways-caller-for-wp-e-commerce/payment-gateways-caller-for-wp-e-commerce-011-local-file-inclusion 2013-10-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aryo-activity-log/activity-log-plugin-204-fulle-path-disclosure 2014-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/wordpress-download-manager-2951-open-redirect 2017-07-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/javascript-notifier/javascript-notifier-128-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2026-01-23T20:32:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adamrob-parallax-scroll/parallax-scroll-201-cross-site-scripting 2019-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-support/awesome-support-607-authenticated-stored-cross-site-scripting 2022-09-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/landing-page-cat/landing-page-cat-coming-soon-page-maintenance-page-squeeze-pages-176-reflected-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fifthsegment-whitelist/whitelist-35-reflected-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3286-authenticated-subscriber-stored-self-based-cross-site-scripting 2024-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/portfolio-filter-gallery/portfolio-gallery-image-gallery-plugin-156-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woostify-sites-library/woostify-sites-library-147-missing-authorization-to-authenticated-subscriber-limited-options-update 2024-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addon-elements-for-elementor-page-builder/elementor-addon-elements-11212-authenticated-contributor-stored-cross-site-scripting-via-thumbnail-slider-widget 2024-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mail-masta/mail-masta-plugin-10-sql-injection-via-filter_list 2017-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youzify/youzify-buddypress-community-user-profile-social-network-membership-plugin-for-wordpress-by-kainelabs-132-missing-authorization-to-authenticated-subscriber-arbitrary-review-deletion 2025-01-24T18:53:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cpo-shortcodes/cpo-shortcodes-150-authenticated-administrator-stored-cross-site-scripting 2022-09-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/namaste-lms/namaste-lms-265-cross-site-request-forgery 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-classify/image-classify-100-unauthenticated-arbitrary-file-upload 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-filterable-portfolio/responsive-filterable-portfolio-108-authenticated-admin-sql-injection 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/last-updated-shortcode/last-updated-shortcode-101-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lpagery/bulk-landing-page-creator-for-wordpress-lpagery-249-missing-authorization 2026-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integrate-firebase/integrate-firebase-093-authenticated-contributor-stored-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-attachments/auto-attachments-185-authenticated-administrator-stored-cross-site-scripting 2025-06-12T18:51:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/moneymasters/moneymasters-all-versions-arbitrary-file-upload 2012-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-seo/wp-meta-seo-453-missing-authorization-in-listpostscategory 2023-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/catalog-mode-pricing-enquiry-forms-promotions/wmodes-catalog-mode-product-pricing-enquiry-forms-promotions-for-woocommerce-122-missing-authorization-to-sensitive-information-disclosure 2025-11-17T20:52:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/builty/multiple-themes-by-bslthemes-various-version-unauthenticated-local-file-inclusion 2025-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/checklist/checklist-119-authenticated-contributor-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-cfm/wp-cfm-178-cross-site-request-forgery-via-multiple-ajax-functions 2024-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pixgraphy/pixgraphy-138-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/erp/wp-erp-complete-hr-solution-with-recruitment-job-listings-woocommerce-crm-accounting-1131-unauthenticated-stored-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-rating/multi-rating-505-unauthenticated-stored-cross-site-scripting 2023-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/card-elements-for-wpbakery/card-elements-for-wpbakery-108-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-restaurant-menu/quick-restaurant-menu-202-missing-authorization 2023-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-iframe/advanced-iframe-20256-authenticated-contributor-stored-cross-site-scripting 2025-08-15T18:33:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/grandrestaurant/grand-restaurant-709-reflected-cross-site-scripting 2026-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instant-popup-builder/instant-popup-builder-117-unauthenticated-arbitrary-shortcode-execution-via-token-parameter 2026-03-18T19:02:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/full-customer/full-customer-223-authenticatedsubscriber-improper-authorization-to-arbitrary-plugin-installation 2023-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-miniaudioplayer/mbmbminiaudioplayer-143-cross-site-scripting 2013-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/onionbuzz-viral-quiz/onionbuzz-plugin-127-sql-injection 2019-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/story-chief/storychief-1042-unauthenticated-arbitrary-file-upload 2025-08-15T14:41:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-marketing-automations/automation-by-autonami-360-open-redirect 2025-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elespare/elespare-blog-magazine-and-newspaper-addons-for-elementor-with-templates-widgets-kits-and-headerfooter-builder-one-click-import-no-coding-required-312-authenticated-contributor-stored-cross-site-scripting-via-horizontal-nav-menu-widget 2024-06-12T19:14:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-49-insecure-deserialization 2018-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cp-easy-form-builder/form-builder-cp-1241-authenticated-contributor-sql-injection 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-424-timing-side-channel-attack 2015-08-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-calendar/my-calendar-1105-cross-site-scripting 2012-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/loading-page/loading-page-with-loading-screen-1082-cross-site-scripting 2022-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aplazo-payment-gateway/aplazo-payment-gateway-143-missing-authorization-to-unauthenticated-order-status-manipulation 2026-01-13T17:29:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-2910-unauthenticated-local-file-inclusion 2025-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wonderplugin-video-embed/wonder-video-embed-22-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-02-18T09:35:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dhtmlxspreadsheet/dhtmlxspreadsheet-20-cross-site-scripting 2013-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy2map/easy2map-124-directory-traversal 2015-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-addons-for-elementor-825-authenticated-subscriber-blind-server-side-request-forgery 2025-10-20T08:59:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real-kit/realkit-510-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/realestate-7/wp-pro-real-estate-7-311-reflected-cross-site-scripting 2021-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/donate-with-qrcode/donate-with-qrcode-145-cross-site-request-forgery-to-settings-update 2021-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/banhammer/banhammer-monitor-site-traffic-block-bad-users-and-bots-348-unauthenticated-protection-mechanism-bypass 2025-09-25T14:27:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-enquiry/woocommerce-product-enquiry-260-unauthenticated-self-based-cross-site-scripting 2023-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-social-icons/easy-social-icons-313-admin-sql-injection 2022-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-options-plus/custom-options-plus-181-cross-site-request-forgery-via-custom_options_plus_adm 2023-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theplus_elementor_addon/the-plus-addons-for-elementor-page-builder-4110-open-redirect 2021-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/services-section/services-section-block-134-authenticated-contributor-stored-cross-site-scripting 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smartarget-message-bar/smartarget-message-bar-14-authenticated-admin-stored-cross-site-scripting 2024-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forminator/forminator-1152-reflected-cross-site-scripting 2024-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fixedly/fixedly-media-gallery-131-reflected-cross-site-scripting 2014-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-260-cross-site-request-forgery-to-form-duplication 2023-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acf-frontend-form-element/frontend-admin-by-dynamiapps-3251-unauthenticated-sql-injection 2024-12-20T20:35:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpjobboard/wpjobboard-5111-cross-site-request-forgery 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-configurator-for-woocommerce/product-configurator-for-woocommerce-144-cross-site-request-forgery 2025-07-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pretty-link/pretty-links-affiliate-links-link-branding-link-tracking-marketing-plugin-363-cross-site-request-forgery-to-plugin-settings-update 2024-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ulike/wp-ulike-473-authenticated-admin-stored-cross-site-scripting 2024-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-mailerlite/mailerlite-woocommerce-integration-312-unauthenticated-sql-injection 2026-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-protector/passster-35551-insecure-password-storage-to-sensitive-data-exposure 2022-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-data-access/wp-data-access-5563-authenticated-contributor-stored-cross-site-scripting-via-wpda_app-shortcode 2026-02-13T18:19:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-post/postx-4115-authenticated-author-stored-cross-site-scripting 2024-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/universal_video_player/universal-video-player-383-reflected-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/neon-channel-product-customizer-free/neon-channel-product-customizer-free-20-missing-authorization-to-unauthenticated-arbitrary-content-deletion 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shared-files/shared-files-easy-download-manager-and-file-sharing-plugin-with-frontend-file-upload-1660-cross-site-scripting 2021-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rentpress/rentpress-664-reflected-cross-site-scripting 2021-09-08T20:09:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cartasi-x-pay/nexi-xpay-831-missing-authorization 2026-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recall/wp-recall-registration-profile-commerce-more-16265-authenticated-contributor-sql-injection 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-backlink-monitor/seo-backlink-monitor-150-reflected-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/marketing-automation-by-azexo/marketing-automation-by-azexo-12780-authenticated-subscriber-arbitrary-file-upload 2024-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spotlightyour/spotlight-47-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-photo-album-plus/wp-photo-album-plus-613-cross-site-scripting 2015-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automation-web-platform/wawp-44-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-proposals/wp-proposals-23-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-permalinks/custom-permalinks-260-authenticatededitor-stored-cross-site-scripting 2024-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bailly/bailly-134-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fulltext-search/wp-fast-total-search-178258-cross-site-request-forgery 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-social-login/woocommerce-social-login-262-email-verification-due-to-insufficient-randomness 2024-06-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/white-label-cms/white-label-cms-151-cross-site-scripting 2012-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-1328-reflected-cross-site-scripting 2015-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor-pro/tutor-lms-pro-396-unauthenticated-sql-injection 2026-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-export-for-woocommerce/import-export-for-woocommerce-162-cross-site-request-forgery-to-stored-cross-site-scripting 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lazy-load-optimizer/lazy-load-optimizer-147-unauthenticated-local-file-inclusion 2025-07-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feedzy-rss-feeds/rss-aggregator-by-feedzy-feed-to-post-autoblogging-news-youtube-video-feeds-aggregator-441-missing-authorization 2024-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ivy-school/ivyprep-160-unauthenticated-local-file-inclusion 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/backwpup/backwpup-401-authenticated-administrator-directory-traversal 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jupiterx-core/jupiterx-core-335-unauthenticated-arbitrary-file-upload 2023-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/friends/friends-321-missing-authorization 2024-12-05T19:45:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/i-amaze/i-amaze-137-cross-site-request-forgery 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/edd-attach-accounts-to-orders/easy-digital-downloads-attach-accounts-to-orders-201-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-print-friendly/wp-print-friendly-06-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-identicon/wp_identicon-20-reflected-cross-site-scripting 2025-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/analyse-uploads/analyse-uploads-05-unauthenticated-arbitrary-file-deletion 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-jetpack/booster-for-woocommerce-710-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-order-numbers-for-woocommerce/custom-order-numbers-for-woocommerce-160-cross-site-request-forgery-to-notice-dismissal 2024-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/upc-ean-barcode-generator/upceangtin-code-generator-202-cross-site-request-forgery 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-sticky-sidebar/wp-cta-call-to-action-plugin-sticky-cta-sticky-buttons-170-missing-authorization-to-unauthenticated-sticky-status-update 2025-08-01T18:48:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-prime-slider-lite/prime-slider-addons-for-elementor-revolution-of-a-slider-hero-slider-ecommerce-slider-3147-authenticated-contributor-stored-cross-site-scripting-via-pacific-widget 2024-06-06T15:35:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/textme-sms-integration/textme-sms-188-authenticated-stored-cross-site-scripting 2021-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-system/pinpoint-booking-system-29957-cross-site-request-forgery-to-stored-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-free-widgets-addons-templates-15112-authenticated-contributor-time-based-sql-injection 2024-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-document-embedder/google-doc-embedder-254-directory-traversal 2013-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theme-editor/theme-editor-21-cross-site-request-forgery 2019-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-manager/booking-manager-215-authenticatedcontributor-sql-injection-via-shortcode 2023-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elex-helpdesk-customer-support-ticket-system/elex-wordpress-helpdesk-customer-ticketing-system-331-missing-authorization-to-authenticated-subscriber-trash-restore 2025-11-20T16:58:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revisionary/publishpress-revisions-duplicate-posts-submit-approve-and-schedule-content-changes-3514-reflected-cross-site-scripting 2024-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking/booking-calendar-921-cross-site-request-forgery 2022-09-06T14:36:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/business-directory-plugin/business-directory-plugin-easy-listing-directories-for-wordpress-642-unauthenticated-sql-injection-via-listingfields-parameter 2024-05-21T16:56:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dd-post-carousel/custom-post-carousels-with-owl-1411-authenticated-contributor-stored-cross-site-scripting 2025-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/armember-membership/armember-membership-plugin-content-restriction-member-levels-user-profile-user-signup-347-authentication-bypass-via-password-reset-weakness 2022-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/strong-testimonials/strong-testimonials-2400-stored-cross-site-scripting 2020-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-415-reflected-cross-site-scripting 2025-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/grit/grit-life-coach-business-coaching-wordpress-theme-101-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/checkout-mestres-wp/checkout-mestres-do-wp-for-woocommerce-865-875-unauthenticated-arbitrary-options-update 2025-03-28T18:37:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/donations-for-woocommerce/potent-donations-for-woocommerce-119-cross-site-request-forgery-in-hm_wcdon_admin_page 2023-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/envira-gallery-lite/envira-gallery-lite-1832-cross-site-scripting 2020-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xml-multilanguage-sitemap-generator/xml-multilanguage-sitemap-generator-206-missing-authorization 2024-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-list/page-list-52-authenticated-contributor-stored-cross-site-scripting 2022-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/robo-gallery/robo-gallery-3215-authenticatedadministrator-stored-cross-site-scripting 2023-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexmls-idx/flexmls-idx-plugin-3159-reflected-cross-site-scripting 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/felici/felici-premium-magazine-theme-17-cross-site-scripting 2013-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youtube-showcase/youtube-showcase-351-unauthenticated-php-object-injection 2025-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/world-of-warcraft-armory-table/world-of-warcraft-armory-table-026-cross-site-scripting 2014-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/secupress/secupress-free-2253-authenticated-contributor-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accelerated-mobile-pages/accelerated-mobile-pages-10881-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-custom-body-class/add-custom-body-class-141-authenticated-contributor-stored-cross-site-scripting 2023-10-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpfunnels/easiest-funnel-builder-for-wordpress-woocommerce-by-wpfunnels-355-reflected-cross-site-scripting 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/time-sheets/time-sheets-152-cross-site-scripting 2017-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cost-of-goods-for-woocommerce/cost-of-goods-for-woocommerce-286-missing-authorization-in-save_costs 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/surbma-premium-wp/surbma-premium-wp-90-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-gallery/buddypress-bp-gallery-plus-125-cross-site-scripting 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dw-question-answer/dw-question-answer-158-cross-site-request-forgery-bypass 2021-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-fonts/custom-fonts-host-your-fonts-locally-214-authenticated-author-stored-cross-site-scripting 2024-05-23T17:52:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tailored-tools/tailored-tools-184-authenticated-contributor-stored-cross-site-scripting 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-custom-profile-picture/woocommerce-custom-profile-picture-10-authenticated-subscriber-arbitrary-file-upload 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/request-a-quote/request-a-quote-2310-cross-site-request-forgery 2023-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-map-plugin/wp-maps-439-authenticated-editor-stored-cross-site-scripting 2023-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eds-responsive-menu/eds-responsive-menu-12-reflected-cross-site-scripting 2026-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-duplicator/post-duplicator-235-missing-authorization 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-jetpack/booster-for-woocommerce-558-reflected-cross-site-scripting 2022-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fv-all-in-one-seo-pack/fv-simpler-seo-196-missing-authorization 2025-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pgall-for-woocommerce/-520-authenticated-contributor-local-file-inclusion 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salesforce-wordpress-to-lead/to-lead-for-salesforce-2739-cross-site-request-forgery 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/airin-blog/airin-blog-162-unauthenticated-php-object-injection 2024-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/breadcrumbs-shortcode/breadcrumbs-shortcode-144-reflected-cross-site-scripting 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-custom-author-profiles/simple-custom-author-profiles-100-authenticated-administrator-stored-cross-site-scripting 2023-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-mercadopago/mercado-pago-payments-for-woocommerce-8711-missing-authorization-to-unauthenticated-pix-payment-qr-code-image-disclosure 2026-05-05T15:16:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/message-ticker/message-ticker-93-authenticated-administrator-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simpleshop-cz/simpleshop-2100-cross-site-request-forgery 2024-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-free-version-103025-missing-authorization 2026-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/funnelforms-free/interactive-contact-form-and-multi-step-form-builder-with-drag-drop-editor-funnelforms-free-3732-missing-authorization-to-unauthenticated-arbitrary-media-upload 2024-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/intelly-welcome-bar/welcome-bar-203-missing-authorization 2023-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/title-animator/title-animator-10-cross-site-request-forgery-to-settings-update 2026-02-06T20:24:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/only-tweet-like-share-and-google-1/simple-light-weight-social-share-tweet-like-share-and-linkedin-20-authenticated-administrator-stored-cross-site-scripting 2023-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-analytify/analytify-google-analytics-dashboard-for-wordpress-ga4-analytics-made-easy-523-cross-site-request-forgery 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gold-addons-for-elementor/gold-addons-for-elementor-129-authenticated-contributor-stored-cross-site-scripting 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sitebuilder-dynamic-components/sitebuilder-dynamic-components-10-unauthenticated-php-object-injection 2024-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pirate-forms/contact-form-smtp-plugin-for-wordpress-by-pirateforms-260-unauthenticated-arbitrary-shortcode-execution 2025-01-29T21:22:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-proxy/simple-proxy-10-reflected-cross-site-scripting 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hipaatizer/hipaa-compliant-forms-with-dragndrop-hipaa-form-builder-sign-hipaa-documents-134-authenticated-contributor-stored-cross-site-scripting 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anac-xml-viewer/anac-xml-viewer-182-authenticated-contributor-server-side-request-forgery 2025-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/require-taxonomy-image-category-tag/require-limit-categories-tags-featured-image-and-taxonomies-126-reflected-cross-site-scripting 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp-timetable/timetable-and-event-schedule-by-motopress-238-missing-authorization 2020-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widgetkit-for-elementor/all-in-one-addons-for-elementor-widgetkit-243-authenticated-administrator-stored-cross-site-scripting 2022-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wide-banner/wide-banner-104-missing-authorization 2025-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-41732-unauthenticated-sql-injection 2023-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-field-for-wp-job-manager/custom-field-for-wp-job-manager-12-insecure-direct-object-reference-to-sensitive-information-exposure-via-shortcode 2024-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-like-button/wp-like-button-1611-cross-site-request-forgery-via-savedata 2023-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallerio/gallerio-101-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html5-audio-player/html5-audio-player-the-ultimate-no-code-podcast-mp3-audio-player-240-251-unauthenticated-server-side-request-forgery 2025-12-18T18:14:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/gutenberg-blocks-by-kadence-blocks-3217-authenticatededitor-stored-cross-site-scripting-via-contact-form-message-settings 2024-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-frontend-pro/wp-user-frontend-pro-413-authenticated-subscriber-arbitrary-file-upload 2025-06-04T16:33:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/grid/grid-231-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sensei-lms/sensei-lms-443-information-disclosure 2022-08-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-201-cross-site-request-forgery-to-settings-modification 2023-05-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress-import-export/learnpress-export-import-403-authenticated-administrator-sql-injection 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/groundhogg/groundhogg-3423-cross-site-request-forgery 2024-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zephyr-project-manager/zephyr-project-manager-33100-authenticated-subscriber-insecure-direct-object-reference 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/callbackkiller-service-widget/callbackkiller-service-widget-12-missing-authorization-to-unauthenticated-arbitrary-plugin-settings-update 2026-02-13T18:24:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-and-page-builder/post-and-page-builder-by-boldgrid-1279-missing-authorization 2026-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zero-bs-crm/jetpack-crm-531-cross-site-request-forgery-and-phar-deserialization 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pixelating-image-slideshow-gallery/pixelating-image-slideshow-gallery-80-authenticated-contributor-sql-injection 2025-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-473-cross-site-scripting-via-taxonomy-names 2017-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliates-manager/affiliate-manager-286-admin-sql-injection 2021-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/store-locator/store-locator-3987-cross-site-request-forgery-to-settings-update 2023-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jeg-elementor-kit/jeg-elementor-kit-269-authenticated-contributor-stored-cross-site-scripting-via-jkit-countdown-widget 2024-11-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-social-broadcast/wp-social-broadcast-100-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-3355-missing-authorization 2026-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/facebook-conversion-pixel/pixel-cat-conversion-pixel-manager-263-reflected-cross-site-scripting 2021-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/read-more-copy-link/read-more-copy-link-102-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/page-builder-pagelayer-drag-and-drop-website-builder-183-authenticated-contributor-stored-cross-site-scripting-via-custom-attributes 2024-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-823-authenticated-contributor-local-file-inclusion 2025-07-07T17:24:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/valenti/valenti-5635-authenticated-contributor-php-object-injection 2026-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/analytics-cat/analytics-cat-google-analytics-made-easy-109-authenticated-admin-stored-cross-site-scripting 2022-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/islamic-database/islamic-database-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-05-26T17:22:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/molla/molla-1513-unauthenticated-remote-code-execution 2025-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b-slider/b-slider-1130-missing-authorization 2025-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lunar-sell-photos-online/lunar-130-authenticated-administrator-stored-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/makestories-helper/makestories-for-web-stories-264-cross-ste-scripting 2022-07-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/s2member/s2member-250905-unauthenticated-remote-code-execution 2025-10-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-classifieds-and-directory-pro/advanced-classifieds-directory-pro-313-authenticated-contributor-local-file-inclusion 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/porto/porto-710-unauthenticated-local-file-inclusion-via-porto_ajax_posts 2024-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-warfare/social-warfare-352-remote-code-execution 2021-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/photome/photome-571-unauthenticated-stored-cross-site-scripting 2026-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-swimteam/swim-team-1451085-directory-traversal 2015-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aibuddy-openai-chatgpt/aibud-wp-185-authenticated-admin-arbitrary-file-upload 2025-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bonjour-bar/bonjour-bar-100-authenticated-administrator-stored-cross-site-scripting 2025-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html5-chat/html5-chat-107-authenticated-contributor-stored-cross-site-scripting 2025-01-30T00:40:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-addons-for-elementor/responsive-addons-for-elementor-free-elementor-addons-plugin-and-elementor-templates-164-authenticated-contributor-local-file-inclusion 2025-02-20T21:19:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sirv/image-optimizer-resizer-and-cdn-sirv-132-sql-injection 2016-11-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sprout-clients/sprout-clients-32-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulk-editor/wolf-107-cross-site-request-forgery-via-create_profile 2023-05-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integration-dynamics/dynamics-365-integration-1312-cross-site-request-forgery-via-wp_ajax_wpcrm_log_verbosity 2023-03-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meks-smart-author-widget/meks-smart-author-widget-114-authenticated-contributor-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/url-params/url-params-24-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-db/contact-form-to-db-156-multiple-cross-site-scripting 2017-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ht-mega-for-elementor/ht-mega-absolute-addons-for-elementor-250-authenticated-contributor-stored-cross-site-scripting-via-tooltip-popover-widget 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-notification-bell/wp-notification-bell-146-authenticated-author-stored-cross-site-scripting 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cart-rest-api-for-woocommerce/cocart-headless-ecommerce-3112-missing-authorization 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/archicon/archicon-17-unauthenticated-php-object-injection 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-tabs-slides/wp-tabs-slides-203-cross-site-request-forgery 2023-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-332-improper-server-side-checks-to-booking-payment-bypass 2023-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ticket/wp-ticket-604-unauthenticated-sql-injection-via-wordpress-search-s-parameter 2026-06-12T14:23:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/kadence-blocks-3253-authenticated-contributor-stored-cross-site-scripting 2024-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/litespeed-cache/litespeed-cache-7501-reflected-cross-site-scripting 2025-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/payment-forms-for-paystack/payment-forms-for-paystack-341-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcodes-ultimate/wordpress-shortcodes-plugin-shortcodes-ultimate-5101-authenticated-contributor-stored-cross-site-scripting 2021-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extended-widget-options/widget-options-extended-521-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js-twentytwenty/jquery-twentytwenty-10-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-adsense-reloaded/quads-ads-manager-for-google-adsense-20981-authenticated-contributor-stored-cross-site-scripting-via-multiple-ad-metadata-parameters 2026-03-27T23:01:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/button/button-1122-authenticated-administrator-stored-cross-site-scripting 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gyan-elements/gyan-elements-221-authenticated-contributor-local-file-inclusion 2026-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meks-easy-social-share/meks-easy-social-share-127-authenticated-administrator-stored-cross-site-scripting 2022-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/icegram/icegram-3124-missing-authorization 2024-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lh-copy-media-file/lh-copy-media-file-108-reflected-cross-site-scripting 2024-09-30T19:31:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-frontend/wp-user-frontend-4112-authenticated-subscriber-arbitrary-shortcode-execution 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modal-dialog/modal-dialog-3514-reflected-cross-site-scripting 2023-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/holmes/holmes-17-authenticated-subscriber-insecure-direct-object-reference 2026-01-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themesflat-addons-for-elementor/themesflat-addons-for-elementor-222-authenticated-contributor-stored-cross-site-scripting 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wholesale-market/wholesale-market-for-woocommerce-200-wholesale-market-221-cross-site-request-forgery 2022-12-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/newsmag/newsmag-50-reflected-cross-site-scripting 2021-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sharebang/sharebang-ultimate-social-share-buttons-for-wordpress-14-reflected-cross-site-scripting 2025-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-orders-tracking/orders-tracking-for-woocommerce-1210-unauthenticated-arbitrary-shortcode-execution 2024-05-09T20:59:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qubely/quebely-184-authenticated-contributor-stored-cross-site-scripting-via-classname-block-option 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/featured-image-from-url/featured-image-from-url-fifu-527-unauthenticated-information-exposure-via-log-file 2025-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blocksy-companion-pro/blocksy-companion-pro-2137-authenticated-contributor-remote-code-execution 2026-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rescue-shortcodes/rescue-shortcodes-33-authenticated-contributor-stored-cross-site-scripting 2026-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/designthemes-portfolio-addon/designthemes-portfolio-addon-15-authenticated-contributor-stored-cross-site-scripting 2025-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-analytics/social-analytics-02-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mediabay/mediabay-wordpress-media-library-folders-14-authenticated-subscriber-sql-injection 2025-07-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qubely/qubely-1814-authenticated-author-stored-cross-site-scripting 2026-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vitamin/vitamin-110-directory-traversal 2012-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-274-cross-site-request-forgery-via-addon_enable_disable 2024-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-customers-manager/woocommerce-customers-manager-265-cross-site-request-forgery-to-account-creation 2021-03-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-notify-updated-product/woocommerce-notify-updated-product-16-cross-site-request-forgery-to-stored-cross-site-scripting 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-dynamic-keywords-injector/wp-dynamic-keywords-injector-2321-reflected-cross-site-scripting 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/funnelforms-free/funnelforms-free-34-missing-authorization-to-category-deletion 2023-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/live-shopping-video-streams/live-shopping-shoppable-videos-for-woocommerce-220-cross-site-request-forgery 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-slimstat/slimstat-analytics-492-reflected-cross-site-scripting-via-request_uri 2022-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/system-dashboard/system-dashboard-2817-reflected-cross-site-scripting-via-filename-parameter 2025-01-30T00:41:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-playlist-and-gallery-plugin/post-video-players-1163-authenticated-editor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/byconsole-woo-order-delivery-time/wooodt-lite-246-missing-authorization-to-arbitrary-options-update 2023-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imageboss/imageboss-images-up-to-60-smaller-cdn-306-cross-site-scripting 2020-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tracking-code-manager/tracking-code-manager-1115-denial-of-service 2017-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-support-plus-responsive-ticket-system/wp-support-plus-responsive-ticket-system-41-directory-traversal 2014-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-301-redirects/simple-301-redirects-207-cross-site-request-forgery-via-clicked 2023-08-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-email-capture/email-capture-3125-cross-site-request-forgery 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exportfeed-for-woocommerce-product-to-etsy/woocommerce-etsy-integration-331-cross-site-request-forgery-bypass 2021-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-mobile-friendly-image-gallery-1821-authenticated-admin-stored-cross-site-scripting-via-svg 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gianism/gianism-522-authenticated-author-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xorbin-digital-flash-clock/xorbin-digital-flash-clock-10-dom-cross-site-scripting 2013-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-132-reflected-cross-site-scripting-via-ipf 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/teachpress/teachpress-904-cross-site-request-forgery 2023-11-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gtmetrix-for-wordpress/gtmetrix-for-wordpress-047-cross-site-request-forgery 2023-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booster-elite-for-woocommerce/booster-elite-for-woocommerce-712-authenticatedsubscriber-content-injection 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-cfdb7/contact-form-7-database-addon-cfdb7-1268-unauthenticated-sensitive-information-exposure 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/calculate-prices-based-on-distance-for-woocommerce/calculate-prices-based-on-distance-for-woocommerce-135-missing-authorization 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/relevanssi-premium/relevanssi-a-better-search-4221-unauthenticated-second-order-csv-injection 2024-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webappick-product-feed-for-woocommerce/ctx-feed-6618-missing-authorization 2026-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-free-widgets-addons-templates-15135-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets 2025-01-08T19:32:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/quantum/quantum-10-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/open-user-map-pro/open-user-map-pro-1431-unauthenticated-stored-cross-site-scripting-via-oum_location_notification 2026-06-10T13:18:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/belfort/belfort-10-unauthenticated-local-file-inclusion 2026-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforo/wpforo-forum-234-unauthenticated-sensitive-information-exposure 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tours/tours-100-missing-authorization 2025-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cashtomer/cashtomer-100-authenticated-admin-sql-injection 2021-07-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woomulti/woomulti-17-authenticated-subscriber-arbitrary-file-deletion 2025-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wptouch/wptouch-4360-authenticated-administrator-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-post-type-date-archives/custom-post-type-date-archives-271-missing-authorization-to-unauthenticated-arbitrary-shortcode-execution 2025-02-21T15:00:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-category-discount/category-discount-woocommerce-412-missing-authorization-via-wpcd_save_discount 2024-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-video-player/easy-video-player-1222-authenticated-contributor-stored-cross-site-scripting 2022-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pixelyoursite/pixelyoursite-your-smart-pixel-tag-manager-10012-cross-site-request-forgery 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/envo-elementor-for-woocommerce/envos-elementor-templates-widgets-for-woocommerce-144-missing-authorization-via-templates_ajax_request 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-survey-and-poll/wordpress-survey-poll-quiz-survey-and-poll-plugin-for-wordpress-175-authenticated-contributor-sql-injection 2025-01-30T00:48:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/metform/metform-elementor-contact-form-builder-383-missing-authorization-to-notice-dismissal 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brands-for-woocommerce/brands-for-woocommerce-3822-cross-site-request-forgery 2023-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-push-notification-firebase/wp-firebase-push-notification-120-cross-site-request-forgery-to-broadcast-notification 2025-07-03T12:22:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mystickymenu/my-sticky-bar-272-authenticated-admin-stored-cross-site-scripting 2024-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hercules-core/hercules-core-74-authenticated-subscriber-server-side-request-forgery 2025-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/related-sites/related-sites-22-sql-injection 2009-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-responsive-thumbnail-slider/thumbnail-carousel-slider-119-reflected-cross-site-scripting 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wonderplugin-audio/wonderplugin-audio-player-21-multiple-cross-site-scripting 2015-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ideapush/ideapush-866-authenticated-administrator-stored-cross-site-scripting 2024-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/photocrati-theme/photocrati-unknown-versions-multiple-vulnerabilities 2013-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nexa-blocks/nexa-blocks-gutenberg-blocks-page-builder-for-gutenberg-editor-fse-111-unauthenticated-php-object-injection 2026-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/shopwell/shopwell-1011-missing-authorization 2026-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-better-messages/better-messages-live-chat-for-wordpress-buddypress-peepso-ultimate-member-buddyboss-269-unauthenticated-sensitive-information-exposure-through-unprotected-directory 2025-02-28T19:31:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/material-design-icons/material-design-icons-005-authenticated-contributor-stored-cross-site-scripting-via-mdi-icon-shortcode 2024-09-24T12:16:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enhanced-tooltipglossary/cm-tooltip-glossary-437-authenticated-contributor-stored-cross-site-scripting 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/knowledgebase/knowledge-base-211-authenticated-contributor-stored-cross-site-scripting-via-block 2023-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accessibe/web-accessibility-by-accessibe-210-missing-authorization 2025-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-customers-manager/premmerce-woocommerce-customers-manager-1114-reflected-cross-site-scripting 2026-01-06T18:36:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/healer/healer-doctor-clinic-medical-wordpress-100-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/muzicon/muzicon-190-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/notibar/notibar-215-authenticated-administrator-stored-cross-site-scripting 2025-03-05T21:11:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-facebook-reviews/wp-review-slider-128-authenticated-administrator-stored-cross-site-scripting 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-encoder-bundle/email-encoder-protect-email-addresses-and-phone-numbers-244-authenticated-contributor-stored-cross-site-scripting-via-eeb_mailto-shortcode 2026-04-15T18:24:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cc-child-pages/cc-child-pages-211-authenticated-contributor-stored-cross-site-scripting-via-more-parameter 2026-05-13T19:50:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dokan-lite/dokan-ai-powered-woocommerce-multivendor-marketplace-solution-503-insecure-direct-object-reference-to-authenticated-custom-arbitrary-order-modification-via-multiple-ajax-handlers 2026-06-17T14:54:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fat-event-lite/fat-event-lite-11-authenticated-contributor-local-file-inclusion 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brave-popup-builder/brave-popup-builder-070-cross-site-request-forgery 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-related-posts/advanced-related-posts-191-missing-authorization 2026-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nicejob/nicejob-364-authenticated-contributor-stored-cross-site-scripting 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broken-link-checker-for-youtube/broken-link-checker-for-youtube-13-cross-site-request-forgery-via-plugin_settings_page 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Divi/divi-4231-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dl-robotstxt/dl-robotstxt-12-authenticated-admin-stored-cross-site-scripting 2024-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-wordpress-page-builder-2811-authenticated-contributor-stored-cross-site-scripting 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/firework-videos/firework-shoppable-live-video-63-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-youtube-subscribe/youtube-subscribe-300-authenticated-admin-stored-cross-site-scripting-via-title-and-channel-id 2025-11-24T19:13:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-stock-manager/stock-manager-for-woocommerce-2100-cross-site-request-forgery 2023-06-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sign-up-sheets/sign-up-sheets-228-cross-site-request-forgery 2023-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-social-media-icons/advanced-social-media-icons-12-authenticated-contributor-stored-cross-site-scripting-via-social-shortcode 2026-05-11T19:03:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/read-and-understood/read-and-understood-22-cross-site-scripting 2018-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-data-filter-and-taxonomy-filter/wordpress-meta-data-and-taxonomies-filter-mdtf-1334-authenticated-contributor-stored-cross-site-scripting 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jt-express/jt-express-malaysia-2013-reflected-cross-site-scripting-via-placeholder 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-delivery-notes/print-invoice-delivery-notes-for-woocommerce-580-missing-authorization 2026-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recall/wp-recall-registration-profile-commerce-more-16265-insecure-direct-object-reference 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/countdown-builder/countdown-coming-soon-maintenance-countdown-clock-293-authenticated-admin-stored-cross-site-scripting 2024-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/author-showcase/author-showcase-143-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-paypal-donation/wordpress-paypal-donation-101-authenticated-contributor-stored-cross-site-scripting-via-amount-shortcode-attribute 2026-03-20T15:07:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/different-shipping-and-billing-address-for-woocommerce/multiple-shipping-and-billing-address-for-woocommerce-12-unauthenticated-sql-injection 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uploader/uploader-104-multiple-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-hover-effects-elementor-addon/image-hover-effects-for-elementor-1024-authenticated-contributor-stored-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/filester/file-manager-pro-filester-18-authenticated-admin-arbitrary-file-upload 2023-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/entrada/entrada-577-cross-site-request-forgery 2025-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpbits-addons-for-elementor/wpbits-addons-for-elementor-18-authenticated-contributor-stored-cross-site-scripting 2026-01-27T17:39:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tennis-court-bookings/tennis-court-bookings-127-authenticated-administrator-stored-cross-site-scripting-via-admin-settings-and-calendar-parameters 2026-02-18T16:00:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-cleanup/image-cleanup-192-missing-authorization 2025-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-paypal-add-on/contact-form-7-paypal-stripe-add-on-20-reflected-cross-site-scripting 2024-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/icegram-rainmaker/icegram-collect-easy-form-lead-collection-and-subscription-plugin-1318-missing-authorization 2025-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/page-builder-pagelayer-drag-and-drop-website-builder-135-reflected-cross-site-scripting-via-color-settings 2020-12-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/notifier/wanotifier-2712-missing-authorization 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thegov-core/thegov-core-2023-unauthenticated-local-file-inclusion 2026-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/button-block/button-block-get-fully-customizable-multi-functional-buttons-114-authenticated-contributor-post-disclosure 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-1568-cross-site-scripting 2021-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ymc-smart-filter/filter-grids-351-missing-authorization 2026-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mizan-demo-importer/mizan-demo-importer-013-missing-authorization 2026-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duplicate-content-cure/duplicate-content-cure-10-cross-site-request-forgery 2025-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aklamator-infeed/aklamator-infeed-200-authenticated-admin-stored-cross-site-scripting 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-fields-shortcode/custom-fields-shortcode-01-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/book-a-place/book-a-place-071-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-sidebar/responsive-sidebar-122-unauthenticated-local-file-inclusion 2025-07-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-eMember/wp-emember-1065-reflected-cross-site-scripting-via-login_pwd 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/site-editor/site-editor-111-local-file-inclusion 2018-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restful-syndication/restful-content-syndication-110-150-authenticated-contributor-arbitrary-file-upload 2025-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-landing-page-generator/seo-landing-page-generator-1662-reflected-cross-site-scripting 2024-11-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/townhub/townhub-129-reflected-cross-site-scripting 2020-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/crazy-bone/crazy-bone-060-stored-cross-site-scripting 2015-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-recaptcha/login-no-captcha-recaptcha-180-unauthenticated-stored-cross-site-scripting-via-php_self 2026-05-27T14:54:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sureforms/sureforms-171-reflected-cross-site-scripting 2025-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-392-deserialization-via-widgets 2014-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/presssmart/pressmart-1226-unauthenticated-php-object-injection 2026-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/otter-blocks/otter-blocks-gutenberg-blocks-page-builder-for-gutenberg-editor-fse-265-authenticated-contributor-stored-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexible-checkout-fields/flexible-checkout-fields-for-woocommerce-412-missing-authorization 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/vex/vex-129-authenticated-subscriber-php-object-injection 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribers/email-subscribers-by-icegram-express-affordable-powerful-email-marketing-for-wordpress-woocommerce-5744-authenticated-admin-stored-cross-site-scripting-via-text-block 2024-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sudoku-shortcode/sudoku-shortcode-100-authenticated-contributor-cross-site-scripting-via-background-shortcode-attribute 2026-02-10T20:07:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-paypal-payments/quick-paypal-payments-5725-authenticated-administrator-stored-cross-site-scripting 2023-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kontxt-semantic-engine/kontxt-improves-wordpress-search-146-cross-site-request-forgery 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-elementor/ultimate-addons-for-elementor-1300-stored-cross-site-scripting 2021-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sassy-social-share/social-sharing-plugin-sassy-social-share-3375-reflected-cross-site-scripting-via-heateor_mastodon_share-parameter 2025-06-06T21:59:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wa-chatbox-manager/chatbox-manager-126-authenticated-contributor-stored-cross-site-scripting 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-postratings-cheater/wp-postratings-cheater-15-cross-site-request-forgery 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/securesubmit/wp-securesubmit-1518-missing-authorization 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor-lms-elementor-addons/tutor-lms-elementor-addons-215-missing-authorization-to-authenticated-subscriber-limited-plugin-installation 2024-11-14T16:28:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/local-delivery-drivers-for-woocommerce/local-delivery-drivers-for-woocommerce-190-missing-authorization-to-driver-account-takeover 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-redirect-thank-you-page/contact-form-7-redirect-thank-you-page-103-cross-site-request-forgery-via-cf7rl_admin_table 2023-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp_rokintroscroller/rokintroscroller-18-denial-of-service 2013-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/atec-debug/atec-debug-1222-authenticated-administrator-remote-code-execution 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rentsyst/rentsyst-2092-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userpro-messaging/private-messages-for-userpro-4100-unauthenticated-local-file-inclusion 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-symposium/wp-symposium-111224-arbitrary-file-upload 2011-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-ajax-search/yith-woocommerce-ajax-search-280-unauthenticated-sql-injection 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flashcounter/flashcounter-118-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-free-widgets-addons-templates-1560-arbitrary-file-upload-in-file-manager 2023-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quentn-wp/quentn-wp-128-unauthenticated-sql-injection 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xtremelocator/xtreme-locator-dealer-locator-plugin-301-authenticated-admin-sql-injection 2016-12-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-letsencrypt-ssl/wp-encryption-one-click-ssl-force-https-78510-missing-authorization-to-authenticated-subscriber-ssl-setup-tampering 2026-05-13T17:14:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-simple-html-sitemap/wordpress-simple-html-sitemap-28-reflected-cross-site-scripting 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contest-gallery/contest-gallery-upload-vote-sell-with-paypal-and-stripe-2703-unauthenticated-csv-injection 2025-10-10T19:47:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/infusionsoft-official-opt-in-forms/keap-official-opt-in-forms-203-authenticated-contributor-stored-cross-site-scripting 2024-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/banner-manager/banner-manager-160419-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-addon/ppom-for-woocommerce-33016-missing-authorization 2025-11-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/traderunner/trade-runner-314-cross-site-request-forgery 2025-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/quota/easy-digital-downloads-quota-125-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-field-suite/custom-field-suite-2621-authenticated-administrator-stored-cross-site-scripting 2023-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instawp-connect/instawp-connect-0109-missing-authorization-to-sensitive-information-dislcosure 2024-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/a3-portfolio/a3-portfolio-310-authenticated-author-stored-cross-site-scripting 2023-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/mediclinic/mediclinic-21-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/church-admin/church-admin-4118-missing-authorization 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/getresponse-integration/getresponse-for-wordpress-5531-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-survey-and-quiz-tool/survey-and-quiz-tool-292-unauthenticated-cross-site-scripting 2012-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-database-reset/wp-database-reset-31-unauthenticated-database-reset 2020-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/emojination/emojination-1012-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bsk-pdf-manager/bsk-pdf-manager-311-admin-sql-injection 2021-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/team-section/team-section-block-109-authenticated-contributor-stored-cross-site-scripting 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webp-converter-for-media/converter-for-media-632-missing-authorization-to-authenticated-subscriber-optimized-image-deletion-via-regenerate-attachment-rest-endpoint 2025-12-16T18:33:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/really-simple-ssl/really-simple-ssl-914-cross-site-request-forgery 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newstatpress/newstatpress-125-unauthenticated-stored-cross-site-scripting 2017-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-coming-soon-page/coming-soon-page-159-authenticated-administrator-sql-injection 2023-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpSS/wordpress-spreadsheet-062-sql-injection 2014-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-lucky-wheel/lucky-wheel-for-woocommerce-spin-a-sale-1113-authenticated-administrator-php-code-injection-via-conditional-tags 2025-12-29T23:11:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/currency-converter-calculator/currency-converter-calculator-131-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-318-authenticated-author-arbitrary-file-upload-via-mla-inline-edit-upload-scripts-ajax-action 2024-08-12T16:35:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-made-easy/events-made-easy-2223-admin-stored-cross-site-scripting 2021-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/productive-commerce/productive-commerce-1122-unauthenticated-sql-injection 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-stateless/wp-stateless-google-cloud-storage-340-missing-authorization-to-limited-arbitrary-options-update 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fintelligence-calculator/fintelligence-calculator-103-authenticated-contributor-stored-cross-site-scripting 2024-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enquiry-quotation-for-woocommerce/product-enquiry-for-woocommerce-223333-authenticated-author-php-object-injection-in-enquiry_detailphp 2024-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meta-box/meta-box-wordpress-custom-fields-framework-5910-missing-authorization-to-information-exposure 2024-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zynith-seo/zynith-seo-749-missing-authorization-to-unauthenticated-settings-update 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aparat-responsive/aparat-responsive-13-authenticated-contributor-stored-cross-site-scripting 2025-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-featured-screenshot/wp-featured-screenshot-13-reflected-cross-site-scripting 2025-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/donate-with-qrcode/donate-with-qrcode-144-authenticated-subscriber-stored-cross-site-scripting 2021-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-engine/jetengine-372-authenticated-contributor-remote-code-execution 2026-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/lendiz/lendiz-201-authenticated-subscriber-arbitrary-file-upload 2026-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/demo-awesome/demo-awesome-103-missing-authorization-to-authenticated-subscriber-plugin-activation 2025-04-01T20:30:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-333-unauthenticated-local-file-inclusion-via-template 2024-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcom-member/wpcom-member-177-authenticated-contributor-local-file-inclusion 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpack-lite-for-elementor/powerpack-addons-for-elementor-299-authenticated-contributor-stored-cross-site-scripting 2026-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-import/wp-all-import-367-authenticated-administrator-arbitrary-code-execution 2022-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/password-for-wp/password-for-wp-15-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-11T15:10:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/woohoo/woo-hoo-125-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-1022-missing-authorization-to-unauthenticated-ajax-actions-execution 2025-09-10T18:46:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/build-app-online/build-app-online-1022-cross-site-request-forgery 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clover-online-orders/smart-online-order-for-clover-156-missing-authorization-to-plugin-deactivation-and-data-deletion 2024-08-20T17:25:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/referrer-detector/referrer-detector-4210-unauthenticated-php-object-injection 2024-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirect-redirection/redirect-redirection-113-cross-site-request-forgery-via-addredirect-function 2023-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-post-expiration/simple-post-expiration-101-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/classified-listing/classified-listing-ai-powered-classified-ads-business-directory-plugin-538-authenticated-subscriber-arbitrary-file-download 2026-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-cumulus/wp-cumulus-122-cross-site-scripting-via-tagcloud 2009-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smartcrawl-seo/smartcrawl-wordpress-seo-checker-seo-analyzer-seo-optimizer-3102-missing-authorization 2024-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-pipes/wp-pipes-143-unauthenticated-sql-injection 2025-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-link-directory/simple-link-directory-892-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-05-01T14:45:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-builder-add/landing-page-builder-1495-reflected-cross-site-scripting 2021-12-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ml-slider/slider-gallery-and-carousel-by-metaslider-responsive-wordpress-plugin-3278-authenticated-administrator-stored-cross-site-scripting 2022-09-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bbp-api/bbpress-api-1014-missing-authorization 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bizcalendar-web/bizcalendar-web-11034-authenticated-administrator-sql-injection 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cds-simple-seo/simple-seo-1791-reflected-cross-site-scripting 2022-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seopress-for-mainwp/seopress-for-mainwp-14-unauthenticated-local-file-inclusion 2025-07-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inline-tweet-sharer/inline-tweet-sharer-253-authenticated-admin-stored-cross-site-scripting 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-filtering/easy-filtering-250-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-qsm-910-authenticated-contributor-stored-cross-site-scripting 2024-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-field-template/custom-field-template-261-authenticated-admin-stored-cross-site-scritping 2024-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kallyas/kallyas-4210-authenticated-contributor-arbitrary-folder-deletion 2025-07-25T19:04:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fixtag/wp-fixtag-v202-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-export/wp-all-export-1414-unauthenticated-sensitive-information-exposure-via-php-type-juggling 2026-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-fields-to-checkout-page-woocommerce/custom-woocommerce-checkout-fields-editor-131-authenticated-subscriber-stored-cross-site-scripting 2024-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fs-product-inquiry/fs-product-inquiry-111-reflected-cross-site-scripting 2024-05-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/file-away/file-away-39901-missing-authorization-to-unauthenticated-file-upload-via-upload-function 2025-03-18T23:14:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/edit-comments/edit-comments-03-reflected-cross-site-scripting 2021-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-social-connect/bp-social-connect-162-authenticated-administrator-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdevart-vertical-menu/responsive-vertical-icon-menu-158-reflected-cross-site-scripting-via-id 2023-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pricing-table-by-supsystic/pricing-table-by-supsystic-188-boolean-based-blind-sql-injections 2021-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-shortcodes-creator/shortcodes-blocks-creator-ultimate-213-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reviewx/reviewx-1617-missing-authorization-in-rx_coupon_from_submit 2023-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-wp-brand/my-wp-brand-113-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themify-event-post/themify-event-post-127-authenticated-administrator-stored-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wcs-qr-code-generator/wcs-qr-code-generator-10-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpress/powerpress-podcasting-plugin-by-blubrry-111510-authenticated-contributor-php-object-injection 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sanger/sanger-1240-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-for-woocommerce/pdf-invoices-for-woocommerce-drag-and-drop-template-builder-538-authenticated-administrator-sql-injection 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geolocator/geolocator-11-unauthenticated-php-object-injection 2024-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/folders/folders-292-authenticated-author-arbitrary-file-upload-in-handle_folders_file_upload 2023-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pie-register-premium/pie-register-premium-3832-missing-authorization 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-283-authorization-bypass 2009-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-submissions/contact-form-submissions-17-authenticated-sql-injection 2021-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lana-downloads-manager/lana-downloads-manager-171-authenticated-contributor-arbitrary-file-download 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/idsk-toolkit/id-sk-toolkit-172-authenticated-contributor-stored-cross-site-scripting 2024-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpnakama/wpnakama-063-unauthenticated-sql-injection-via-order_by-parameter 2025-12-11T18:31:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-protector/passster-3558-missing-authentication-leading-to-sensitive-information-disclosure-private-post-leakage 2022-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-posts-ticker/simple-posts-ticker-115-authenticatedadministrator-stored-cross-site-scripting 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-addons-for-gutenberg/spectra-wordpress-gutenberg-blocks-2190-authenticated-contributor-stored-cross-site-scripting 2025-03-25T16:21:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bma-lite-appointment-booking-and-scheduling/bma-lite-142-authenticated-administrator-sql-injection 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/estatik-mortgage-calculator/estatik-mortgage-calculator-2012-authenticated-contributor-local-file-inclusion 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/category-specific-rss-feed-menu/category-specific-rss-feed-subscription-22-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rsvpmaker-for-toastmasters/rsvpmaker-for-toastmasters-624-unauthenticated-arbitrary-file-upload 2024-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/baw-login-logout-menu/login-logout-menu-133-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-product-author/product-author-for-woocommerce-107-cross-site-request-forgery 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-levoslideshow/levo-slideshow-23-arbitrary-file-upload 2013-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cinza-grid/cinza-grid-121-authenticated-contributor-stored-cross-site-scripting-via-skin-content-field 2025-10-21T20:22:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-expirator/schedule-post-changes-with-publishpress-future-unpublish-delete-change-status-trash-change-categories-4100-authenticated-administrator-stored-cross-site-scripting-via-wrapper-shortcode-attribute 2026-05-04T14:02:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usersnap/usersnap-416-authenticated-admin-stored-cross-site-scripting 2023-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sticky-side-buttons/sticky-side-buttons-200-authenticated-administrator-stored-cross-site-scripting 2025-08-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-datatable/wp-datatable-026-authenticated-contributor-stored-cross-site-scripting-via-id-parameter 2025-01-30T20:02:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weblizar-pinterest-feeds/weblizar-pin-feeds-112-cross-site-request-forgery 2018-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcode-addons/shortcode-addons-325-authenticated-admin-arbitrary-file-upload 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp-timetable/timetable-and-event-schedule-by-motopress-2416-insecure-direct-object-reference-to-authenticated-contributor-sensitive-information-exposure-via-action_get_event_data-function 2026-05-27T14:55:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-plugins-dashboard/download-plugins-and-themes-from-dashboard-185-authenticated-admin-arbitrary-file-download 2024-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/buisson/buisson-1111-unauthenticated-php-object-injection 2026-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bold-page-builder/bold-builder-536-authenticated-contributor-stored-cross-site-scripting-via-additional_settings-parameter 2025-05-28T19:53:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/melodyschool/melody-163-unauthenticated-php-object-injection 2026-03-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feedlist/feedlist-26103-reflected-cross-site-scripting 2010-11-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sweetjane/sweet-jane-delightful-cake-shop-theme-12-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fw-gallery/fw-gallery-800-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-uploader/wordpress-file-uploader-11-arbitrary-file-upload 2013-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-images-ape/gallery-images-ape-228-missing-authorization 2022-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-firewall-2/wordpress-firewall-2-13-stored-cross-site-scripting 2017-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1365-unauthenticated-local-file-inclusion 2025-03-10T14:30:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/backup/jetbackup-wp-backup-migrate-restore-139-cross-site-request-forgery-to-arbitrary-file-upload 2020-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/check-email/check-log-email-109-unauthenticated-hook-injection 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/testimonial-builder/testimonial-160-authenticated-admin-stored-cross-site-scripting 2021-10-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/docpro/docpro-201-unauthenticated-local-file-inclusion 2025-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pdf-invoices-packing-slips/woocommerce-pdf-invoices-packing-slips-2150-reflected-cross-site-scripting 2022-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multisite-post-duplicator/multisite-post-duplicator-176-cross-site-request-forgery 2016-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-elementor-addons/easy-elementor-addons-226-authenticated-contributor-stored-cross-site-scripting 2025-07-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-8010-cross-site-request-forgery-to-quiz-restoration 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vk-block-patterns/vk-block-patterns-13111-cross-site-request-forgery 2024-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ota-sync-booking-engine-widget/ota-sync-booking-engine-widget-127-cross-site-request-forgery-to-stored-cross-site-scripting 2024-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-foodbakery/foodbakery-delivery-restaurant-directory-wordpress-theme-47-missing-authorization-in-multiple-functions 2025-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zephyr-project-manager/zephyr-project-manager-339-open-redirect 2023-04-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anac-xml-viewer/anac-xml-viewer-17-authenticated-administrator-stored-cross-site-scripting 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bard/bard-2216-reflected-cross-site-scripting-via-add_query_arg-parameter 2024-11-18T23:46:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trash-duplicate-and-301-redirect/trash-duplicate-and-301-redirect-191-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2114-authenticated-contributor-account-takeover-via-password-reset-link-disclosure 2026-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cbxwpbookmark/cbx-bookmark-favorite-1720-authenticated-administrator-sql-injection 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cartpauj-register-captcha/cartpauj-register-captcha-1002-captcha-bypass 2023-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rsv-google-maps/rsv-gmaps-15-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultraaddons-elementor-lite/ultraaddons-200-cross-site-request-forgery 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imageseo/optimize-images-alt-text-207-cross-site-request-forgery 2022-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nextgen-gallery/wordpress-gallery-plugin-nextgen-gallery-2246-sensitive-information-disclosure 2018-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xpro-addons-beaver-builder-elementor/xpro-addons-for-beaver-builder-8211-lite-155-authenticated-contributor-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-what-should-we-write-about-next/advanced-what-should-we-write-next-about-103-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restaurant-reservations/five-star-restaurant-reservations-274-unauthenticated-insecure-direct-object-reference 2026-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-countdown/ninja-countdown-150-missing-authorization-to-authenticated-subscriber-arbitrary-countdown-deletion 2025-11-10T15:01:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slideshow-ck/slideshow-ck-149-authenticated-stored-cross-site-scripting 2022-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/noo-wemusic/wemusic-191-authenticated-subscriber-php-object-injection 2025-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jquery-archive-list-widget/js-archive-list-617-authenticated-contributor-php-object-injection-via-included-shortcode-attribute 2026-03-06T11:46:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contentboxes/contentboxes-11-reflected-cross-site-scripting 2014-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kivicare-clinic-management-system/kivicare-clinic-patient-management-system-ehr-3616-missing-authorization 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/rosebud/rosebud-flower-shop-and-florist-wordpress-theme-14-unauthenticated-local-file-inclusion 2026-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-wp-security/ithemes-security-690-cross-site-scripting 2018-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-blogs-planetarium/wp-blogs-planetarium-10-cross-site-request-forgery-to-settings-update 2023-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dethemekit-for-elementor/dethemekit-for-elementor-215-authenticated-contributor-stored-cross-site-scripting-via-url-parameter-of-the-de-gallery-widget 2024-06-26T16:37:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/syntax-highlighter-compress/syntax-highlighter-compress-30833-reflected-cross-site-scripting 2026-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wicked-folders/wicked-folders-21816-missing-authorization-on-ajax_save_sort_order 2023-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/werkstatt/werkstatt-creative-portfolio-wordpress-theme-472-missing-authorization 2026-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/filebird/filebird-632-missing-authorization 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-cron-manager/advanced-cron-manager-debug-control-256-authenticated-admin-stored-cross-site-scripting 2024-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hide-real-download-path/hide-real-download-path-16-cross-site-request-forgery 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-to-hootsuite/post-to-social-media-wordpress-to-hootsuite-159-cross-site-request-forgery 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latestcheckins/latestcheckins-1-cross-site-request-forgery-to-stored-cross-site-scripting 2025-08-15T14:46:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/online-accessibility/accessibility-suite-by-online-ada-418-authenticated-subscriber-sql-injection 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easy-contact/wp-easy-contact-401-unauthenticated-php-object-injection 2025-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/memphis-documents-library/memphis-documents-library-2616-remote-file-inclusion 2015-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/top-10/top-10-popular-posts-plugin-for-wordpress-243-sql-injection 2017-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/more-better-reviews-for-woocommerce/get-better-reviews-for-woocommerce-406-missing-authorization 2024-07-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-14164-unauthenticated-stored-cross-site-scripting-via-utm_source-parameter 2026-04-16T13:20:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-registration-form-builder-with-submission-manager/registrationmagic-plugin-5245-authenticatedadministrator-sql-injection 2023-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/business-hours-indicator/business-hours-indicator-234-authenticated-stored-cross-site-scripting 2021-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fancy-product-designer/fancy-product-designer-woocommerce-wordpress-648-unauthenticated-full-path-disclosure-via-pdf-parameter 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mjm-clinic/mjm-clinic-1122-authenticated-administrator-stored-cross-site-scripting 2024-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/taskbuilder/taskbuilder-308-authenticated-admin-sql-injection 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auxin-elements/shortcodes-and-extra-features-for-phlox-theme-2158-missing-authorization 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-builder-add/landing-page-builder-1517-authenticated-editor-stored-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/imperial-fairytale/imperial-fairytale-theme-all-versions-multiple-vulnerabilities 2013-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-app-bar/wp-app-bar-15-unauthenticated-stored-cross-site-scripting-via-app-bar-features-parameter 2026-03-06T18:49:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/downloads-manager/downloads-manager-02-arbitrary-file-upload 2008-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-scroll-to-id/page-scroll-to-id-175-authenticated-contributor-stored-cross-site-scripting 2022-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rsvp/rsvp-and-event-management-2716-unauthenticated-information-exposure 2026-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-mini-cart-drawer/mini-cart-drawer-for-woocommerce-400-missing-authorization-via-ajax 2023-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rss-aggregator/wp-rss-aggregator-4193-reflected-cross-site-scripting 2022-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/review-schema/review-schema-224-authenticated-contributor-local-file-inclusion-via-post-meta 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recall/wp-recall-162614-authenticated-contributor-local-file-inclusion 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpvivid-backuprestore/migration-backup-staging-wpvivid-09107-unauthenticated-php-object-injection 2024-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/basticom-framework/basticom-framework-152-authenticated-administrator-stored-cross-site-scripting 2025-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/taskbuilder/taskbuilder-409-reflected-cross-site-scripting 2026-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-tabs/jettabs-2212-authenticated-contributor-stored-cross-site-scripting 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/erp/erp-11610-authenticated-crm-agent-sql-injection 2026-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flash-photo-gallery/flash-photo-gallery-07-cross-site-scripting 2014-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/button-generation/button-generator-easily-button-builder-311-cross-site-request-forgery 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enhanced-plugin-admin/enhanced-plugin-admin-116-cross-site-request-forgery-via-epa_options_page 2023-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auctionPlugin/woocommerce-wordpress-auctions-2013-arbitrary-file-upload 2012-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/navayan-csv-export/navayan-csv-export-109-unauthenticated-sql-injection 2024-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/church-admin/church-admin-509-unauthenticated-information-disclosure 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slideshow-se/slideshow-se-255-authenticated-subscriber-cross-site-scripting 2022-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fancybox/wp-fancybox-104-authenticated-contributor-stored-cross-site-scripting 2025-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/constant-contact-woocommerce/constant-contact-woocommerce-241-missing-authorization 2025-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-banner/simple-banner-3010-authenticated-admin-stored-cross-site-scripting 2025-10-21T17:34:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/animation-addons-for-elementor/animation-addons-for-elementor-gsap-motion-elementor-addons-website-templates-263-authenticated-contributor-stored-cross-site-scripting 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-table-builder/wp-table-builder-wordpress-table-plugin-1415-authenticated-contributor-stored-cross-site-scripting 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sailthru-triggermail/sailthru-triggermail-11-reflected-cross-site-scripting 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/joomsport-sports-league-results-management/joomsport-for-sports-team-league-football-hockey-more-525-authentciated-admin-sql-injection-via-orderby 2022-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-maps-gpx-viewer/google-maps-gpx-viewer-36-reflected-cross-site-scripting 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/code-clone/code-clone-09-authenticated-administrator-sql-injection-via-snippetid-parameter 2025-03-21T17:52:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-cookie-kit/smart-cookie-kit-231-authenticated-contributor-stored-cross-site-scripting 2023-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rating-widget/rating-widget-plugin-290-sensitive-information-disclosure 2017-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/optimate-ads/optimate-ads-advance-ad-inserter-adsense-ad-manager-103-authenticated-subscriber-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fv-wordpress-flowplayer/fv-flowplayer-video-player-75327212-reflected-cross-site-scripting-via-id 2023-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mycred/mycred-272-unauthenticated-information-exposure 2024-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/photography/photography-775-authenticated-editor-arbitrary-file-upload 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/resmushit-image-optimizer/resmushit-image-optimizer-045-authenticated-administrator-cross-site-scripting 2022-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/side-menu/side-menu-add-fixed-side-buttons-313-sql-injection 2021-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hero-maps-pro/hero-maps-pro-210-reflected-cross-site-scripting 2016-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetpack/jetpack-wp-security-backup-speed-growth-391-sensitive-information-disclosure 2016-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modula-best-grid-gallery/modula-image-gallery-photo-grid-video-gallery-2136-missing-authorization-to-authenticated-contributor-arbitrary-postpage-editing 2026-02-13T19:48:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ulike-pro/wp-ulike-pro-193-unauthenticated-limited-arbitrary-file-upload 2025-08-27T15:20:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/everest-backup/everest-backup-wordpress-cloud-backup-migration-restore-cloning-plugin-2213-sensitive-invormation-disclosure-via-procstat-log 2024-11-05T10:40:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multiparcels-shipping-for-woocommerce/multiparcels-shipping-for-woocommerce-11412-authenticatedsubscriber-sql-injection-via-id 2023-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rencontre/rencontre-dating-site-312-cross-site-scripting 2019-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp_rokstories/rokstories-125-abuse-of-functionality 2013-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/legal-pages/legal-pages-142-cross-site-request-forgery 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpsimpletools-upload-limit/manage-upload-limit-104-reflected-cross-site-scripting-via-upload_limit 2023-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatorwp/automatorwp-175-privilege-escalation 2021-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/everest-news/cream-blog-fascinate-glaze-blog-lite-everest-news-all-versions-cross-site-scripting 2023-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nd-shortcodes/nd-shortcodes-69-authenticated-subscriber-local-file-inclusion 2023-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hash-elements/hash-elements-138-authenticated-contributor-stored-cross-site-scripting-via-url-parameter-in-multiple-widgets 2024-05-22T16:54:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meta-tag-manager/meta-tag-manager-31-missing-authorization 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duofaq-responsive-flat-simple-faq/duofaq-responsive-flat-simple-faq-148-reflected-cross-site-scripting 2021-12-13T12:43:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress-media/rtmedia-for-wordpress-buddypress-and-bbpress-3740-sql-injection 2015-04-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shariff/shariff-wrapper-4613-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-06-14T19:57:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-google-adwords-conversion-tracking-tag/pixel-manager-for-woocommerce-track-conversions-and-analytics-google-ads-tiktok-and-more-1492-unauthenticated-information-exposure 2025-11-18T01:18:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nex-forms-express-wp-form-builder/nex-forms-9111-unauthenticated-stored-cross-site-scripting-via-post-parameter-key-names 2026-05-02T15:41:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mailster/wp-mailster-18160-authenticated-contributor-sql-injection-via-orderby 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar/the-events-calendar-4111-open-redirect 2016-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-for-ultimate-member/video-photo-gallery-for-ultimate-member-110-authenticated-subscriber-arbitrary-file-upload 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-avatar/profilepress-30-313-unauthenticated-privilege-escalation 2021-06-28T19:45:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-youtube-live/wp-youtube-live-1100-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/make-section-column-clickable-elementor/make-section-column-clickable-for-elementor-24-authenticated-editor-stored-cross-site-scripting 2025-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-registration/simple-user-registration-66-unauthenticated-stored-cross-site-scripting 2025-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-and-page-builder/post-and-page-builder-by-boldgrid-visual-drag-and-drop-editor-1264-authenticated-contributer-stored-cross-site-scripting 2024-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailoptin/popup-optin-form-email-newsletters-for-mailchimp-hubspot-aweber-mailoptin-12351-authorization-bypass 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bold-timeline-lite/bold-timeline-lite-119-missing-authorization-to-admin-notice-dismissal 2023-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-270-authenticated-instructor-sql-injection 2024-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hotjar-connecticator/hotjar-connecticator-111-authenticated-admin-stored-cross-site-scripting 2021-05-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-job-board/simple-job-board-2103-cross-site-request-forgery-via-sjb_save_settings_section 2023-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/task-manager/task-manager-302-unauthenticated-local-file-inclusion 2025-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/overton/overton-13-authenticated-subscriber-insecure-direct-object-reference 2026-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-captcha/wp-captcha-200-captcha-bypass 2023-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/official-facebook-pixel/facebook-for-wordpress-303-cross-site-request-forgery-to-stored-cross-site-scripting-and-settings-deletion-via-wp_ajax_savedelete_fbe_settings 2021-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-time-slots-booking-form/time-slots-booking-form-1239-missing-authorization 2025-12-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-subtitle/wp-subtitle-34-cross-site-scripting 2022-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spryng-payments-woocommerce/spryng-payments-for-woocommerce-167-cross-site-scripting 2019-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/greenshift-animation-and-page-builder-blocks/greenshift-animation-and-page-builder-blocks-893-authenticated-contributor-stored-cross-site-scripting 2024-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpvr/wp-vr-360-panorama-and-free-virtual-tour-builder-for-wordpress-8541-improper-authorization-to-authenticated-contributor-plugin-settings-update 2025-10-24T16:51:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/no-captcha-recaptcha-for-woocommerce/no-captcha-recaptcha-for-woocommerce-126-authenticatedadmin-stored-cross-site-scripting-via-plugin-settings 2023-03-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/order-tip-woo/order-tip-for-woocommerce-154-unauthenticated-tip-manipulation-to-negative-value-leading-to-unauthorized-discounts 2025-08-14T13:51:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-csv-importer/wp-import-ultimate-csv-xml-importer-for-wordpress-727-missing-authorization-to-authenticated-subscriber-ftpsftp-credential-exposure 2025-09-09T17:59:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mtouch-quiz/mtouch-quiz-312-stored-cross-site-scripting 2015-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementinvader-addons-for-elementor/elementinvader-addons-for-elementor-129-authenticated-contributor-information-exposure 2024-10-18T18:21:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tracking-code-manager/tracking-code-manager-220-authenticated-administrator-stored-cross-site-scripting 2024-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-toolkit/user-toolkit-123-unauthenticated-privilege-escalation 2025-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/atarim-visual-collaboration/visual-website-collaboration-feedback-project-management-atarim-330-unauthenticated-stored-cross-site-scripting 2024-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-962-authenticated-customer-stored-cross-site-scripting 2024-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-maker/quiz-maker-business-developer-and-agency-multiple-versions-unauthenticated-sql-injection-via-id 2025-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-call-now/easy-call-now-by-thikshare-110-cross-site-request-forgery-via-settings_page 2023-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/piotnetforms-pro/piotnet-forms-2140-unauthenticated-arbitrary-file-upload-via-form-file-upload 2026-05-18T18:28:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dt-reservation-plugin/reservation-17-missing-authorization-to-unauthenticated-settings-update 2026-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duplicator/duplicator-1228-unauthenticated-stored-cross-site-scripting 2017-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mdirector-newsletter/mdirector-newsletter-458-cross-site-request-forgery-to-plugin-settings-update 2026-02-13T18:29:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-shopping-cart/instinct-wp-e-commerce-34-arbitrary-file-upload 2008-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/testimonial/testimonial-slider-237-authenticated-admin-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maan-elementor-addons/maan-addons-for-elementor-101-authenticated-contributor-local-file-inclusion 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/rezo/multiple-themify-themes-various-versions-authenticated-contributor-arbitrary-file-upload 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/markdown-on-save-improved/markdown-on-save-improved-25-stored-cross-site-scripting 2016-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/n-media-woocommerce-checkout-fields/woocommerce-checkout-field-manager-173-unauthenticated-arbitrary-file-upload 2023-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress/buddypress-234-privilege-escalation 2015-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/groundhogg/groundhogg-2798-cross-site-request-forgery-to-privilege-escalation 2023-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-membership-520-missing-authorization-to-unauthenticated-payment-bypass 2026-06-25T19:44:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-stripe-checkout/wp-stripe-checkout-12220-authenticated-contributor-stored-cross-site-scripting 2022-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kevins-plugin/kevins-200-cross-site-request-forgery 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/keycaptcha/keycaptcha-251-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/srbtranslatin/srbtranslatin-srbtranslatin-146-cross-site-scripting 2018-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/originality-ai/originalityai-ai-checker-1016-missing-authorization-to-authenticated-subscriber-sensitive-information-disclosure-via-ai_get_table 2025-10-23T19:37:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultraembed-advanced-iframe/ultraembed-advanced-iframe-plugin-for-wordpress-with-gutenberg-block-included-103-authenticated-contributor-stored-cross-site-scripting 2025-02-18T19:27:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dzs-zoomsounds/zoomsounds-691-unauthenticated-php-object-injection 2025-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-posts-carousel-pro/responsive-posts-carousel-pro-151-authenticated-contributor-local-file-inclusion 2025-12-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coinbase-commerce-for-contact-form-7/coinbase-commerce-for-contact-form-7-112-missing-authorization-to-authenticated-subscriber-api-key-modification-via-cccf7_api_key-parameter 2026-05-11T19:04:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/gutenberg-blocks-with-ai-by-kadence-wp-361-missing-authorization-to-authenticated-contributor-unauthorized-media-upload 2026-02-17T17:43:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real-estate-pro/real-estate-pro-214-reflected-cross-site-scripting 2026-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-registration-form-builder-with-submission-manager/registrationmagic-custom-registration-forms-user-registration-payment-and-user-login-6043-authenticated-subscriber-stored-cross-site-scripting 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar-shortcode/the-events-calendar-shortcode-block-311-authenticated-contributor-stored-cross-site-scripting 2026-02-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-blocks/ultimate-blocks-329-authenticated-contributor-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hunk-companion/hunk-companion-184-missing-authorization-to-unauthenticated-arbitrary-plugin-installationactivation 2024-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gnucommerce/gnucommerce-154-unauthenticated-php-object-injection 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-refund-and-exchange-lite/return-refund-and-exchange-for-woocommerce-455-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-order-message-read 2025-11-20T18:56:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-media-builder/social-media-share-buttons-210-authenticated-subscriber-php-object-injection 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-smart-flexslider/smart-flexslider-25-reflected-cross-site-scripting 2025-07-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpc-smart-messages/wpc-smart-messages-for-woocommerce-428-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attribute 2026-04-27T15:55:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dukapress/dukapress-254-directory-traversal 2014-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/energox/energox-12-authenticated-subscriber-arbitrary-file-deletion 2026-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-contactform/wp-contactform-15-authenticated-admin-stored-cross-site-scripting 2008-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-links-manager-extension/mainwp-links-manager-extension-21-unauthenticated-php-object-injection 2023-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-admin-microblog/wp-admin-microblog-311-cross-site-request-forgery-to-message-creation 2025-11-17T20:10:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/estonian-shipping-methods-for-woocommerce/estonian-shipping-methods-for-woocommerce-172-unauthenticated-sensitive-information-exposure 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-7113-sql-injection 2021-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-file-downloader/simple-file-downloader-104-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/float-menu/float-menu-612-cross-site-request-forgery-to-settings-update 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-xintaoke/wordpress-112-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-custom-page-template/add-custom-page-template-201-authenticated-administrator-php-code-injection-to-remote-code-execution 2025-04-25T16:49:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ooohboi-steroids-for-elementor/ooohboi-steroids-for-elementor-2124-authenticated-contributor-stored-cross-site-scripting-via-multiple-url-controls 2026-03-04T14:44:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-auctions/wordpress-auction-plugin-37-unauthenticated-sql-injection 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real-estate-manager-pro/real-estate-manager-pro-1273-reflected-cross-site-scripting 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/muji/muji-120-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-hide-success-message/contact-form-8211-7-hide-success-message-114-missing-authorization 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-simple-registration/simple-registration-for-woocommerce-158-cross-site-request-forgery-to-privilege-escalation-via-role-request-approval 2025-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-keywords-meta-description/meta-keywords-description-08-unauthenticated-local-file-inclusion 2025-04-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/payform/payform-20-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-reroute-email/wp-reroute-email-146-cross-site-request-forgery 2023-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/school-management/school-management-system-for-wordpress-9300-missing-authorization-to-unauthenticated-arbitrary-post-deletion 2025-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailchimp-for-wp/mc4wp-mailchimp-for-wordpress-486-authenticated-admin-stored-cross-site-scripting 2022-03-02T07:15:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-firebase-sms-otp-verification/miniorange-otp-verification-with-firebase-360-unauthenticated-arbitrary-user-password-change 2024-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-analytics-for-wordpress/monsterinsights-google-analytics-dashboard-for-wordpress-website-stats-made-easy-533-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usernoise/usernoise-modal-feedback-contact-form-379-cross-site-scripting 2013-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-calendar/booking-calendar-appointment-booking-system-326-authenticated-administrator-sql-injection-via-_selected 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/javo-core/javo-core-300266-cross-site-request-forgery 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/realtyelite/realtyelite-100-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/resmushit-image-optimizer/resmushit-043-missing-authorization 2022-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/prolingua/prolingua-1112-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-categories/gallery-categories-by-bestwebsoft-109-reflected-cross-site-scripting 2017-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-manager-for-wp-e-commerce/smart-manager-8450-missing-authorization 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-real-estate/essential-real-estate-171-reflected-cross-site-scripting 2019-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hotjar/hotjar-1015-authenticated-administrator-stored-cross-site-scripting 2023-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-thumbnail/wp-thumbnail-11-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-10-21T20:18:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-multivendor-membership/wcfm-membership-2100-missing-authorization 2023-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sailthru-triggermail/sailthru-triggermail-11-authenticated-admin-stored-cross-site-scripting 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b-tiktok-feed/tiktok-feed-1023-missing-authorization 2025-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nextend-facebook-connect/nextend-social-login-and-register-3121-cross-site-request-forgery-to-unlink-user-social-login 2025-11-27T14:54:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-seo/wp-meta-seo-4513-authenticated-contributor-stored-cross-site-scripting 2024-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/oceanwp/oceanwp-409-411-cross-site-request-forgery-to-ocean-extra-plugin-installation 2025-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-lockdown/login-lockdown-protection-214-ip-block-bypass 2025-12-12T15:27:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xv-random-quotes/xv-random-quotes-140-reflected-cross-site-scripting 2025-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/author-chat/author-chat-190-sql-injection 2019-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/taskbuilder/taskbuilder-wordpress-project-task-management-plugin-304-authenticated-admin-sql-injection 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wps-hide-login/wps-hide-login-10-cross-site-request-forgery 2015-04-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-memberships-pro/paid-memberships-pro-298-unauthenticated-sql-injection 2023-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/persian-woocommerce-sms/-persian-woocommerce-sms-440-cross-site-scripting-and-sql-injection 2022-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gamipress/gamipress-gamification-plugin-to-reward-points-achievements-badges-ranks-in-wordpress-787-authenticated-subscriber-sql-injection 2026-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quotes-collection/quotes-collection-206-cross-site-scripting 2016-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-exit-box-lite/wordpress-exit-box-lite-106-cross-site-request-forgery 2013-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shiftcontroller/shiftcontroller-employee-shift-scheduling-4957-authenticated-contributor-php-object-injection 2024-05-16T07:20:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tenweb-speed-optimizer/10web-booster-website-speed-optimization-cache-page-speed-optimizer-21344-missing-authorization-in-settings-import-to-stored-cross-site-scripting 2023-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdiscuz/comments-wpdiscuz-314-reflected-cross-site-scripting 2016-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-playlist-and-gallery-plugin/post-video-players-1163-authenticated-contributor-information-exposure 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-232-unauthenticated-arbitrary-file-download 2025-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/change-default-login-logo-url-and-title/change-default-login-logourl-and-title-20-cross-site-request-forgery 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-3528-authenticated-contributor-local-file-inclusion 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/free-product-table-for-woocommerce/free-woocommerce-product-table-view-178-missing-authorization-to-arbitrary-content-deletion 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-migration/all-in-one-wp-migration-645-reflected-cross-site-scripting 2017-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/notificationx/notificationx-320-unauthenticated-dom-based-cross-site-scripting-via-nx-preview 2026-01-20T01:49:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-wishlist-for-more-convert/mc-woocommerce-wishlist-191-reflected-cross-site-scripting 2025-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ecab-taxi-booking-manager/e-cab-taxi-booking-manager-for-woocommerce-200-authenticated-contributor-stored-cross-site-scripting 2026-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-events-calendar-bookings-and-tickets-4320-missing-authorization 2026-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clover-online-orders/smart-online-order-for-clover-160-cross-site-request-forgery 2026-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-220-authenticated-subscriber-stored-cross-site-scripting 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforo/wpforo-forum-234-authenticated-subscriber-insecure-direct-object-reference 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/v-form/vform-300-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/groundhogg/groundhogg-crm-newsletters-and-marketing-automation-44-authenticated-sales-representative-arbitrary-file-deletion 2026-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-bigpost-shipping/big-post-shipping-for-woocommerce-212-authenticated-contributor-stored-cross-site-scripting 2025-09-29T15:21:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdatatables/wpdatatables-premium-6501-unauthenticated-local-file-inclusion 2026-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/file-manager/bit-file-manager-100-free-open-source-file-manager-and-code-editor-for-wordpress-655-authenticated-subscriber-arbitrary-file-upload 2024-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/xsmart/xsmart-1294-reflected-cross-site-scripting 2026-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bit-form/contact-form-builder-by-bit-form-210-authenticated-admin-stored-cross-site-scripting 2023-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-graphql/wpgraphql-023-information-exposure 2019-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theplus_elementor_addon/the-plus-addons-for-elementor-pro-506-sensitive-data-disclosure 2021-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-downloads/paid-downloads-315-unauthenticated-sql-injection 2026-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-multitasking/wp-multitasking-0112-cross-site-request-forgery-to-settings-update 2024-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/azon-addon-js-composer/amazon-affiliates-addon-for-wpbakery-page-builder-formerly-visual-composer-12-reflected-cross-site-scripting 2025-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-226-insecure-direct-object-reference-to-authenticated-employer-arbitrary-job-deletion 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/td-composer/tagdiv-composer-542-reflected-cross-site-scripting 2026-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/listdom/listdom-business-directory-and-classified-ads-listings-wordpress-plugin-370-authenticated-contributor-stored-cross-site-scripting-via-shortcode-parameter 2024-12-03T21:33:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-reactions-lite/wp-reactions-lite-133-cross-site-scripting 2021-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder/user-profile-builder-beautiful-user-registration-forms-user-profiles-user-role-editor-3135-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-04-15T12:34:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluentform/fluent-forms-620-authenticated-subscriber-authorization-bypass-via-table-parameter 2026-05-13T18:08:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userswp/userswp-1258-authenticated-subscriber-server-side-request-forgery-via-uwp_crop-parameter 2026-04-10T12:14:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booked/booked-225-missing-authorization-on-ajax-actions 2020-02-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mitfahrgelegenheit/mitfahrgelegenheit-115-authenticated-contributor-stored-cross-site-scripting-via-date-parameter 2025-09-10T18:45:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forminator/forminator-1246-unauthenticated-arbitrary-file-upload 2023-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/incoming-links/incoming-links-0910b-stored-cross-site-scripting 2015-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mcjh-button-shortcode/mcjh-button-shortcode-164-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xmasb-quotes/xmasb-quotes-161-reflected-cross-site-scripting 2025-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bizlibrary/bizlibrary-11-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-sidebar-widget/login-widget-with-shortcode-612-open-redirect 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-flamingo/advanced-flamingo-10-cross-site-request-forgery 2024-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amazon-showcase-wordpress-widget/amazon-showcase-wordpress-plugin-22-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-source-control/wp-source-control-311-directory-traversal 2014-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leyka/leyka-3316-missing-authorization 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elegance-menu/elegance-menu-19-authenticated-contributor-local-file-inclusion 2025-11-03T15:34:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admail/admail-multilingual-back-in-stock-notifier-for-woocommerce-170-missing-authorization 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-post-widget/quick-post-widget-191-multiple-cross-site-scripting 2012-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/joan/jock-on-air-now-562-unauthenticated-stored-cross-site-scripting 2021-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcf7-redirect/redirection-for-contact-form-7-292-missing-authorization 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-post-limits/custom-post-limits-441-unauthenticated-full-path-disclosure 2024-09-12T21:26:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-273-cross-site-scripting 2018-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/workreap/workreap-222-cross-site-request-forgery 2021-07-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wangguard/wangguard-172-reflected-cross-site-scripting 2016-07-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hero-banner-ultimate/hero-banner-ultimate-144-authenticated-author-local-file-inclusion 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b-slider/b-slider-slider-for-your-block-editor-1112-authenticated-contributor-stored-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rss-digest/rss-digest-15-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-members/wp-members-membership-plugin-3544-unauthenticated-information-exposure-via-unprotected-files 2026-01-06T14:17:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mediavine-create/create-by-mediavine-197-authenticated-contributor-stored-cross-site-scripting-via-schema-meta-shortcode 2024-06-26T19:03:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mail-subscribe-list/mail-subscribe-list-209-unauthenticated-stored-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdiscuz/wpdiscuz-763-insecure-direct-object-reference-to-post-rating-increasedecrease 2023-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-security-audit-log/wp-activity-log-401-missing-authorization 2020-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trinity-backup/trinity-backup-backup-migrate-restore-clone-schedule-backups-209-unauthenticated-information-exposure 2026-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cpo-content-types/cpo-content-types-110-authenticated-administrator-stored-cross-site-scripting 2023-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-profile-search/bp-profile-search-453-php-object-injection 2016-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leaflet-maps-marker/leaflet-maps-marker-google-maps-openstreetmap-bing-maps-231-cross-site-scripting 2012-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/momoyoga-integration/yoga-schedule-momoyoga-270-authenticated-contributor-stored-cross-site-scripting 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youtube-speedload/youtube-speedload-063-cross-site-request-forgery 2023-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stream/stream-401-cross-site-request-forgery-to-arbitrary-options-update 2024-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themeisle-companion/orbit-fox-by-themeisle-21043-authenticated-contributor-stored-cross-site-scripting-via-pricing-table-widget 2025-01-09T18:25:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ns-woocommerce-watermark/ns-woocommerce-watermark-2113-abuse-of-functionality 2022-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nex-forms-express-wp-form-builder/nex-forms-833-authenticated-administrator-sql-injection 2023-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/animation-addons-for-elementor/animation-addons-for-elementor-gsap-powered-elementor-addons-website-templates-267-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-parameters 2026-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-seo/wp-meta-seo-453-missing-authorization-in-savesitemapsettings 2023-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/change-login-logo/change-wordpress-login-logo-114-stored-cross-site-scripting 2020-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-ads/advanced-ads-ad-manager-adsense-1311-authenticated-administrator-stored-cross-site-scripting 2022-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cryout-serious-slider/serious-slider-124-authenticated-editor-stored-cross-site-scripting 2024-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xcloner-backup-and-restore/backup-restore-and-migrate-wordpress-sites-with-the-xcloner-plugin-314-path-traversal-to-sensitive-information-disclosure 2016-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-print/download-pdf-print-by-bestwebsoft-wordpress-posts-and-pages-pdf-generator-plugin-193-cross-site-scripting 2017-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lazy-load-for-videos/lazy-load-for-videos-2187-authenticated-contributor-stored-cross-site-scripting-via-data-video-title-and-href-attributes 2025-08-26T12:22:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weixin-robot-advanced/-621-reflected-cross-site-scripting 2023-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/school-management/school-management-system-for-wordpress-560-cross-site-request-forgery 2019-07-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-networks-auto-poster-facebook-twitter-g/nextscripts-social-networks-auto-poster-3417-stored-cross-site-scripting 2015-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-4101-cross-site-request-forgery 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/captchinoo-captcha-for-login-form-protection/captchinoo-captcha-23-missing-authorization-to-arbitrary-plugin-installationactivation 2021-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paytium/paytium-436-authenticated-admin-stored-cross-site-scripting 2022-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/olympus-google-fonts/google-fonts-typography-302-authenticated-contributor-stored-cross-site-scripting-via-blocktype-arguments 2021-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wibar/wibar-wine-and-vineyard-woocommerce-wordpress-theme-121-cross-site-scripting 2020-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/donate-visa/donate-visa-100-missing-authorization 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/chapterone/chapterone-17-unauthenticated-local-file-inclusion 2026-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ctabs/ctabs-13-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rafflepress/giveaways-and-contests-by-rafflepress-11216-authenticated-admin-stored-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/staff-directory-pro/staff-directory-plugin-company-directory-43-unauthenticated-stored-cross-site-scripting 2025-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpextended/the-ultimate-wordpress-toolkit-wp-extended-308-authenticated-subscriber-arbitrary-options-update 2024-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-free-widgets-addons-templates-1565-missing-authorization 2023-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mail-masta/mail-masta-10-local-file-inclusion 2016-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/countdown-with-background/countdown-with-image-or-video-background-15-reflected-cross-site-scripting 2026-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-time-capsule/backup-and-staging-by-wp-time-capsule-1226-reflected-cross-site-scripting 2021-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sfwd-lms/learndash-lms-253-arbitrary-file-upload 2018-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ghl-wizard/lc-wizard-140-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/file-manager-advanced/advanced-file-manager-524-sensitive-information-exposure-via-directory-listing 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gseor/gseor-wordpress-seo-plugin-13-authenticated-admin-sql-injection 2021-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lastudio-element-kit/la-studio-element-kit-for-elementor-136-missing-authorization 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/assistant/assistant-143-authenticated-editor-server-side-request-forgery 2023-07-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-library/link-library-7513-reflected-cross-site-scripting-via-link_price-and-link_tags 2024-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/et-core-plugin/xstore-core-56-reflected-cross-site-scripting 2025-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-payments/woocommerce-payments-450-payment-bypass 2022-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-multitasking/wp-multitasking-0112-cross-site-request-forgery-to-exit-popup-update 2024-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/device-theme-switcher/plugin-name-device-theme-switcher-302-cross-site-request-forgery 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-redirect-thank-you-page/contact-form-7-redirect-thank-you-page-107-reflected-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qtranslate-slug/qtranslate-slug-1118-cross-site-request-forgery-bypass 2021-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forminator/forminator-1152-admin-stored-cross-site-scripting 2021-10-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-quantity-for-woocommerce/min-max-step-quantity-limits-manager-for-woocommerce-510-cross-site-request-forgery 2025-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w4-post-list/w4-post-list-245-reflected-cross-site-scripting 2023-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seraphinite-accelerator/seraphinite-accelerator-22028-arbitrary-redirect-via-redir 2023-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ulike/wp-ulike-474-authenticated-administrator-stored-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-block-editor-addons/responsive-blocks-page-builder-for-blocks-patterns-220-missing-authorization 2026-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3243-reflected-cross-site-scripting 2022-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/survey-maker/survey-maker-312-authenticated-subscriber-sql-injection 2023-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/translation-pro/translationpro-100-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-by-rank-math/rank-math-seo-ai-seo-tools-to-dominate-seo-rankings-10271-missing-authorization 2026-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accessibe/web-accessibility-by-accessibe-115-authenticated-administrator-stored-cross-site-scripting 2023-07-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-amazon-product-information/easy-amazon-product-information-401-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xagio-seo/xagio-seo-7105-unauthenticated-sensitive-information-exposure-via-unprotected-back-up-files 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-appointment-schedule-booking-system/wordpress-appointment-schedule-booking-system-10-stored-cross-site-scripting 2016-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alttext-ai/download-alt-text-ai-11015-missing-authorization 2026-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-whois-domain/wp-whois-domain-100-reflected-cross-site-scripting 2017-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dolcino/dolcino-16-authenticated-subscriber-insecure-direct-object-reference 2026-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-manager/wp-user-manager-2912-authenticated-subscriber-arbitrary-file-deletion-via-current_user_avatar-parameter 2025-12-11T15:08:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/otter-blocks/otter-blocks-gutenberg-blocks-page-builder-for-gutenberg-editor-fse-304-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-10-31T22:04:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-simple-paypal-shopping-cart/simple-shopping-cart-529-unauthenticated-insecure-direct-object-reference 2026-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/yaaburnee-themes/yaaburnee-107-and-dignitas-119-privilege-escalation 2015-03-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/top_bar_promoter/xpromoter-134-reflected-cross-site-scripting 2026-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-custom-taxonomy-meta/category-and-taxonomy-meta-fields-100-authenticated-administrator-stored-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/menu-ordering-reservations/restaurant-menu-food-ordering-system-table-reservation-235-authenticated-contributor-cross-site-scripting 2023-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetwidgets-for-elementor/jetwidgets-for-elementor-1020-authenticated-contributor-stored-cross-site-scripting-via-image-comparison-and-subscribe-widgets 2025-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/iona/iona-108-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/facebook-like-send-button/peadigs-like-share-button-115-authenticated-administrator-stored-cross-site-scripting 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newstatpress/newstatpress-103-stored-cross-site-scripting 2015-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/country-blocker/country-blocker-32-reflected-cross-site-scripting 2024-12-11T15:36:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qi-addons-for-elementor/qi-addons-for-elementor-163-authenticated-contributor-local-file-inclusion 2023-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-otp-verification/miniorange-otp-login-verification-and-sms-notifications-549-unauthenticated-privilege-escalation 2026-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restaurant-cafe-addon-for-elementor/restaurant-cafe-addon-for-elementor-152-cross-site-request-forgery 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/just-custom-fields/just-custom-fields-332-cross-site-request-forgery-via-ajax-actions 2024-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-feed-pro/product-feed-pro-for-woocommerce-1121-reflected-cross-site-scripting 2022-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/connect-daily-web-calendar/wordpress-events-calendar-plugin-connectdaily-154-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/w3-total-cache-212-authenticated-admin-stored-cross-site-scripting 2021-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/twitter-shortcode/twitter-shortcode-09-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bit-smtp/bit-smtp-easy-smtp-solution-with-email-logs-122-missing-authorization 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restaurant-reservations/five-star-restaurant-reservations-2629-missing-authorization 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-monster/event-management-tickets-booking-143-unauthenticated-information-exposure 2024-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-0885-cross-site-scripting-via-rules0content-parameter 2018-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/2d-tag-cloud-widget-by-sujin/2d-tag-cloud-602-reflected-cross-site-scripting-via-add_query_arg-parameter 2024-10-11T16:36:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/super-custom-login/super-custom-login-11-missing-authorization 2026-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder-block/popup-builder-with-gamification-220-unauthenticated-sql-injection-via-multiple-rest-api-endpoints 2026-02-04T11:20:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/zota/zota-138-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/review-for-discount/reviewify-107-missing-authorization-to-authenticated-contributor-arbitrary-woocommerce-coupon-creation 2026-01-06T20:33:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ameliabooking/amelia-booking-83-912-authenticated-customer-insecure-direct-object-reference-to-arbitrary-user-password-change 2026-03-25T15:31:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/faustwp/faustjs-187-missing-authorization 2026-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stratum/stratum-1315-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/breakdance/breakdance-172-authenticated-contributor-stored-cross-site-scripting 2024-07-31T17:54:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-theme-addons/unlimited-theme-addon-for-elementor-and-woocommerce-122-authenticated-contributor-post-disclosure 2025-01-10T19:00:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-payment/simple-payment-246-unauthenticated-stored-cross-site-scripting 2025-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/page-builder-pagelayer-drag-and-drop-website-builder-209-authenticated-contributor-stored-cross-site-scripting-via-anchor-block 2026-06-12T19:06:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-seo/wp-meta-seo-4513-authenticated-administrator-stored-cross-site-scripting 2024-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-upload/wordpress-file-upload-4247-reflected-cross-site-scripting 2024-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/medical-addon-for-elementor/medical-addon-for-elementor-164-authenticated-contributor-stored-cross-site-scripting-via-typewriter-widget 2025-08-01T18:51:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ova-events/ovatheme-events-128-unauthenticated-local-file-inclusion 2025-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/column-matic/column-matic-133-authenticated-contributor-stored-cross-site-scripting 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/joly/joly-1220-unauthenticated-local-file-inclusion 2025-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-email-newsletter/wp-email-newsletter-11-reflected-cross-site-scripting 2025-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gum-elementor-addon/gum-elementor-addon-137-authenticated-contributor-stored-cross-site-scripting 2024-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/generatepress-premium/generatepress-premium-232-authenticatedcontributor-stored-cross-site-scripting-via-custom-meta 2024-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdiscuz/wpdiscuz-765-unauthenticated-sql-injection 2023-09-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integration-of-zoho-crm-and-contact-form-7/integration-of-zoho-crm-and-contact-form-7-106-open-redirect 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/your-text-manager/your-text-manager-030-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iwr-tooltip/iwr-tooltip-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-05-26T17:27:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-meta-data-manager/post-meta-data-manager-123-authenticated-contributor-stored-cross-site-scripting 2024-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/plugin-central/plugin-central-251-reflected-cross-site-scripting 2015-11-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real-wp-shop-lite/real-wp-shop-lite-ajax-ecommerce-shopping-cart-208-authenticated-administrator-stored-cross-site-scripting 2024-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/vidorev/vidorev-2999997-unauthenticated-local-file-inclusion 2026-02-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/srs-player/live-streaming-video-player-by-srs-player-1018-authenticated-contributor-stored-cross-site-scripting 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/grace-mag/grace-mag-115-unauthenticated-local-file-inclusion 2025-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/geomagazine/geo-magazine-theme-20-reflected-cross-site-scripting 2020-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/highlight-and-share/highlight-and-share-520-missing-authorization 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-redirection/seo-redirection-plugin-301-redirect-manager-78-cross-site-request-forgery 2021-09-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bricksable/bricksable-for-bricks-builder-1683-authenticated-author-stored-cross-site-scripting 2026-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-for-paygent-payment-main/paygent-for-woocommerce-246-missing-authorization-to-unauthenticated-payment-callback-manipulation 2026-01-16T19:57:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/gutenberg-blocks-by-kadence-blocks-349-authenticated-contributor-stored-cross-site-scripting-via-icon 2025-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/favicon-generator/favicon-generator-15-cross-site-request-forgery-to-arbitrary-file-upload 2024-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affs/sumo-affiliates-pro-1140-unauthenticated-php-object-injection 2026-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/loginpress/loginpress-331-cross-site-request-forgery-to-arbitrary-options-update 2025-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-party/illi-link-party-10-unauthenticated-stored-cross-site-scripting 2024-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zippy/zippy-165-authenticatedauthor-php-object-injection-via-unzipposts 2023-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-and-rental-manager-for-woocommerce/booking-and-rental-manager-for-bike-car-resort-appointment-dress-equipment-plugin-for-wordpress-221-missing-authorization 2025-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wishlist/wishlist-210-authenticated-subscriber-information-exposure 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot/ai-chatbot-455-authenticated-administrator-stored-cross-site-scripting 2023-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nd-booking/hotel-booking-36-unauthenticated-local-file-inclusion 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/idx-broker-platinum/impress-for-idx-broker-322-authenticated-contributor-stored-cross-site-scripting 2024-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetpack/jetpack-121-authenticated-author-arbitrary-file-manipulation 2023-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-2110-unauthenticated-sql-injection 2023-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-thank-you-page-nextmove-lite/nextmove-lite-2230-authenticated-contributor-stored-cross-site-scripting 2025-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/turbo-addons-elementor/turbo-addons-for-elementor-177-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-custom-body-class/custom-body-class-060-cross-site-scripting 2019-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easing-slider/easing-slider-308-missing-authorization-to-unauthenticated-settings-reset 2023-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-208-authenticated-contributor-sql-injection 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/vikinger/vikinger-1930-authenticated-subscriber-privilege-escalation-via-vikinger_user_meta_update_ajax 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-event-solution/eventin-4034-authenticated-contributor-privilege-escalation-via-user-email-changeaccount-takeover 2025-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-digital-downloads/easy-digital-downloads-ecommerce-payments-and-subscriptions-made-easy-3361-unauthenticated-private-post-title-disclosure 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-visitor-counter/the-visitor-counter-143-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-pdf-viewer/embed-pdf-viewer-247-authenticated-contributor-server-side-request-forgery 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/business-card-by-esterox-100/business-card-100-authenticated-admin-arbitrary-file-uplaod 2024-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-xml-sitemap-generator/video-xml-sitemap-generator-100-cross-site-request-forgery-via-video_sitemap_generate 2023-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-appointments/easy-appointments-31118-authenticated-contributor-stored-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/the-monday/accesspress-themes-and-plugin-various-versions-missing-authorization-to-arbitrary-plugin-deactivationactivation 2022-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webinar-ignition/webinarignition-40986-unauthenticated-sql-injection 2026-05-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress-import-export/learnpress-export-import-409-reflected-cross-site-scripting 2025-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dp-alterminator-missing-alt-manager/dp-alterminator-missing-alt-manager-102-authenticated-administrator-stored-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/table-of-contents-plus/table-of-contents-plus-2411-authenticated-editor-stored-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clever-fox/clever-fox-one-click-website-importer-by-nayra-themes-2520-missing-authorization-to-arbitrary-theme-activation-via-clever-fox-activate-theme 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supportcandy/supportcandy-226-cross-site-request-forgery-to-arbitrary-ticket-deletion 2022-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wd-google-maps/10web-map-builder-for-google-maps-1074-authenticated-administrator-sql-injection 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flash-album-gallery/album-and-image-gallery-with-lightbox-flagallery-photo-portfolio-200-arbitrary-file-modification 2012-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-add-ons/responsive-starter-templates-elementor-wordpress-templates-268-authenticated-admin-stored-cross-site-scripting 2022-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/naver-blog-api/naver-blog-10-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-plugin/contact-form-by-bestwebsoft-395-reflectedcross-site-scripting 2017-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/DA10/dating-1120-missing-authorization 2026-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xagio-seo/xagio-seo-71016-unauthenticated-stored-cross-site-scripting-via-http_referer 2025-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-entries/contact-form-entries-129-csv-injection 2022-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masjidal/muslim-prayer-time-salahiqamah-1811-authenticated-contributor-stored-cross-site-scripting 2025-01-08T22:01:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pirate-forms/contact-form-smtp-plugin-by-pirateforms-251-unauthenticated-html-injection 2019-07-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-query-shortcode/custom-query-shortcode-040-authenticated-contributor-path-traversal-via-lens-parameter 2025-08-24T21:19:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-custom-checkout-fields/woocommerce-custom-checkout-fields-editor-with-drag-drop-01-reflected-cross-site-scripting-via-tab 2023-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-286-authenticated-contributor-stored-cross-site-scripting 2024-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/everest-forms-pro/everest-forms-pro-194-unauthenticated-path-traversal-to-arbitrary-file-deletion 2025-06-24T20:22:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/primer-mydata/primer-mydata-for-woocommerce-425-cross-site-request-forgery 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/urdu-formatter-shamil/urdu-formatter-shamil-01-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/username-updater/easy-username-updater-103-cross-site-request-forgery-to-username-change 2022-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hot-linked-image-cacher/hot-linked-image-cacher-116-cross-site-request-forgery 2022-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-indexer/post-indexer-3061-php-object-injection 2016-11-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tiny-compress-images/tinypng-343-cross-site-request-forgery 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/library-management-system/library-management-system-31-missing-authorization-to-authenticated-subscriber-settings-manipulation 2025-10-14T19:59:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/midi/midi-sound-music-wordpress-theme-114-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-sortsearch/simple-sortsearch-003-authenticated-contributor-stored-cross-site-scripting 2021-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-places-review-slider/google-review-slider-174-missing-authorization 2025-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dokan-lite/dokan-375-unauthenticated-sql-injection 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-events-calendar-bookings-and-tickets-4073-unauthenticated-stored-cross-site-scripting-via-ticket-category-and-ticket-type-name 2024-12-16T20:40:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zm-gallery/zm-gallery-10-authenticated-admin-sql-injection 2016-12-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wow-carousel-for-divi-lite/divi-carousel-lite-204-authenticated-contributor-stored-cross-site-scripting-via-image-carousel-and-logo-carousel-widgets 2025-01-24T20:40:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/use-any-font/use-any-font-617-cross-site-request-forgery-to-api-key-deactivation 2022-03-30T11:53:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/new-user-approve/new-user-approve-24-cross-site-request-forgery 2022-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-313-authenticated-contributor-sql-injection-via-shortcode 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/poll-maker/poll-maker-versus-polls-anonymous-polls-image-polls-546-authenticated-administrator-stored-cross-site-scripting-via-poll-settings 2024-10-25T11:53:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/live-composer-page-builder/page-builder-live-composer-1547-authenticated-author-stored-cross-site-scripting 2024-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-germanized/germanized-for-woocommerce-3205-unauthenticated-arbitrary-shortcode-execution 2026-04-13T17:42:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/music-press-pro/music-press-pro-146-missing-authorization 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluentform/contact-form-plugin-by-fluentform-4312-csv-injection 2022-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-woosearch/ajax-woosearch-100-unauthenticated-sql-injection 2025-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/misiek-photo-album/misiek-photo-album-143-cross-site-request-forgery-to-album-deletion 2024-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iwp-client/infinitewp-client-137-privilege-escalation 2014-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-206-authenticated-contributor-arbitrary-file-read-via-path-traversal-in-repeater-jsoncsv-url-with-path-traversal 2026-04-16T17:54:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/editor-custom-color-palette/editor-custom-color-palette-337-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-10-25T20:08:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ec-stars-rating/ec-stars-rating-1011-authenticated-administrator-stored-cross-site-scripting 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-171001-reflected-cross-site-scripting 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/plant/plant-gardening-houseplants-wordpress-theme-100-unauthenticated-information-exposure 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sureforms/sureforms-1131-missing-authorization-to-unauthenticated-sensitive-information-exposure 2025-11-12T15:01:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpspeed/wpspeed-265-cross-site-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcf7-redirect/redirection-for-contact-form-7-233-unprotected-ajax-actions 2021-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nasa-core/nasa-core-644-authenticated-contributor-local-file-inclusion 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-manager/wp-user-manager-user-profile-builder-membership-2911-missing-authorization-to-authenticated-subscriber-user-meta-key-enumeration 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/prolist/prolisting-directory-listing-12-reflected-cross-site-scripting 2020-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-child/mainwp-child-securely-connects-to-the-mainwp-dashboard-to-manage-multiple-sites-611-missing-authorization 2026-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/account-switcher/account-switcher-102-authenticated-subscriber-authentication-bypass-to-privilege-escalation 2026-05-19T12:05:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-ajax-chat/simple-ajax-chat-20231101-authenticated-admin-stored-cross-site-scripting 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gotmls/anti-malware-security-and-brute-force-firewall-42095-reflected-cross-site-scripting 2022-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/svg-support/svg-support-2319-admin-cross-site-scripting 2022-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dn-footer-contacts/dn-footer-contacts-162-authenticated-admin-stored-cross-site-scripting 2024-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accelerated-mobile-pages/amp-for-wp-099719-missing-authorization 2018-10-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1373-authenticated-subscriber-insecure-direct-object-reference-via-woof_add_subscr 2025-12-17T23:25:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/swipehq-payment-gateway-woocommerce/swipehq-payment-gateway-woocommerce-271-reflected-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-woocommerce-email-designer/kadence-woocommerce-email-designer-156-php-object-injection 2022-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affieasy/affieasy-114-cross-site-request-forgery 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-mailerlite/mailerlite-woocommerce-integration-208-cross-site-request-forgery-via-multiple-ajax-functions 2024-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/daiquiri/daiquiri-124-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/analytics-tracker/analytics-tracker-110-cross-site-scripting 2017-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-324-authenticated-administrator-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-calendar/booking-calendar-appointment-booking-system-321-unauthenticated-arbitrary-file-upload 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/publitio/publitio-221-authenticated-contributor-arbitrary-file-read 2025-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-coming-soon-page/coming-soon-page-responsive-coming-soon-maintenance-mode-1118-cross-site-scripting-via-counter_title-parameter 2018-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-file-list/simple-file-list-423-remote-code-execution 2020-11-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-custom-content-after-post/add-custom-content-after-post-10-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simply-gallery-block/simply-gallery-3321-authenticated-contributor-stored-cross-site-scripting 2025-10-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thim-elementor-kit/thim-elementor-kit-133-authenticated-contributor-insecure-direct-object-reference 2025-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wplr-sync/photo-engine-media-organizer-lightroom-649-authenticated-author-arbitrary-file-upload 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meta-tag-manager/meta-tag-manager-302-authenticated-subscriber-php-object-injection 2024-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/17track/17track-for-woocommerce-1210-reflected-cross-site-scripting 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rexcrawler/rexcrawler-1015-authenticated-administrator-stored-cross-site-scripting-via-settings 2026-05-26T20:44:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bold-timeline-lite/bold-timeline-lite-114-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/syncfields/syncfields-41-reflected-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/magic-import-document-extractor/magic-import-document-extractor-106-unauthenticated-sensitive-information-exposure 2026-02-03T19:32:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-tipdonation/woocommerce-tipdonation-12-authenticated-shop-manager-stored-cross-site-scripting-via-plugin-settings 2023-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/indeed-membership-pro/ultimate-membership-pro-86-cross-site-request-forgery 2020-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpvr/wp-vr-854-missing-authorization 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pretty-link/shortlinks-by-pretty-links-3615-missing-authorization 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/s2member/s2member-framework-membership-member-level-roles-access-capabilities-paypal-members-111220-cross-site-scripting 2012-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41036-authenticated-contributor-stored-cross-site-scripting-via-countdown-widget 2024-07-02T18:52:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kali-forms/kali-forms-211-missing-authorization-to-settings-update 2020-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-forms/smart-forms-2693-cross-site-request-forgery 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clp-varnish-cache/clp-varnish-cache-102-missing-authorization 2026-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cbxscratingreview/cbx-5-star-rating-review-107-reflected-cross-site-scripting-via-page-parameter 2026-05-21T14:51:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revisionary/publishpress-revisions-duplicate-posts-submit-approve-and-schedule-content-changes-3723-unauthenticated-sql-injection 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/raychat/raychat-221-cross-site-request-forgery 2025-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-library/link-library-771-reflected-cross-site-scripting 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailup-auto-subscribtion/mailup-auto-subscription-110-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-27T18:48:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/joomsport-sports-league-results-management/joomsport-for-sports-team-league-football-hockey-more-525-authenticated-admin-sql-injection-via-orderby 2022-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contests-from-rewards-fuel/contests-by-rewards-fuel-2064-authenticated-contributor-stored-cross-site-scripting-via-update_rewards_fuel_api_key 2024-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-login-and-registration-modal-popup/ajax-login-and-registration-modal-popup-inline-form-223-authenticated-author-stored-cross-site-scripting 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-spell-check/wp-spell-check-917-cross-site-request-forgery 2024-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/home-services/home-services-126-authenticated-subscriber-stored-cross-site-scripting 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/luzuk-testimonials/luzuk-testimonials-001-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-links-page/wp-links-page-491-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor-pro/elementor-pro-305-authenticated-remote-code-execution-in-dynamic-ooo-widget 2020-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/browsing-history/browsing-history-131-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy2map-photos/easy2map-photos-109-path-traversal 2015-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/complianz-gdpr/complianz-gdprccpa-cookie-consent-644-cross-site-request-forgery-via-ajax_script_add 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thesography/exifography-131-authenticated-administrator-stored-cross-site-scripting 2023-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatorwp/automatorwp-automator-plugin-for-no-code-automations-webhooks-custom-integrations-in-wordpress-536-missing-authorization-to-authenticated-subscriber-remote-code-execution-via-automation-creation 2025-09-08T17:53:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-profile-meta/user-profile-meta-manager-102-cross-site-request-forgery-to-privilege-escalation 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insert-pages/insert-pages-324-authenticated-directory-traversal 2017-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elements-plus/elements-plus-2162-authenticatedcontributor-stored-cross-site-scripting-via-widget-links 2024-03-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tablesome/table-contact-form-7-database-tablesome-1025-cross-site-request-forgery 2024-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wha-wordsearch/word-search-puzzles-game-201-authenticated-contributor-stored-cross-site-scripting 2022-09-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-blocks/essential-blocks-406-missing-authorization-via-template_count 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nexa-blocks/nexa-blocks-110-authenticated-contributor-stored-cross-site-scripting-via-google-maps-widget 2025-09-29T15:26:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/litho-addons/litho-addons-34-missing-authorization 2025-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hide-my-wp/hide-my-wp-ghost-security-firewall-5302-unauthenticated-login-page-disclosure 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1372-authenticated-subscriber-insecure-direct-object-reference-via-woof_add_querywoof_remove_query 2025-12-03T00:25:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-summary-and-print/contact-form-7-summary-and-print-125-cross-site-request-forgery 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dethemekit-for-elementor/dethemekit-for-elementor-217-authenticated-contributor-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-seo/wp-meta-seo-454-authenticated-author-phar-deserialization 2023-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dj-rainflow/dj-rainflow-1313-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fsqm-pro/eform-wordpress-form-builder-4191-reflected-cross-site-scripting 2025-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-term-order/term-order-210-cross-site-request-forgery 2026-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-scroll-for-reading/auto-scroll-for-reading-114-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-elementor-addons/happy-addons-for-elementor-3122-authenticated-contributor-sensitive-information-exposure 2024-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-field-list-widget/custom-field-list-widget-151-unauthenticated-local-file-inclusion 2025-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fortis-for-woocommerce/fortis-for-woocommerce-120-missing-authorization-to-unauthenticated-arbitrary-order-status-update-to-paid-via-wc-api-endpoint 2026-02-03T19:44:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fast-search-powered-by-solr/sunny-search-102-cross-site-request-forgery-to-settings-update 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jch-optimize/jch-optimize-400-missing-authorization 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mpl-publisher/mpl-publisher-2180-authenticated-contributor-stored-cross-site-scripting 2025-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-strava/wp-strava-2121-authenticated-administrator-stored-cross-site-scripting 2024-11-12T13:25:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photonic/photonic-gallery-lightbox-for-flickr-smugmug-others-321-authenticated-contributor-stored-cross-site-scripting-via-caption-attribute 2025-11-17T20:47:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortpixel-image-optimiser/shortpixel-image-optimizer-541-authenticatededitor-php-object-injection 2023-09-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/soundcloud-shortcode/soundcloud-shortcode-401-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-timer/easy-timer-421-authenticated-editor-remote-code-execution-via-shortcode 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fv-wordpress-flowplayer/fv-flowplayer-video-player-7314727-sql-injection 2019-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/newsblogger/newsblogger-0256-0261-cross-site-request-forgery-to-arbitrary-plugin-installation 2026-02-18T15:08:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/armember-membership/armember-4010-authenticated-subscriber-membership-plan-bypass 2023-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/monetize-link/takeads-1013-missing-authorization-to-plugin-settings-deletion 2025-12-04T17:20:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/propertyhive/propertyhive-1546-reflected-cross-site-scripting-via-merge_ids 2023-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pet-manager/pet-manager-14-reflected-cross-site-scripting 2024-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bws-smtp/smtp-by-bestwebsoft-119-authenticated-administrator-arbitrary-file-upload 2025-03-07T17:30:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-front-end-login-and-register/wp-front-end-login-and-register-210-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mappress-google-maps-for-wordpress/mappress-maps-for-wordpress-2966-unauthenticated-insecure-direct-object-reference-via-rest-api-endpoints 2026-06-05T14:37:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cms-tree-page-view/cms-tree-page-view-089-cross-site-scripting 2012-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shared-files/shared-files-frontend-file-upload-form-secure-file-sharing-1742-limited-unauthenticated-stored-cross-site-scripting-via-file-upload 2025-01-30T17:22:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acf-onyx-poll/acf-onyx-poll-119-authenticated-contributor-stored-cross-site-scripting-via-class-parameter 2025-06-12T13:07:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-853-unauthenticated-stored-cross-site-scripting 2026-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enable-svg-webp-ico-upload/enable-svg-webp-ico-upload-102-authenticated-author-stored-cross-site-scripting 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vc-tabs/tabs-responsive-tabs-with-woocommerce-product-tab-extension-360-authenticated-admin-arbitrary-options-update 2022-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-any-extension-to-pages/add-any-extension-to-pages-14-cross-site-request-forgery-via-aaetp_options_page 2023-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-calendar-contact-form/booking-calendar-contact-form-1240-reflected-cross-site-scripting 2023-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/send-pdf-for-contact-form-7/send-pdf-for-contact-form-7-0991-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-online-ordering-and-delivery-platform/advanced-online-ordering-and-delivery-platform-200-unauthenticated-local-file-inclusion 2024-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3290-authenticated-contributor-stored-cross-site-scripting-via-wpdm-all-packages-shortcode 2024-05-30T20:30:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-anchor-links/better-anchor-links-175-cross-site-request-forgery-via-adminoptionsphp 2024-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uk-cookie-consent/gdprccpa-cookie-consent-banner-32-missing-authorization-via-handle_consent_toggle 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/directorist/directorist-722-authenticated-admin-arbitrary-file-upload 2022-07-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gutenkit-blocks-addon/gutenkit-222-authenticated-contributor-stored-cross-site-scripting 2025-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-optimizer-wd/image-optimizer-by-10web-1026-authenticatedadministator-directory-traversal 2023-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reaction-buttons/reaction-buttons-216-authenticated-administrator-stored-cross-site-scripting 2025-02-17T15:48:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-804-improper-input-validation 2022-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/agency-toolkit/agency-toolkit-1023-missing-authorization-to-unauthenticated-arbitrary-options-update 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-visual-adverts/wp-visual-adverts-230-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/authors-autocomplete-meta-box/authors-autocomplete-meta-box-12-reflected-cross-site-scripting 2025-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mobile-dj-manager/mdjm-event-management-1756-reflected-cross-site-scripting 2025-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/featured-image/featured-image-21-authenticated-author-stored-cross-site-scripting 2026-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-eMember/wp-emember-1065-cross-site-request-forgery-to-bulk-delete 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-upload/wordpress-file-upload-4245-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagelinks-interactive-image-builder-lite/imagelinks-154-authenticated-admin-sql-injection 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instagram-slider-widget/social-slider-feed-206-authenticated-admin-stored-cross-site-scripting 2022-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theme-translation-for-polylang/theme-and-plugin-translation-for-polylang-3216-missing-authorization 2022-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-352-server-side-request-forgery 2013-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/relevanssi-premium/relevanssi-4212-free-and-2250-premium-missing-authorization-to-unauthorized-post-access 2024-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/saxon/saxon-viral-content-blog-magazine-marketing-wordpress-193-unauthenticated-local-file-inclusion 2025-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mjm-clinic/mjm-clinic-1122-authenticated-editor-stored-cross-site-scripting 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-332-authenticated-contributor-sql-injection 2026-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/urbancity/urban-city-all-versions-arbitrary-file-download 2014-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/m-wp-popup/popup-custom-popup-builder-13-denial-of-service 2022-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/payflex-payment-gateway/payflex-payment-gateway-250-missing-authorization-to-order-status-update 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-2010-open-redirect 2007-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-with-phone-number/login-with-phone-number-137-authenticated-admin-stored-cross-site-scripting 2022-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shipping-labels-for-woo/woocommerce-shipping-label-238-authenticated-shop-manager-stored-cross-site-scripting 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masterslider/master-slider-pro-365-reflected-cross-site-scripting 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slicewp/wordpress-affiliates-plugin-slicewp-affiliates-1110-authenticated-admin-stored-cross-site-scripting 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/twentytwenty/twentytwenty-101-authenticated-contributor-stored-cross-site-scripting 2024-12-05T19:53:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acymailing/acymailing-smtp-newsletter-862-reflected-cross-site-scripting 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/star-cloudprnt-for-woocommerce/star-cloudprnt-for-woocommerce-203-unauthenticated-cross-site-scripting 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zarinpal-paid-downloads/zarinpal-paid-download-23-reflected-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/question-answer/question-answer-1270-authenticated-subscriber-php-object-injection 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-anti-spambot/contact-form-7-anti-spambot-101-missing-authorization 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-addon-uploads/file-uploads-addon-for-woocommerce-171-unauthenticated-sensitive-information-exposure-through-unprotected-directory 2025-02-17T15:46:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder/popup-builder-create-highly-converting-mobile-friendly-marketing-popups-431-missing-authorization-and-nonce-exposure 2024-06-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-metabox/gallery-metabox-15-cross-site-request-forgery-via-gallery_remove 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/caret-country-access-limit/caret-country-access-limit-102-cross-site-request-forgery 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cardgate/cardgate-payments-for-woocommerce-321-reflected-cross-site-scripting 2024-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zynith-seo/zynith-seo-749-unauthenticated-stored-cross-site-scripting 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-support/awesome-support-637-authenticated-subscriber-insecure-direct-object-reference-to-unauthorized-ticket-reply-access-via-ticket_id-parameter 2026-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adrotate/adrotate-ad-manager-adsense-ads-5132-authenticated-admin-double-extension-arbitrary-file-upload 2024-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/squirrels-auto-inventory/squirrels-auto-inventory-103-authenticated-admin-stored-cross-site-scripting 2025-11-10T15:00:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-membership-after-login-redirection/simple-membership-after-login-redirection-16-open-redirect 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedded-cdn/canadahelps-embedded-donation-101-authenticated-contributor-stored-cross-site-scripting 2025-02-18T19:22:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mobile-domain/mobile-domain-152-cross-site-request-forgery-and-stored-cross-site-scripting 2015-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ungrabber/ungrabber-313-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-import-pro/import-any-xml-or-csv-file-to-wordpress-324-reflected-cross-site-scripting 2015-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-285-cross-site-scripting 2009-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zt-captcha/zt-captcha-104-cross-site-request-forgery-to-settings-update 2026-01-23T19:19:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-wordpress-lms-plugin-3272-sql-injection 2020-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js-support-ticket/js-help-desk-301-authenticated-subscriber-sql-injection 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/explara-membership/explara-membership-007-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-12661-unauthenticated-blind-sql-injection 2019-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/element-ready-lite/elementsready-addons-for-elementor-662-cross-site-request-forgery 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpjobboard/wpjobboard-451-cross-site-scripting 2017-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/security-malware-firewall/security-malware-scan-by-cleantalk-2149-unauthenticated-arbitrary-file-upload 2025-02-11T20:29:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alo-easymail/alo-easymail-newsletter-2600-cross-site-request-forgery-to-stored-cross-site-scripting 2015-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-adsense-reloaded/ads-by-wpquads-20871-missing-authorization 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/did-prestashop-display/did-prestashop-display-1030-cross-site-request-forgery 2025-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forget-about-shortcode-buttons/forget-about-shortcode-buttons-111-reflected-cross-site-scripting 2016-02-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/koko-analytics/koko-analytics-212-unauthenticated-sql-injection 2026-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ag-custom-admin/absolutely-glamorous-custom-admin-723-authenticated-admin-server-side-request-forgery 2024-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/barcode-scanner-with-inventory-order-manager-166-reflected-cross-site-scripting 2024-12-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yaycurrency/yaycurrency-32-authenticated-administrator-remote-code-execution 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cooked-pro/cooked-pro-1757-unauthenticated-php-object-injection 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/textme-sms-integration/textme-sms-190-missing-authorization-via-tetxme_update_option_page 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/xstore/xstore-938-unauthenticated-local-file-inclusion 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sellkit/sellkit-funnel-builder-and-checkout-optimizer-for-woocommerce-to-sell-more-faster-198-authenticated-contributor-stored-cross-site-scripting-via-id-parameter 2024-06-05T15:30:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ltl-freight-quotes-abf-freight-edition/ltl-freight-quotes-abf-freight-edition-337-unauthenticated-sql-injection 2025-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/10to8-online-booking/10to8-online-appointment-booking-system-109-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/genoo/genoo-6010-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/orchid-store/orchid-store-1515-missing-authorization 2026-01-12T13:03:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-content-management/my-content-management-176-authenticated-administrator-stored-cross-site-scripting 2023-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/browser-shots/browser-screenshots-176-stored-cross-site-scripting 2021-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bbpress-notify-nospam/bbpress-notify-2183-reflected-cross-site-scripting 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-not-login-hide-wpnlh/wp-not-login-hide-10-authenticated-admin-stored-cross-site-scripting 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-for-wpforms/pdf-for-wpforms-650-authenticated-subscriber-php-object-injection 2025-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supportcandy/supportcandy-226-stored-cross-site-scripting-via-shortcode 2022-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visual-footer-credit-remover/visual-footer-credit-remover-12-authenticated-admin-stored-cross-site-scripting 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yamaps/yamaps-0639-authenticated-contributor-stored-cross-site-scripting 2025-12-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/robo-gallery/robo-gallery-502-authenticated-administrator-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-counter/download-counter-13-authenticated-contributor-stored-cross-site-scripting-via-name-parameter 2025-08-04T18:57:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/newsdaily/newsdaily-1064-authenticated-contributor-stored-cross-site-scripting 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mwp-herd-effect/herd-effects-523-cross-site-request-forgery-to-effect-deletion 2023-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sellsy/sellsy-233-authenticated-contributor-stored-cross-site-scripting 2025-01-06T15:05:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sunshine-photo-cart/sunshine-photo-cart-2913-missing-authorization 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/get-cash/get-cash-322-authenticated-contributor-stored-cross-site-scripting 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-contact-form7-for-elementor/awesome-contact-form7-for-elementor-30-authenticated-contributor-stored-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coming-soon-page/coming-soon-and-maintenance-mode-373-ip-address-spoofing-via-get_real_ip 2023-12-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/emphires/emphires-39-authenticated-contributor-local-file-inclusion 2026-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woolentor-addons/woolentor-253-php-object-injection 2023-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rolo-slider/rolo-slider-109-missing-authorization-to-authenticatedsubscriber-settings-change 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simplified/simplified-1011-authenticated-administrator-server-side-request-forgery 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusion-builder/fusion-builder-3132-authenticated-contributor-stored-cross-site-scripting 2025-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/members-page-only-for-logged-in-users/members-page-only-for-logged-in-users-142-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pont/pont-15-arbitrary-options-update 2015-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pocket-news-generator/pocket-news-generator-020-cross-site-request-forgery-to-settings-update 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ashe/ashe-2267-missing-authorization 2026-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-search/jetsearch-352-authenticated-contributor-stored-cross-site-scripting 2024-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meet-my-team/meet-my-team-205-authenticated-contributor-stored-cross-site-scripting 2022-09-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sticky-add-to-cart-woo/simple-sticky-add-to-cart-for-woocommerce-146-missing-authorization 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstw-csv-exporter/mstw-csv-exporter-14-missing-authorization 2025-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formstack/formstack-online-forms-202-missing-authorization 2025-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/online-accessibility/accessibility-suite-by-ability-inc-418-missing-authorization 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-tickets/my-tickets-1830-unauthenticated-stored-cross-site-scripting 2021-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-travel-blocks/wp-travel-gutenberg-blocks-390-unauthenticated-local-file-inclusion 2025-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-in-english-with-switch/admin-in-english-with-switch-11-cross-site-request-forgery 2025-09-10T18:51:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/mogi/mogi-123-missing-authorization 2026-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sliding-widgets/sliding-widgets-150-authenticated-subscriber-stored-cross-site-scripting 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/itsukaita/itsukaita-012-reflected-cross-site-scripting-via-day_from-parameter 2026-03-20T15:16:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blog2social/blog2social-social-media-auto-post-scheduler-720-reflected-cross-site-scripting 2023-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/nika/nika-128-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xt-woo-ajax-add-to-cart/xt-ajax-add-to-cart-for-woocommerce-112-reflected-cross-site-scripting 2024-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hide-my-wp/hide-my-wp-ghost-5401-unauthenticated-local-file-inclusion 2025-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/accio-one-page/accio-responsive-onepage-parallax-site-template-111-sensitive-information-disclosure 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/one-page-express-companion/one-page-express-companion-1637-authenticated-contributor-stored-cross-site-scripting-via-one_page_express_contact_form-shortcode 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/attributes-for-blocks/attributes-for-blocks-106-authenticated-contributor-stored-cross-site-scripting-via-attributesforblocks-parameter 2024-09-03T19:27:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webflow-pages/webflow-pages-108-missing-authorization 2023-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/structured-content/structured-content-161-authenticated-contributor-stored-cross-site-scripting-via-classic-editor-shortcode 2024-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integration-for-contact-form-7-and-google-sheets/integration-for-google-sheets-and-contact-form-7-wpforms-elementor-ninja-forms-111-unauthenticated-php-object-injection-via-verify_field_val-function 2025-07-18T16:22:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/nexter/nexter-203-authenticated-subscriber-sql-injection-via-to-and-from 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/perfect-woocommerce-brands/perfect-brands-for-woocommerce-204-server-information-disclosure 2022-01-28T09:33:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-form-builder/easy-form-builder-338-authenticated-administrator-stored-cross-site-scripting 2022-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xpinner-lite/xpinner-lite-22-cross-site-scripting 2015-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/katalogportal-pdf-sync/katalogportal-pdf-sync-widget-100-missing-authorization-to-authenticated-subscriber-information-disclosure-via-katalogportal_shortcodeprinter-ajax-action 2026-04-14T19:45:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/excellent/excellent-129-authenticated-contributor-stored-cross-site-scripting 2024-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-able-player/able-player-10-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-registration-form-builder-with-submission-manager/registrationmagic-custom-registration-forms-and-user-login-4603-authenticated-email-injection 2020-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/biteship/biteship-2224-reflected-cross-site-scripting-via-biteship_error-and-biteship_message 2024-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/icafe-library/icafe-library-183-authenticated-editor-sql-injection 2025-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addon-elements-for-elementor-page-builder/elementor-addon-elements-163-reflected-cross-site-scripting 2020-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/activecampaign-for-woocommerce/activecampaign-for-woocommerce-197-cross-site-request-forgery 2022-12-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stellissimo-text-box/stellissimo-text-box-114-authenticated-admin-stored-cross-site-scripting 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetwidgets-for-elementor/jetwidgets-for-elementor-1016-authenticatedcontributor-stored-cross-site-scripting-via-widget-button-url 2024-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-calendar/booking-calendar-appointment-booking-system-328-multiple-authenticatededitor-sql-injection 2023-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-fields-to-checkout-page-woocommerce/custom-woocommerce-checkout-fields-editor-131-missing-authorization 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insert-pages/insert-pages-374-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2022-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-entries/database-for-contact-form-7-wpforms-elementor-forms-149-missing-authorization-to-authenticated-contributor-sensitive-information-exposure-via-shortcode 2026-03-31T12:23:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/newseqo/newseqo-211-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html5-jquery-audio-player/html5-jquery-audio-player-262-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/official-mailerlite-sign-up-forms/mailerlite-signup-forms-official-176-missing-authorization 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcomplete/wpcomplete-2952-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-monitor/download-monitor-481-authenticated-admin-server-side-request-forgery 2023-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amp-toolbox/amp-toolbox-211-cross-site-scripting 2017-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/project-source-code-download/project-source-code-download-100-unauthenticated-backup-download 2022-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-file-download/cf7-file-download-file-download-for-cf7-20-authenticated-admin-stored-cross-site-scripting 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribers/email-subscribers-newsletters-422-missing-authorization-to-test-email 2019-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js_composer/wpbakery-page-builder-841-authenticated-author-stored-cross-site-scripting-via-grid-builder 2025-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/zegen/zegen-church-wordpress-theme-119-missing-authorization-to-authenticated-subscriber-theme-options-updates 2025-03-13T16:37:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-thumbtack-review-slider/wp-thumbtack-review-slider-26-authenticated-administrator-stored-cross-site-scripting 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/searchiq/searchiq-the-search-solution-47-authenticated-contributor-stored-cross-site-scripting 2025-03-04T19:17:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-time-slots-booking-form/wp-time-slots-booking-form-1246-unauthenticated-stored-cross-site-scripting 2026-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-xml-feeds-for-woocommerce/product-xml-feed-manager-for-woocommerce-292-missing-authorization 2025-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/double-the-donation/double-the-donation-200-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/headline-analyzer/headline-analyzer-131-missing-authorization-via-rest-apis 2023-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-review/wordpress-review-plugin-the-ultimate-solution-for-building-a-review-website-535-authenticated-contributor-local-file-inclusion-via-post-custom-fields 2025-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventer/eventer-398-reflected-cross-site-scripting 2025-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/loginizer/loginizer-138-139-unauthenticated-stored-cross-site-scripting 2018-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ovic-vc-addon/ovic-responsive-wpbakery-130-missing-authorization 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/listar-directory-listing/listar-directory-listing-classifieds-wordpress-plugin-300-missing-authorization-to-authenticated-subscriber-listing-update 2025-12-05T17:36:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-to-database-extension/contact-form-db-2817-reflected-cross-site-scripting 2014-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/supreme-directory/supreme-directory-119-cross-site-scripting 2018-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/oberliga_theme/oberliga-theme-all-versions-sql-injection 2012-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagerecycle-pdf-image-compression/imagerecycle-pdf-image-compression-3114-cross-site-request-in-several-ajax-actions 2024-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pods/pods-custom-content-types-and-fields-321-authenticated-contributor-stored-cross-site-scripting-via-pod-form-redirect-url 2024-05-09T20:29:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/experto-custom-dashboard/experto-dashboard-for-woocommerce-104-authenticated-administrator-stored-cross-site-scripting-via-navigation-font-size-setting 2026-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/erp/wp-erp-1123-reflected-cross-site-scripting 2023-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webwinkelkeur/webwinkelkeur-324-cross-site-request-forgery 2023-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fossura-tag-miner/tag-miner-automatic-tag-extraction-115-cross-site-request-forgery 2015-11-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-less-compiler/wp-less-compiler-130-unauthenticated-stored-cross-site-scripting 2025-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/w3-total-cache-0941-security-token-bypass-via-type-juggling 2016-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oauth2-provider/wp-oauth-server-oauth-authentication-421-authenticated-administrator-stored-cross-site-scripting 2022-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ad-injection/ad-injection-12019-authenticated-admin-stored-cross-site-scripting 2022-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tarteaucitron-wp/tarteaucitronjs-for-wordpress-030-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-connect/wordpress-256-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/backend-designer/backend-designer-13-authenticated-admin-stored-cross-site-scripting 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pages-order/pages-order-113-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user/wp-user-custom-registration-forms-login-and-user-profile-70-reflected-cross-site-scripting 2022-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-email/contact-form-email-101-cross-site-scripting 2014-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-gdpr/wordpress-gdpr-202-missing-authorization-to-unauthenticated-arbitrary-user-deletion 2024-11-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/metamagic/metamagic-seo-plugin-16-cross-site-request-forgery-to-plugin-settings-update-via-settings-page 2026-05-26T18:57:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flash-album-gallery/album-and-image-gallery-with-lightbox-flagallery-photo-portfolio-200-sql-injection 2012-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-wordpress-directory-listing-theme-261-arbitrary-plugin-installation-activation-and-deactivation 2020-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-products-to-wc/amazon-products-to-woocommerce-127-missing-authorization-to-unauthenticated-arbitrary-product-creation 2025-06-25T14:07:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/avif-support/avif-svg-uploader-110-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-09-30T21:14:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-column-widgets/responsive-column-widgets-127-open-redirect-via-responsive_column_widgets_link 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/traveler/traveler-319-authenticated-contributor-local-file-inclusion-via-shortcode 2025-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-discussion-board/discussion-board-wordpress-forum-plugin-255-authenticated-subscriber-arbitrary-shortcode-execution 2025-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-custom-fields-pro/advanced-custom-fields-pro-590-reflected-cross-site-scripting 2021-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hydra-booking/hydra-booking-1132-unauthenticated-privilege-escalation 2026-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/noo-organici-library/organici-library-212-authenticated-subscriber-sql-injection 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tourmaster/tour-master-tour-booking-travel-hotel-534-reflected-cross-site-scripting 2025-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supermalink/supermalink-11-authenticated-contributor-stored-cross-site-scripting 2025-07-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-digital-downloads/easy-digital-downloads-2103-reflected-cross-site-scripting 2021-05-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddyboss-platform/buddyboss-platform-2850-authenticated-subscriber-stored-cross-site-scripting-via-bbp_topic_title 2025-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-reminders/email-reminders-204-authenticated-contributor-stored-cross-site-scripting-via-id-parameter 2024-12-09T20:57:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bbp-move-topics/bbpress-move-topics-116-reflected-cross-site-scripting 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-195-cross-site-scripting 2021-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smartkit/smartkit-10-cross-site-request-forgery-to-cross-site-scripting 2022-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-activities/booking-activities-11644-unauthenticated-privilege-escalation 2026-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedpress/embedpress-453-authenticated-contributor-stored-cross-site-scripting-via-block-url-attribute 2026-06-05T14:17:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mini-program/mini-program-api-145-authenticated-contributor-stored-cross-site-scripting 2024-12-06T21:27:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maxgalleria/maxgalleria-644-authenticated-contributor-stored-cross-site-scripting-via-maxgallery_thumb-shortcode 2024-06-18T08:45:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/club-management-software/wordpress-membership-swiftcloudio-10-authenticated-admin-sql-injection 2021-07-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-custom-cursors/wp-custom-cursors-wordpress-cursor-32-authenticated-admin-stored-cross-site-scripting 2023-10-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/business-card-by-esterox-100/business-card-100-cross-site-request-forgery-to-category-edit 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar/the-events-calendar-615122-missing-authorization 2026-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yellow-yard/yellow-yard-searchbar-2727-reflected-cross-site-scripting 2022-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clicksend-lead-capture-form/sms-for-lead-capture-forms-110-missing-authorization-to-authenticated-subscriber-arbitrary-message-deletion 2024-12-06T11:57:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-cloudflare-page-cache/super-page-cache-522-unauthenticated-stored-cross-site-scripting-via-activity-log 2026-02-13T19:48:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/templatespare/build-your-dream-website-fast-with-400-starter-templates-and-landing-pages-no-coding-needed-one-click-import-for-elementor-gutenberg-blocks-templatespare-242-missing-authorization-to-authenticated-subscriber-theme-update 2024-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tracking-code-manager/tracking-code-manager-2016-authenticated-administrator-stored-cross-site-scripting 2024-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpstorecart/idb-ecommerce-wpstorecart-5-2530-arbitrary-file-upload 2012-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-manager/events-manager-5973-admin-sql-injection 2020-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/i-plant-a-tree/i-plant-a-tree-173-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buy-now-pay-later-addi/addi-cuotas-que-se-adaptan-a-ti-204-missing-authorization 2026-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lifterlms/lifterlms-800-reflected-cross-site-scripting 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-coupon-usage/coupon-affiliates-543-unauthenticated-stored-cross-site-scripting 2023-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexible-shipping-usps/usps-shipping-for-woocommerce-live-rates-194-sensitive-information-exposure 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-popular-elementor-templates-widgets-653-authenticated-contributor-stored-cross-site-scripting 2025-12-16T15:08:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wptouch/wptouch-37-open-redirect 2015-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fv-wordpress-flowplayer/fv-flowplayer-video-player-7437727-authenticated-stored-cross-site-scripting 2021-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/official-sendle-shipping-method/sendle-shipping-602-cross-site-request-forgery 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-2-factor-authentication/minioranges-google-authenticator-561-sensitive-data-exposure-of-multifactor-backup-codes 2022-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-user-profiles-groups-and-communities-5936-missing-authorization-to-authenticated-subscriber-arbitrary-user-meta-deletion 2024-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customer-reviews-woocommerce/customer-reviews-for-woocommerce-5460-missing-authorization-to-authenticated-subscriber-arbitrary-email-sending 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ulisting/directory-listings-wordpress-plugin-ulisting-220-authenticated-editor-arbitrary-file-download 2026-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shareaholic/wordpress-social-sharing-related-posts-analytics-shareaholic-7610-authenticated-subscriber-cross-site-scripting 2015-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/i-recommend-this/i-recommend-this-390-cross-site-request-forgery 2023-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-orders-tracking/orders-tracking-for-woocommerce-1014-reflected-cross-site-scripting 2021-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/truepush-free-web-push-notifications/truepush-108-missing-authorization 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/high-compress/highcompress-image-compressor-500-missing-authorization-via-multiple-ajax-actions 2023-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/secure-admin-ip/secure-admin-ip-20-missing-authorization-via-savesettings 2023-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/location-click-map/location-click-map-10-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-1814-authenticated-administrator-directory-traversal 2023-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-photo-gallery/photo-gallery-by-ays-570-authenticated-administrator-html-injection 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-maker/form-maker-by-10web-11533-authenticated-administrator-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/verge3d/verge3d-493-reflected-cross-site-scripting 2025-05-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/s3-bubble-amazon-s3-html5-video-with-adverts-07-directory-traversal-to-arbitrary-file-access 2015-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-coupons-and-deals/coupons-and-deals-324-missing-authorization 2025-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-donation-plugin-and-fundraising-platform-3130-missing-authorization-to-limited-information-exposure 2024-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/zita/zita-165-unauthenticated-local-file-inclusion 2025-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpack-elements/powerpack-pro-for-elementor-v2130-missing-authorization 2026-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-travel-engine/wp-travel-engine-530-editor-stored-cross-site-scripting 2021-12-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coupon-reveal-button/coupon-discount-code-reveal-button-125-authenticated-editor-stored-cross-site-scripting 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mini-ajax-woo-cart/mini-ajax-cart-for-woocommerce-134-authenticated-author-stored-cross-site-scripting 2026-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gift-voucher/gift-cards-gift-vouchers-and-packages-432-unauthenticated-sql-injection 2023-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-openid-connect-client/wordpress-openid-connect-client-217-authentication-bypass 2022-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dricub-driving-school/dricub-29-missing-authorization 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/3d-flipbook-dflip-lite/dearflip-2226-authenticated-contributor-stored-cross-site-scripting-via-force_fit 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpify-woo/wpify-woo-czech-356-reflected-cross-site-scripting 2022-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-duplicator/post-duplicator-3010-authenticated-contributor-php-object-injection 2026-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/locateandfilter/locateandfilter-1614-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-09-30T19:27:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mobile-call-now-map-buttons/mobile-call-now-map-buttons-162-authenticated-administrator-stored-cross-site-scripting 2023-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imageseo/optimize-images-alt-text-alt-tag-names-for-seo-using-ai-311-unauthenticated-full-path-disclosure 2024-07-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/transition-slider-lite/transition-slider-responsive-image-slider-and-gallery-2203-authenticated-editor-stored-cross-site-scripting 2024-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-csv-importer/import-export-suite-for-csv-and-xml-datafeed-719-authenticated-subscriber-arbitrary-file-upload 2025-03-31T15:56:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/picture-gallery/picture-gallery-frontend-image-uploads-ajax-photo-list-1522-authenticated-contributor-stored-cross-site-scripting-via-videowhisper_picture_upload_guest-shortcode 2025-01-17T18:02:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xpro-elementor-addons/xpro-addons-140-widgets-for-elementor-1424-authenticated-contributor-stored-cross-site-scripting-via-icon-box-widget 2026-04-03T13:35:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mediamatic/mediamatic-media-library-folders-280-sql-injection 2021-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/texteller/texteller-130-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/photography/photography-761-unauthenticated-stored-cross-site-scripting 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eprolo-dropshipping/eprolo-dropshipping-231-missing-authorization-to-authenticated-subscriber-tracking-data-modification 2025-12-04T17:23:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/startklar-elmentor-forms-extwidgets/startklar-elementor-addons-1713-unauthenticated-arbitrary-file-deletion 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-multilang/wp-multilang-2419-authenticated-contributor-local-file-inclusion 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagemapper/imagemapper-126-cross-site-request-forgery-to-plugin-settings-change-via-ajax 2023-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/footer-text/footer-text-203-cross-site-request-forgery-to-cross-site-scripting 2022-04-28T09:52:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real-estate-pro/real-estate-pro-215-missing-authorization 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gravity-forms-css-themes-with-fontawesome-and-placeholder-support/gravity-forms-css-themes-with-fontawesome-and-placeholders-85-authenticated-administrator-stored-cross-site-scripting 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wptemplata/wp-templata-107-reflected-cross-site-scripting 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/grandblog/grand-blog-315-unauthenticated-server-side-request-forgery 2026-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kata-plus/kata-plus-153-unauthenticated-php-object-injection 2025-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-photo-album-plus/wp-photo-album-plus-9113005-unauthenticated-sql-injection 2026-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpappninja/wpmobileapp-1156-open-redirect-via-redirect-parameter 2025-02-19T19:45:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/registration-form-for-woocommerce/registration-form-for-woocommerce-109-unauthenticated-privilege-escalation 2026-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-jetpack/booster-for-woocommerce-711-authenticated-subscriber-information-disclosure-via-shortcode 2023-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-page-styler/custom-login-page-styler-711-missing-authorization-to-authenticated-subsciber-log-deletion-and-session-termination 2025-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automate-hub-free-by-sperse-io/automate-hub-free-by-sperseio-170-reflected-cross-site-scripting 2025-01-06T15:40:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ltl-freight-quotes-rl-edition/ltl-freight-quotes-rl-carriers-edition-3313-missing-authorization-to-unauthenticated-settings-update 2026-04-07T15:25:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-bulk-delete/wp-bulk-delete-131-reflected-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pitchprint/pitchprint-1112-unauthenticated-arbitrary-file-deletion 2026-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meeting-list/meetinglist-011-authenticated-admin-stored-cross-site-scripting 2025-11-03T15:32:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-symposium/wp-symposium-1411-authenticated-sql-injection 2014-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-control/content-control-210-missing-authorization-to-sensitive-information-exposure 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-customers-manager/woocommerce-customers-manager-296-authenticated-subscriber-sql-injection 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-226-insecure-direct-object-reference-to-authenticated-employer-arbitrary-company-deletion 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meintopf/meintopf-021-reflected-cross-site-scripting 2025-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-2744-authenticated-contributor-stored-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-recently-viewed-products/wc-recently-viewed-products-101-reflected-cross-site-scripting 2024-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/livemesh-siteorigin-widgets/livemesh-siteorigin-widgets-392-missing-authorization-to-authenticated-subscriber-stored-cross-site-scripting 2026-05-26T17:33:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-search-to-menu/ivory-search-546-reflected-cross-site-scripting 2022-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contest-gallery/contest-gallery-upload-vote-photos-media-sell-with-paypal-stripe-2816-authenticated-subscriber-stored-cross-site-scripting 2026-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kali-forms/kali-forms-248-insecure-direct-object-reference-to-authenticated-contributor-sensitive-form-data-exposure 2026-02-17T18:55:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bricksforge/bricksforge-3184-unauthenticated-information-exposure 2026-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smpl-shortcodes/simple-shortcodes-1020-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/infugrator/infugrator-103-reflected-cross-site-scripting 2025-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41034-authenticated-contributor-stored-cross-site-scripting 2024-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortpixel-image-optimiser/shortpixel-image-optimizer-643-authenticated-author-stored-cross-site-scripting-via-attachment-title 2026-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-backpack/wp-backpack-21-authenticated-administrator-stored-cross-site-scripting 2024-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nextgen-gallery/nextgen-gallery-337-authenticated-admininistrator-arbitrary-file-read-and-deletion-in-gallery_edit 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-dropi-integration/dropify-469-reflected-cross-site-scripting 2025-06-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/shapeless/shapeless-11-cross-site-scripting 2012-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mybooktable/mybooktable-bookstore-337-authenticated-author-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flatpm-wp/flat-pm-2661-reflected-cross-site-scripting 2022-11-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-311-authenticated-author-stored-cross-site-scripting 2023-10-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/gamic/gamic-115-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/grand-media/gmedia-photo-gallery-164-denial-of-service 2015-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-support/awesome-support-614-missing-authorization-to-authenticated-subscriber-arbitrary-post-modification 2023-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-elementor-addons/easy-elementor-addons-216-authenticated-contributor-stored-cross-site-scripting 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mega-elements-addons-for-elementor/mega-elements-122-authenticated-contributor-stored-cross-site-scripting 2024-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/recaptcha-jetpack/recaptcha-jetpack-022-cross-site-request-forgery 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-follow-up-emails/woocommerce-follow-up-emails-4940-authenticated-arbitrary-file-upload-in-template-editing 2023-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sync-wc-google/bulk-product-sync-86-cross-site-request-forgery 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wprentals/rentals-3131-cross-site-request-forgery 2025-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-4271-authenticated-subscriber-open-redirect 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-data-access/wp-data-access-app-table-form-and-chart-builder-plugin-5522-unauthenticated-sql-injection 2024-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-112-cross-site-request-forgery-via-wpfc_pause_cdn_integration_ajax_request_callback 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-conditional-fields/conditional-fields-for-contact-form-7-240-missing-authorization 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flo-forms/flo-forms-easy-drag-drop-form-builder-1035-options-change-to-stored-cross-site-scripting 2021-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-checkout-field-editor-pro/checkout-field-editor-172-authenticated-admin-php-object-injection 2022-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mapfig-premium-leaflet-map-maker/acugis-leaflet-maps-5110-unauthenticated-stored-cross-site-scripting 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wti-like-post/wti-like-post-143-sql-injection 2015-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jquery-reply-to-comment/jquery-reply-to-comment-131-cross-site-request-forgery 2021-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geeky-bot/geekybot-122-missing-authorization-to-unauthenticated-arbitrary-plugin-installation-via-geekybot_frontendajax-ajax-action 2026-05-04T15:26:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-faqs/ultimate-faqs-1821-cross-site-scripting 2019-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reepay-checkout-gateway/frisbii-pay-1821-missing-authorization 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-youtube/smart-youtube-pro-43-cross-site-request-forgery-via-handle_colorbox_options 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/big-store/big-store-193-cross-site-request-forgery-to-arbitrary-plugin-activation 2023-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpbookit/wpbookit-108-missing-authorization-to-unauthenticated-sensitive-customer-data-exposure 2026-03-03T12:28:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spice-starter-sites/spice-starter-sites-125-reflected-cross-site-scripting 2024-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wishlist/wishlist-210-missing-authorization 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-links-page/wp-links-page-496-authenticated-subscriber-sql-injection 2025-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rescue-shortcodes/rescue-shortcodes-29-authenticated-contributor-stored-cross-site-scripting-via-rescue_progressbar-shortcode 2024-11-22T21:34:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/workreap/workreap-theme-222-authorization-bypass 2021-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulk-image-resizer/bulk-images-optimizer-resize-optimize-convert-to-webp-rename-201-missing-authorization-to-authenticated-subscriber-plugin-options-update 2024-10-17T15:44:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chaty/floating-chat-widget-318-authenticated-editor-stored-cross-site-scripting 2024-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-extra-fields/wordpress-user-extra-fields-166-missing-authorization-to-authenticated-subscriber-privilege-escalation 2024-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/brightbox/brightbox-unknown-versions-cross-site-scripting 2012-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/akismet-privacy-policies/akismet-privacy-policies-201-reflected-cross-site-scripting 2022-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/editionguard-for-woocommerce-ebook-sales-with-drm/editionguard-for-woocommerce-ebook-sales-with-drm-342-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rs-wp-books-showcase/rs-wp-book-showcase-6741-unauthenticated-arbitrary-shortcode-execution 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gs-logo-slider/logo-slider-370-cross-site-request-forgery 2024-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/audio-comparison-lite/audio-comparison-lite-34-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fattura24/fattura24-627-reflected-cross-site-scripting-via-id 2023-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/support-x/crm-perks-wordpress-helpdesk-integration-zendesk-freshdesk-helpscout-116-authenticated-contributor-stored-cross-site-scripting 2024-12-16T09:47:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mapplic-lite/mapplic-lite-10-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-09-25T21:22:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-302-missing-authorization 2010-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailchimp-forms-by-mailmunch/mailchimp-forms-by-mailmunch-323-reflected-cross-site-scripting 2024-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yamaps/yamaps-for-wordpress-0640-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/burst-statistics/burst-statistics-206-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leyka/leyka-3292-cross-site-request-forgery 2023-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-ads/advanced-ads-ad-manager-adsense-2014-missing-authorization-to-authenticated-subscriber-ad-placements-update 2026-02-18T15:11:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/resca/resca-302-reflected-cross-site-scripting 2025-09-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/penci-shortcodes/penci-shortcodes-performance-61-authenticated-contributor-stored-cross-site-scripting 2026-01-10T23:40:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sexybookmarks/sexybookmarks-6140-cross-site-request-forgery 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mashsharer/social-media-share-buttons-mashshare-231-information-disclosure 2015-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/apocalypse-meow/apocalypse-meow-2210-authenticated-administrator-sql-injection-via-type-parameter 2026-03-04T16:06:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contest-gallery/contest-gallery-2606-authenticated-contributor-stored-cross-site-scripting-via-id-parameter 2025-05-07T22:33:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nv-slider/nv-slider-16-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tour-booking-manager/wptravelly-185-missing-authorization 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ht-mega-for-elementor/ht-mega-257-authenticated-contributor-json-file-directory-traversal 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-sms-alert/admin-sms-alert110-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-floating-menu/wp-floating-menu-140-cross-site-scripting-via-id-parameter 2020-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gravity-signature-forms-add-on/signature-add-on-for-gravity-forms-186-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/king-addons/king-addons-for-elementor-free-elements-widgets-templates-and-features-for-elementor-241292-51114-unauthenticated-privilege-escalation 2025-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/grand-media/gmedia-photo-gallery-1241-cross-site-request-forgery 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-font-editor/admin-font-editor-17-reflected-cross-site-scripting 2016-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easy-gallery/wp-easy-gallery-485-authenticated-contributor-sql-injection-via-key-parameter 2024-09-30T19:33:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/activitypub/activitypub-0170-authenticated-subscriber-insecure-direct-object-reference-to-sensitive-post-content-exposure 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-order-export-lite/advanced-order-export-for-woocommerce-355-unauthenticated-php-object-injection-via-order-details 2024-11-12T14:44:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetpack/jetpack-371-stored-cross-site-scripting 2015-10-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pdf-invoices-packing-slips/woocommerce-pdf-invoices-packing-slips-2140-300-reflected-cross-site-scripting 2022-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fox-lms/fox-lms-1063-authenticated-contributor-sql-injection 2026-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shipyaari-shipping-managment/shipyaari-shipping-management-12-unauthenticated-php-object-injection 2024-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enteraddons/enter-addons-218-authenticated-contributor-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementskit-lite/elements-kit-elementor-addons-314-missing-authorization 2024-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-ai-powered-recruitment-system-for-company-or-job-board-website-251-unauthenticated-sql-injection 2026-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/romancart-on-wordpress/romancart-on-wordpress-002-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-membership/membership-164-missing-authorization 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/idonate/idonate-2113-missing-authorization 2025-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/houzez-crm/houzez-crm-142-authenticated-seller-sql-injection 2024-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cafe-lite/clever-addons-for-elementor-220-authenticated-author-stored-cross-site-scripting 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dn-popup/dn-popup-122-cross-site-request-forgery-to-settings-update 2024-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themesflat-addons-for-elementor/themesflat-addons-for-elementor-232-authenticated-contributor-stored-cross-site-scripting 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tx-onepager/onepage-builder-easiest-landing-page-builder-for-wordpress-241-authenticated-administrator-sql-injection 2023-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/greenshift-animation-and-page-builder-blocks/greenshift-animation-and-page-builder-blocks-97-missing-authorization 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anomify/anomify-ai-036-cross-site-request-forgery 2026-05-19T17:36:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-photo-reviews/woocommerce-photo-reviews-premium-13132-authentication-bypass-to-account-takeover-and-privilege-escalation 2024-09-10T20:00:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-abandoned-cart/abandoned-cart-lite-for-woocommerce-5141-cross-site-request-forgery-via-delete_expired_used_coupon_code 2023-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mega-addons-for-visual-composer/mega-addons-for-wpbakery-page-builder-430-authenticated-subscriber-settings-update 2022-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/administrator-z/administrator-z-20250328-authenticated-admin-directory-traversal 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slideshow-gallery/slideshow-gallery-174-cross-site-scripting 2021-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-by-supsystic/contact-form-by-supsystic-1736-reflected-cross-site-scripting 2025-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vampire-character/vampire-character-manager-213-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/apartment-management/wpams-440-17-08-2023-unauthenticated-sql-injection 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-widget-classes/custom-widget-classes-11-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sf-booking/service-finder-bookings-51-unauthenticated-privilege-escalation-via-nsl_registration_store_extra_input 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adwords-conversion-tracking-code/adwords-conversion-tracking-code-10-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sello-channelconnector/sello-channelconnector-163-reflected-cross-site-scripting 2025-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-child/mainwp-child-4411-information-disclosure-via-back-up-files 2023-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easy-pay/wp-easypay-square-for-wordpress-320-cross-site-request-forgery-bypass 2021-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cities-shipping-zones-for-woocommerce/cities-shipping-zones-for-woocommerce-127-authenticated-shop-manager-local-file-inclusion 2024-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-taxonomy-import/wp-taxonomy-import-105-reflected-cross-site-scripting 2022-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/huger-elementor/huger-for-elementor-115-missing-authorization 2025-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comment-emailer/comment-emailer-105-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-gallery-block/video-gallery-block-display-your-videos-as-a-gallery-in-a-professional-way-110-authenticated-contributor-stored-cross-site-scripting 2025-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themify-builder/themify-builder-757-open-redirect-via-tb_redirect_fail 2024-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/find-your-reps/find-your-reps-12-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/blogzee/blogzee-105-authenticated-subscriber-arbitrary-file-upload 2026-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/blogmatic/blogmatic-103-authenticated-subscriber-arbitrary-file-upload 2025-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/consensus-embed/consensus-embed-16-authenticated-contributor-stored-cross-site-scripting-via-src-shortcode-attribute 2026-03-06T18:45:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/debrandify/debrandify-remove-or-replace-wordpress-branding-112-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-10-17T21:32:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gianism/gianism-520-authenticated-admin-stored-cross-site-scripting 2024-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/barcode-scanner-mobile-app-1110-unauthenticated-privilege-escalation-via-insecure-token-authentication 2026-04-15T11:13:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-signature/wordpress-signature-01-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/article-directory/article-directory-13-authenticated-administrator-stored-cross-site-scripting-via-publish_terms_text 2022-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-ja-ja-pagamentos-multicaixa-express/j-j-pagamentos-for-woocommerce-130-reflected-cross-site-scripting 2025-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wedevs-project-manager/wp-project-manager-2615-authenticated-subscriber-sensitive-information-exposure-via-project-task-list-rest-api 2024-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/htaccess/htaccess-181-cross-site-request-forgery 2020-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pz-linkcard/pz-linkcard-252-reflected-cross-site-scripting 2024-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-blocks/essential-blocks-page-builder-gutenberg-blocks-patterns-templates-461-authenticated-contributor-stored-cross-site-scripting 2024-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-custom-cursors/wp-custom-cursors-31-authenticated-admin-sql-injection 2023-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-vendors/product-vendors-2035-reflected-cross-site-scripting 2017-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-sitemap/simple-sitemap-3513-cross-site-request-forgery-via-admin_notices 2024-06-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woopra/woopra-analytics-plugin-1432-remote-code-execution 2013-10-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tablesome/tablesome-table-contact-form-db-wpforms-cf7-gravity-forminator-fluent-054-121-missing-authorization-to-authenticated-subscriber-information-exposure-and-privilege-escalation 2026-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/electric-studio-download-counter/electric-studio-download-counter-24-authenticated-administrator-stored-cross-site-scripting-via-settings-parameters 2026-01-13T17:29:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpack-addon-for-beaver-builder/powerpack-lite-for-beaver-builder-130-authenticatedcontributor-stored-cross-site-scripting-via-element-link 2024-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-form-under-post/mandrill-wp-105-cross-site-request-forgery 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-agreements/smart-agreements-103-unauthenticated-local-file-inclusion 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extra-user-details/extra-user-details-05-authenticated-administrator-stored-cross-site-scripting 2023-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eshop-magic/eshop-magic-02-arbitrary-file-read 2012-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premmerce-woocommerce-wishlist/premmerce-wishlist-for-woocommerce-1111-unauthenticated-sql-injection 2026-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sendy/sendy-342-missing-authorization 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/crete-core/crete-core-143-unauthenticated-sql-injection 2026-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/loobek/loobek-152-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coreactivity/coreactivity-18-unauthenticated-stored-cross-site-scripting 2024-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/thegem/thegem-591-reflected-cross-site-scripting 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flynax-bridge/flynax-bridge-220-unauthenticated-limited-privilege-escalation 2025-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bold-page-builder/bold-page-builder-535-authenticated-contributor-stored-cross-site-scripting-via-data-text-parameter 2025-05-17T16:21:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rss-for-yandex-turbo/rss-for-yandex-turbo-130-admin-stored-cross-site-scripting 2021-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slick-sitemap/slick-sitemap-200-authenticated-contributor-stored-cross-site-scripting 2024-11-20T13:35:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/capturly-optimize-your-website/capturly-201-unauthenticated-local-file-inclusion 2025-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blog-posts-and-category-for-elementor/blog-posts-and-category-filter-for-elementor-103-authenticated-contributor-stored-cross-site-scripting-via-post-and-category-filter-widget 2024-07-08T15:42:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coschedule-by-todaymade/coschedule-340-missing-authorization 2025-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-ajax-chat/simple-ajax-chat-add-a-fast-secure-chat-box-20240318-authenticated-admin-stored-cross-site-scripting 2024-05-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-login-with-eve-online-google-facebook/oauth-single-sign-on-sso-oauth-client-6241-cross-site-request-forgery-via-discard-in-mooauth_client_applist_page 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-blocks/ultimate-blocks-327-authenticated-contributor-stored-cross-site-scripting-via-content-parameter 2025-03-25T21:03:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-popular-elementor-templates-widgets-660-missing-authorization 2026-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/famous/famous-all-versions-arbitrary-file-upload 2012-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-post-notes/simple-post-notes-177-authenticated-administrator-stored-cross-site-scripting 2024-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/misiek-photo-album/misiek-photo-album-143-cross-site-request-forgery-to-stored-cross-site-scripting 2024-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-alert-boxes/simple-alert-boxes-140-authenticated-contributor-stored-cross-site-scripting-via-alert-shortcode 2024-07-08T20:02:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ars-affiliate-page/ars-affiliate-page-plugin-202-reflected-cross-site-scripting 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jalbum-bridge/jalbum-bridge-2017-authenticated-contributor-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pro-addons-for-elementor/pro-addons-for-elementor-150-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/commonsbooking/commonsbooking-268-unauthenticated-sql-injection 2022-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-asambleas/wp-asambleas-2850-unauthenticated-arbitrary-shortcode-execution 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visual-form-builder/visual-form-builder-307-cross-site-request-forgery-to-data-modification 2022-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/live-support-tickets/contact-forms-live-support-crm-video-messages-1103-unauthenticated-information-disclosure 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/digital-license-manager/digital-license-manager-173-reflected-cross-site-scripting-via-remove_query_arg-function 2025-03-24T20:55:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-brands/woocommerce-brands-1649-cross-site-request-forgery 2023-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/css-javascript-toolbox/css-javascript-toolbox-1205-authenticated-admin-stored-cross-site-scripting 2025-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revechat/reve-chat-622-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/styler-for-ninja-forms-lite/styler-for-ninja-forms-334-authenticated-subscriber-arbitrary-option-deletion-via-deactivate_license 2024-11-12T13:26:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gf-hubspot/gravity-forms-hubspot-126-unauthenticated-php-object-injection 2025-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/images-to-webp/images-to-webp-19-cross-site-request-forgery 2021-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sticky-social/wp-sticky-social-101-cross-site-request-forgery-to-stored-cross-site-scripting 2023-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addthis/addthis-502-authenticated-stored-cross-site-scripting 2015-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/font-awesome-integration/font-awesome-integration-50-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flippingbook/flippingbook-201-authenticated-contributor-stored-cross-site-scripting 2025-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/terms-descriptions/terms-descriptions-348-authenticated-admin-stored-cross-site-scripting 2025-07-17T16:23:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-wallet/wc-wallet-220-missing-authorization-to-authenticated-subscriber-arbitrary-content-deletion 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter/newsletter-745-authenticated-admin-stored-cross-site-scripting 2022-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-shipos-delivery/deliver-via-shipos-for-woocommerce-217-reflected-cross-site-scripting 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-downloadmanager/wp-downloadmanager-plugin-1686-reflected-cross-site-scripting 2021-12-28T08:23:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sphere-manager/sphere-manager-102-authenticated-contributor-cross-site-scripting-via-width-shortcode-attribute 2026-02-13T18:26:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smtp2go/smtp2go-1121-missing-authorization 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-gdpr-compliance/gdpr-ccpa-compliance-support-23-php-object-injection 2020-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sf-booking/service-finder-bookings-60-authenticated-subscriber-privilege-escalation-via-change_candidate_password 2025-10-31T16:21:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awcode-toolkit/awcode-toolkit-1018-cross-site-request-forgery-to-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/otw-portfolio-manager/portfolio-manager-pro-38-unauthenticated-php-object-injection 2025-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recipe-maker/recipe-maker-1024-missing-authorization 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-travel-engine/wp-travel-engine-tour-booking-plugin-tour-operator-software-6712-unauthenticated-php-object-injection 2026-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mancx-askme-widget/mancx-askme-widget-03-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ocean-extra/ocean-extra-226-authenticated-contributor-stored-cross-site-scripting 2024-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/6.8/wordpress-682-authenticated-contributor-sensitive-information-exposure 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wplegalpages/wplegalpages-354-missing-authorization 2026-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/betterdocs/betterdocs-358-authenticated-contributor-local-file-inclusion 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amty-thumb-recent-post/amtythumb-posts-820-cross-site-scripting 2017-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rtwwcfp-wordpress-contact-form-7-pdf/contact-form-7-pdf-google-sheet-database-300-authenticated-subscriber-arbitrary-file-upload 2025-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cowidgets-elementor-addons/cowidgets-elementor-addons-120-authenticated-contributor-stored-cross-site-scripting 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcodes-for-amp-web-stories-and-elementor-widget/web-stories-widgets-for-elementor-11-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/backup-backup/backup-migration-200-missing-authorization-to-unauthenticated-backup-upload-to-offline-storage 2026-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/guzzle-657-and-70-744-information-exposure 2022-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/survey-maker/survey-maker-best-wordpress-survey-plugin-313-unauthenticated-stored-cross-site-scripting 2023-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shopmagic-for-woocommerce/shopmagic-472-missing-authorization 2026-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youtube-simplegallery/youtube-simplegallery-206-authenticated-contributor-stored-cross-site-scripting 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-sidebars-by-proteusthemes/custom-sidebars-by-proteusthemes-103-cross-site-request-forgery 2025-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-shadow/image-shadow-110-authenticated-subscriber-arbitrary-file-deletion 2025-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clipta-video-informer/clipta-video-informer-10-reflected-cross-site-scripting 2014-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforms-lite/contact-form-by-wpforms-1753-authenticated-administrator-arbitrary-file-access-via-path-traversal 2022-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpb-advanced-faq/wpb-advanced-faq-106-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chart-builder/chartify-276-reflected-cross-site-scripting 2024-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/donation-button/donation-button-400-missing-authorization 2022-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eu-vat-for-woocommerce/multiple-plugins-by-wpcodefactory-various-versions-authenticated-contributor-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-factory-lite/gallery-factory-lite-200-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/piotnet-addons-for-elementor/piotnet-addons-for-elementor-2425-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-advanced-search/wp-advanced-search-338-cross-site-request-forgery-leading-to-plugin-settings-updates 2023-03-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/netmix/netmix-1010-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/food-drop/food-drop-13-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-dummy-content-generator/wp-dummy-content-generator-321-unauthenticated-code-injection 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gpxpress/gpxpress-13-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-11T14:39:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-featured-image-from-title/auto-featured-image-from-title-23-reflected-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revisionary/publishpress-revisions-duplicate-posts-submit-approve-and-schedule-content-changes-3722-cross-site-request-forgery 2026-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/grand-media/gmedia-photo-gallery-1230-authenticated-contributor-local-file-inclusion 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-private-files/frontend-file-manager-sharing-user-private-files-111-missing-authorization 2022-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-auto-spinner/wordpress-auto-spinner-3250-missing-authorization 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-discounts-plus/discounts-manager-for-products-344-reflected-cross-site-scripting 2021-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/php-everywhere/php-everywhere-202-cross-site-request-forgery 2022-01-13T10:26:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ride-booking/wp-ride-booking-24-cross-site-request-forgery 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acf-frontend-form-element/frontend-admin-by-dynamiapps-3194-improper-missing-encryption-exception-handling-to-form-manipulation 2024-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/psw-login-and-registration/psw-front-end-login-registration-112-insufficiently-random-values-to-unauthenticated-account-takeoverprivilege-escalation-via-customer_registration-function 2025-05-30T18:09:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kiotvietsync/kiotviet-sync-185-use-of-hard-coded-password-to-authorization-bypass 2025-11-04T18:55:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-code-snippets-extension/mainwp-code-snippets-extension-402-authenticated-subscriber-php-code-injection 2023-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/magical-addons-for-elementor/magical-addons-for-elementor-141-authenticated-contributor-stored-cross-site-scripting 2026-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/absolute-addons/absolute-addons-for-elementor-1014-authenticated-contributor-local-file-inclusion 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-2252-cross-site-request-forgery-via-give_ajax_delete_payment_note 2023-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/materialis/materialis-1124-missing-authorization-to-limited-arbitrary-options-update 2024-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-woo-builder/jetwoobuilder-2118-authenticated-contributor-local-file-inclusion 2025-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2032-cross-site-request-forgery 2018-11-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-add-ons/responsive-plus-elementor-templates-starter-sites-343-unauthenticated-arbitrary-code-execution 2026-03-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder/profile-builder-user-profile-user-registration-forms-224-reflected-cross-site-scripting 2015-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-database-reset/database-reset-322-cross-site-request-forgery-to-wp-reset-plugin-installation 2024-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revslider/slider-revolution-700-7010-authenticated-subscriber-arbitrary-file-upload-via-_get_media_url 2026-05-06T16:15:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdm-premium-packages/premium-packages-sell-digital-products-securely-593-reflected-cross-site-scripting-via-add_query_arg 2024-11-21T17:16:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themerain-core/themerain-core-119-missing-authorization 2025-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chamber-dashboard-business-directory/chamber-dashboard-business-directory-331-cross-site-scripting 2020-08-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpshapere-lite/wpshapere-wordpress-admin-theme-141-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mailing-group/mailing-group-listserv-305-cross-site-request-forgery 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-the-contact-form-builder-that-grows-with-you-3120-cross-site-request-forgery-to-plugin-settings-update 2025-09-26T14:16:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-avatar/paid-membership-plugin-ecommerce-user-registration-form-login-form-user-profile-restrict-content-profilepress-41519-authenticated-admin-stored-cross-site-scripting 2025-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wishsuite/wishsuite-133-cross-site-request-forgery-via-plugin_activation 2023-03-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/traffic-manager/traffic-manager-145-unauthenticated-stored-cross-site-scripting 2024-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/noo-jobmonster/noo-jobmonster-4529-reflected-cross-site-scripting 2019-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-download/media-library-file-download-14-cross-site-request-forgery 2025-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seraphinite-accelerator/seraphinite-accelerator-22215-22113-pro-authenticated-subscriber-information-exposure 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/monsters-editor-10-for-wp-super-edit/monsters-editor-for-wp-super-edit-11-arbitrary-file-upload 2012-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exact-links/url-shortener-307-unauthenticated-server-side-request-forgery 2025-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/click-pledge-connect/click-pledge-connect-plugin-224080000-wp661-unauthenticated-sql-injection 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jungbillig-portfolio-gallery/filterable-portfolio-164-authenticated-admin-stored-cross-site-scripting 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/legal-plus/legal-10-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flex-store-user/flex-store-users-110-unauthenticated-privilege-escalation 2025-12-19T18:05:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nexa-blocks/nexa-blocks-110-authenticated-contributor-server-side-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ravpage/ravpage-216-reflected-cross-site-scripting 2022-04-28T11:09:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/void-visual-whmcs-element/wpbakery-visual-composer-whmcs-elements-1041-authenticated-contributor-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integrate-google-drive/integrate-google-drive-138-missing-authorization-to-unauthenticated-settings-modification-and-export 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/medical-prescription-attachment-plugin-for-woocommerce/medical-prescription-attachment-plugin-for-woocommerce-123-unauthenticated-arbitrary-file-upload 2025-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-product-catalogue/ultimate-product-catalog-4222-arbitrary-file-upload 2015-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/encrypted-blog/encrypted-blog-0062-reflected-cross-site-scripting 2013-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slider-responsive-slideshow/slider-responsive-slideshow-image-slider-gallery-slideshow-140-missing-authorization 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gzseo/gzseo-2014-missing-authorization 2026-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sandbox/sandbox-161-arbitrary-file-upload 2013-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ws-form/ws-form-lite-19170-authenticatedadministrator-sql-injection 2023-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-smtp/post-smtp-mailer-email-log-delivery-failure-notifications-and-best-mail-smtp-for-wordpress-286-authenticated-administrator-sql-injection 2023-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smartpay/wp-smartpay-2713-authenticated-subscriber-account-takeover 2025-06-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluent-security/fluentauth-auth-security-plugin-203-authenticated-contributor-stored-cross-site-scripting-via-fluent_auth_reset_password-shortcode 2025-12-15T02:19:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cookie-params/cookie-params-02-reflected-cross-site-scripting-and-cross-site-request-forgery 2022-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/selling-commander-connector/selling-commander-for-woocommerce-1246-unauthenticated-privilege-escalation 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wprentals/wp-rentals-3161-authenticated-contributor-stored-cross-site-scripting 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-grid/post-grid-2112-contributor-sql-injection 2021-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/activecampaign-subscription-forms/activecampaign-8114-authenticated-administrator-server-side-request-forgery 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ditty-news-ticker/ditty-responsive-news-tickers-sliders-and-lists-3131-authenticated-author-stored-cross-site-scripting 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ppo-call-to-actions/ppo-call-to-actions-013-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpguppy-lite/one-to-one-user-chat-by-wpguppy-110-authorization-bypass 2025-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/employee-directory/employee-directory-staff-listing-amp-team-directory-plugin-for-wordpress-453-unauthenticated-php-object-injection 2025-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usc-e-shop/welcart-e-commerce-293-authenticatededitor-sql-injection 2023-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bbp-core/bbp-core-expand-bbpress-powered-forums-with-useful-features-125-reflected-cross-site-scripting-via-add_query_arg-parameter 2024-11-01T19:19:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-436-unauthenticated-sensitive-information-exposure-via-c_status-and-return_type-parameters 2026-06-05T14:23:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cforms2/cformsii-115-cross-site-scripting 2010-11-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-engine/ai-engine-284-authenticated-subscriber-stored-cross-site-scripting-via-mwai_chatbot-shortcode-id-parameter 2025-07-07T12:13:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/echosign/echo-sign-12-reflected-cross-site-scripting 2016-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fast-image-adder/fast-image-adder-12-arbitrary-file-upload 2017-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-vibes/form-vibes-1410-authenticated-subscriber-sql-injection-via-fv_export_data 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-pack-addon/the-pack-elementor-addons-211-authenticated-contributor-local-file-inclusion 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/animate-it/animate-it-240-cross-site-scripting 2022-03-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nex-forms-express-wp-form-builder/nex-forms-ultimate-form-builder-843-authenticated-stored-cross-site-scripting-via-form-name 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cm-ad-changer/cm-ad-changer-207-cross-site-request-forgery-to-campaign-deletion-via-campaign-management 2026-05-26T16:01:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/attesa-extra/attesa-extra-142-authenticated-contributor-post-disclosure 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nex-forms-express-wp-form-builder/nex-forms-ultimate-form-builder-contact-forms-and-much-more-891-authenticated-custom-stored-cross-site-scripting 2025-05-07T21:30:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-coupon-usage/coupon-affiliates-affiliate-plugin-for-woocommerce-753-unauthenticated-stored-cross-site-scripting 2026-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kute-boutique/boutique-233-authenticated-contributor-local-file-inclusion 2026-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/element-ready-lite/elementsready-addons-for-elementor-647-authenticated-contributor-stored-cross-site-scripting 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sky-elementor-addons/sky-addons-for-elementor-255-authenticated-contributor-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ni-crm-lead/ni-crm-lead-130-reflected-cross-site-scripting 2025-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatewoo/automatewoo-575-cross-site-request-forgery 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/teachpress/teachpress-902-reflected-cross-site-scripting-via-meta_field_id-and-cite_id 2023-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duitku-social-payment-gateway/duitku-payment-gateway-2116-missing-authorization-via-check_duitku_response 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/superio/superio-job-board-1232-authenticated-subscriber-stored-cross-site-scripting 2022-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/andyblue/andyblue-theme-15-cross-site-scripting 2007-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/customify/customify-0411-cross-site-request-forgery 2025-10-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/apply-online/applyonline-application-form-builder-and-manager-252-missing-authorization 2023-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vimeo-video-autoplay-automute/vimeo-video-autoplay-automute-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-pdf-restaurant-menu-upload/easy-restaurant-menu-manager-202-cross-site-request-forgery-to-menu-upload 2025-08-12T15:10:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/scientia/scientia-124-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/asia-garden/asia-garden-131-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/greyd_suite/greydsuite-126-unauthenticated-arbitrary-file-upload 2022-07-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slidedeck-lite-for-wordpress/slidedeck-1-lite-content-slider-148-reflected-cross-site-scripting 2025-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/homey/homey-243-cross-site-request-forgery-to-user-verification 2025-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-music-player/all-in-one-music-player-131-authenticated-contributor-path-traversal-via-theme-parameter 2025-09-29T15:29:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pastebin-embed/pastebin-15-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/felan-framework/felan-framework-113-missing-authorization 2026-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-addons/master-addons-for-elementor-20541-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-gcalendar/wp-google-calendar-manager-21-authenticated-subscriber-sql-injection 2025-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mage-eventpress/wpevently-442-authenticated-contributor-stored-cross-site-scripting 2025-06-06T21:50:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/riaxe-product-customizer/riaxe-product-customizer-212-unauthenticated-sql-injection-via-options-parameter-keys-in-product_data 2026-04-15T16:45:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-warfare/social-warfare-431-cross-site-request-forgery 2023-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddyboss-platform/buddyboss-platform-2760-insecure-direct-object-reference-to-private-post-comment-exposure 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sepa-girocode/sepa-girocode-051-authenticated-contributor-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adsmiddle/adsmiddle-10-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-digital-signature/digital-signature-add-on-for-woocommerce-20-unauthenticated-information-exposure 2026-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dejavu/dejavu-24-arbitrary-file-deletion 2013-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/siteseo/siteseo-seo-simplified-132-improper-authorization-to-authenticated-settings-reset 2025-11-18T17:31:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-473-arbitrary-file-deletion 2017-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/new-dev-livesmart-video-chat/livesmart-video-chat-12-authenticated-contributor-stored-cross-site-scripting 2026-05-27T17:15:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/creatorlms/creator-lms-online-courses-and-elearning-plugin-1118-authenticated-contributor-privilege-escalation 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bmi-adultkid-calculator/bmi-adult-kid-calculator-122-authenticated-administrator-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awsom-news-announcement/awsom-news-announcement-160-authenticated-administrator-stored-cross-site-scripting 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/cookiteer/cookiteer-148-authenticated-subscriber-local-file-inclusion 2026-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feeds-for-youtube/feeds-for-youtube-youtube-video-channel-and-gallery-plugin-264-missing-authorization 2026-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/json-content-importer/json-content-importer-1315-authenticated-admin-cross-site-scripting 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dsgvo-youtube/dsgvo-youtube-151-authenticated-contributor-stored-cross-site-scripting 2025-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visitors-details/visitor-details-101-unauthenticated-stored-cross-site-scripting 2025-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trafficanalyzer/traffic-analyzer-342-cross-site-scripting 2013-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder-pro/profile-builder-pro-3100-authenticated-subscriber-time-based-one-time-password-sensitive-information-exposure 2024-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fix-rss-feed/fix-rss-feeds-31-cross-site-request-forgery 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uncanny-learndash-groups/uncanny-groups-for-learndash-6101-missing-authorization-to-authenticated-group-leader-user-group-add 2024-09-24T14:24:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sign-up-sheets/sign-up-sheets-22111-cross-site-request-forgery 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/abandoned-contact-form-7/abandoned-contact-form-7-22-missing-authorization-to-unauthenticated-arbitrary-post-deletion-via-recover_id-parameter 2026-06-15T16:26:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforo/wpforo-forum-310-unauthenticated-php-object-injection 2026-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mycred/mycred-25-cross-site-request-forgery 2023-06-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-styler/design-for-contact-form-7-style-wordpress-plugin-cf7-wow-styler-164-missing-authorization-via-several-ajax-action 2024-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-calendar-contact-form/booking-calendar-contact-form-1263-authenticated-subscriber-insecure-direct-object-reference-to-calendar-takeover 2026-04-23T16:30:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/termin-kalender/termin-kalender-09947-missing-authorization-to-authenticated-subscriber 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulk-editor/wolf-106-cross-site-request-forgery-via-wpbe_update_page_field 2023-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-playground/quick-playground-133-unauthenticated-path-traversal-to-arbitrary-file-read-via-stylesheet-parameter 2026-05-14T19:01:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wa-sticky-button/wp-sticky-button-14-missing-authorization-to-arbitrary-settings-update 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supportezzy/supportezzy-ticket-system-plugin-125-cross-site-scripting 2014-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/if-so/if-so-dynamic-content-personalization-1931-authenticated-contributor-stored-cross-site-scripting 2025-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp_rokintroscroller/rokintroscroller-18-abuse-of-functionality 2013-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-calendar/booking-calendar-appointment-booking-system-323-missing-authorization 2024-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder/popup-builder-363-authenticated-settings-modification-configuration-disclosure-and-user-data-export 2020-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videographywp/featured-video-for-wordpress-videographywp-1018-authenticated-contributor-stored-cross-site-scripting 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-security-and-firewall/all-in-one-security-aios-514-authenticated-admin-stored-cross-site-scripting 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/netgsm/netgsm-28-reflected-cross-site-scripting 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formassembly-web-forms/wp-formassembly-207-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brands-for-woocommerce/brands-for-woocommerce-3863-authenticated-contributor-sql-injection 2025-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/linkedin-lite/linkedin-lite-10-unauthenticated-local-file-inclusion 2025-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-pricing-tables/product-pricing-table-by-woobewoo-110-cross-site-request-forgery-to-stored-xss-and-pricing-table-deletion 2026-04-14T23:28:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nextend-facebook-connect/nextend-facebook-connect-3119-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-content-scrollbar/custom-content-scrollbar-13-authenticated-contributor-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-basics/wp-basics-20-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/posts-data-table/posts-table-with-search-sort-1410-missing-authorization 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kargo-entegrator/kargo-entegratr-1114-authenticated-shop-manager-sql-injection 2025-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slideoptinprox/slideoptinprox-unspecified-version-cross-site-scripting 2015-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sensei-lms/sensei-lms-online-courses-quizzes-learning-4192-authenticated-teacher-user-email-disclosure 2024-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iframe-shortcode/iframe-shortcode-20-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-filterable-portfolio/awesome-filterable-portfolio-19-blind-sql-injection 2015-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tom-m8te/tom-m8te-153-directory-traversal 2014-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jobcareer/jobcareer-job-board-responsive-wordpress-theme-24-user-enumeration 2018-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/captcha/captcha-381-captcha-bypass 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/zota/zota-1314-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lisfinity-core/lisfinity-core-lisfinity-core-plugin-used-for-pebas-lisfinity-wordpress-theme-140-authenticated-subscriber-privilege-escalation 2025-10-08T15:16:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sales-page-addon/sales-page-addon-elementor-beaver-builder-145-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mail-log/wp-mail-log-112-authenticated-contributor-arbitrary-file-read 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gn-xml-sitemap/google-xml-news-sitemap-plugin-002-cross-site-request-forgery-to-stored-cross-site-scripting 2025-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluent-smtp/fluentsmtp-wp-smtp-plugin-with-amazon-ses-sendgrid-mailgun-postmark-google-and-any-smtp-provider-2282-unauthenticated-php-object-injection 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-blogger-to-wordpress-301-redirector/seo-blogger-to-wordpress-migration-using-301-redirection-048-reflected-cross-site-scripting 2025-01-22T22:54:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-and-post-restriction/page-restriction-wordpress-wp-protect-wp-pagespost-134-protection-mechanism-bypass 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-better-messages/better-messages-199148-cross-site-request-forgery 2022-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jvm-rich-text-icons/jvm-rich-text-icons-126-directory-traversal-to-authenticatedsubscriber-arbitrary-file-deletion 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restaurant-reservations/five-star-restaurant-reservations-247-subscriber-stored-cross-site-scripting 2021-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rafflepress/giveaways-and-contests-by-rafflepress-1112-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/careerfy/careerfy-390-cross-site-scripting 2020-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-exporter/woocommerce-store-exporter-231-csv-injection 2020-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/madara/madara-responsive-and-modern-wordpress-theme-for-manga-sites-222-unauthenticated-local-file-inclusion 2025-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot/wpbot-ai-chatbot-for-live-support-lead-generation-ai-services-797-missing-authorization 2026-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sully/sully-430-cross-site-request-forgery-to-plugin-reset 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ie-css3-support/ie-css3-support-201-reflected-cross-site-scripting 2025-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cryptocurrency-widgets-pack/cryptocurrency-widgets-pack-20-unauthenticated-sql-injection 2022-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-dynamic-text-extension/contact-form-7-dynamic-text-extension-410-insecure-direct-object-reference 2024-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-lite/easy-contact-form-lite-1128-authenticated-contributor-stored-cross-site-scripting 2025-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-downloadmanager/wp-downloadmanager-169-authenticated-administrator-path-traversal-to-arbitrary-file-deletion-via-file-parameter 2026-02-17T21:55:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-ecommerce-tracking-for-google-and-facebook/woocommerce-enhanced-ecommerce-analytics-integration-with-conversion-tracking-371-cross-site-request-forgery 2023-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/neoforum/neoforum-10-reflected-cross-site-scripting 2026-01-10T14:48:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pixel-gallery/pixel-gallery-addons-for-elementor-easy-grid-creative-gallery-drag-and-drop-grid-custom-grid-layout-portfolio-gallery-167-authenticated-contributor-stored-cross-site-scripting 2025-07-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/global-translator/global-translator-202-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-engine/ai-engine-chatgpt-chatbot-1998-unauthenticated-arbitrary-file-upload-via-rest_upload 2024-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sexbundle/sexbundle-14-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-tabs/jettabs-223-authenticated-contributor-arbitrary-local-file-inclusion 2024-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/joan/jock-on-air-now-561-reflected-cross-site-scripting 2021-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/best-restaurant-menu-by-pricelisto/best-restaurant-menu-by-pricelisto-141-authenticated-contributor-sql-injection 2024-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/grid-view-gallery/grid-view-gallery-10-authenticated-editor-php-object-injection 2024-11-20T13:41:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vdz-call-back/vdz-callback-plugin-1146-cross-site-scripting 2021-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forminator/forminator-1233-race-condition-to-multiple-poll-voting 2023-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sell-with-razorpay/sale-with-razorpay-10-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-online-users-stats/wp-online-users-stats-100-cross-site-request-forgery-to-stored-cross-site-scripting-via-hk_dataset_results-function 2025-06-05T17:51:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-elementor-page-builder/the-plus-addons-for-elementor-542-authenticated-contributor-stored-cross-site-scripting 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-membership-412-authentication-bypass 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brizy/brizy-page-builder-2444-authenticated-contributor-arbitrary-file-upload 2024-07-17T19:38:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fwduvp/ultimate-video-player-101-missing-authorization 2025-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-1387-cross-site-request-forgery-via-remove_from_compare 2024-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-email-capture/wordpress-email-marketing-plugin-wp-email-capture-310-missing-authorization-to-email-capture-list-download 2023-03-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ameliabooking/amelia-213-insecure-direct-object-reference-to-authenticated-employee-privilege-escalation-via-externalid-parameter 2026-04-06T18:13:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wemanage-app-worker/management-app-for-woocommerce-order-notifications-order-management-lead-management-uptime-monitoring-122-authenticated-subscriber-arbitrary-file-upload 2024-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedpress/embedpress-embed-pdf-google-docs-vimeo-wistia-embed-youtube-videos-audios-maps-embed-any-documents-in-gutenberg-elementor-3914-authenticated-contributor-stored-cross-site-scripting-via-youtube-block 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-social/wp-social-login-and-register-social-counter-307-authentication-bypass-via-wordpresscom-oauth-provider 2024-10-25T23:52:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-calendar/my-calendar-2516-authenticated-stored-cross-site-scripting 2018-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recaptcha/wp-recaptcha-2982-multiple-cross-site-request-forgery 2011-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/displayproduct/product-catalog-catalog-for-wordpress-104-unauthenticated-sql-injection 2025-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/publish-to-schedule/publish-to-schedule-442-cross-site-request-forgery-leading-to-plugin-option-changes 2023-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supportboard/support-board-334-agent-stored-cross-site-scripting 2021-10-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beam-me-up-scotty/beam-me-up-scotty-back-to-top-button-1023-authenticated-administrator-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-checker/sc-filechecker-06-authenticated-admin-arbitrary-file-deletion 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-manager/events-manager-557-cross-site-scripting 2015-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/designthemes-booking-manager/designthemes-booking-manager-20-missing-authorization 2026-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-3357-incorrect-authorization-to-authenticated-contributor-sensitive-information-exposure-via-elementor-template 2026-03-25T17:26:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mega-addons-for-visual-composer/mega-addons-for-wpbakery-page-builder-427-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contest-gallery/contest-gallery-upload-vote-photos-media-sell-with-paypal-stripe-2817-authenticated-subscriber-sensitive-information-exposure 2026-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wps-team/team-members-344-authenticated-contributor-php-object-injection 2025-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-google-analytics-extension/mainwp-google-analytics-extension-404-missing-authorization-to-plugin-settings-change 2023-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mega_main_menu/mega-main-menu-222-authenticated-administrator-cross-site-scripting 2023-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ketchup-restaurant-reservations/ketchup-restaurant-reservations-100-unauthenticated-stored-cross-site-scripting 2022-09-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedstories/embedstories-074-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amr-ical-events-list/amr-ical-events-lists-66-authenticated-administrator-stored-cross-site-scripting 2023-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-payment-form/simple-payment-donations-420-unauthenticated-stored-cross-site-scripting 2022-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/opensheetmusicdisplay/opensheetmusicdisplay-140-authenticated-contributor-stored-cross-site-scripting-via-classname-parameter 2025-05-29T21:20:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auxin-elements/shortcodes-and-extra-features-for-phlox-theme-2155-authenticated-contributor-stored-cross-site-scripting-via-accordion-widget 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/kadence-blocks-3110-unauthenticated-arbitrary-file-upload 2023-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagination/pagination-by-bestwebsoft-122-authenticated-administrator-stored-cross-site-scripting 2023-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/glossy-blog/glossy-blog-103-authenticated-subscriber-stored-cross-site-scripting 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-subscriptions/woocommerce-subscriptions-512-missing-authorization-to-insecure-direct-object-reference 2023-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rometheme-for-elementor/rtmkit-addons-165-authenticated-contributor-stored-cross-site-scripting-via-accordion-repeater-block-attribute 2025-11-17T19:39:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-analytify/analytify-423-missing-authorization-cross-site-request-forgery 2023-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rss-aggregator/wp-rss-aggregator-news-feeds-autoblogging-youtube-video-feeds-and-more-463-authorization-bypass 2014-12-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yml-for-yandex-market/yml-for-yandex-market-472-reflected-cross-site-scripting 2024-10-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-checkout-field-editor/checkout-field-editor-premium-175-cross-site-request-forgery 2023-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lazy-load-for-videos/lazy-load-for-videos-2182-cross-site-request-forgery 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recaptcha-integration/recaptcha-integration-for-wordpress-127-authenticated-administrator-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supra-csv-parser/supra-csv-403-stored-cross-site-scripting-via-cross-site-request-forgery 2022-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/solace-extra/solace-extra-131-authenticated-subscriber-arbitrary-file-upload 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inspectlet-heatmaps-and-user-session-recording/inspectlet-user-session-recording-and-heatmaps-20-authenticated-administrator-stored-cross-site-scripting 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tapfiliate/tapfiliate-3012-authenticated-administrator-stored-cross-site-scripting 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-552-missing-authorization-to-arbitrary-group-option-modification-and-privilege-escalation 2023-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zippy/zippy-170-authenticated-editor-arbitrary-file-upload 2024-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pretty-google-calendar/pretty-google-calendar-172-authenticated-contributor-stored-cross-site-scripting 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-power-bi/power-bi-embedded-for-wordpress-117-authenticated-contributor-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/attesa-extra/attesa-extra-147-authenticated-contributor-stored-cross-site-scripting 2025-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sitemap/wp-sitemap-10-authenticated-contributor-sql-injection 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/court-reservation/court-reservation-manage-your-court-bookings-online-11011-unauthenticated-sql-injection 2026-05-12T10:05:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-store-kit/ultimate-store-kit-elementor-addons-woocommerce-builder-edd-builder-elementor-store-builder-product-grid-product-table-woocommerce-slider-241-cross-site-request-forgery-to-limited-user-meta-update 2025-04-30T14:30:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/block-slider/block-slider-223-missing-authorization 2026-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-social-bookmarking/wp-social-bookmarking-36-cross-site-request-forgery 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-multisite-content-copier/multisite-content-copierupdater-140-reflected-cross-site-scripting 2022-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-database/database-for-contact-form-7-306-authenticated-contributor-stored-cross-site-scripting 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thegem-importer/thegem-demo-import-for-wpbakery-5105-missing-authorization-to-authenticated-subscriber-arbitrary-content-deletion 2025-10-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widget-logic/widget-logic-5102-cross-site-request-forgery 2019-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-addons/master-addons-for-elementor-20993-authenticated-contributor-stored-cross-site-scripting 2025-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/jobify/jobify-job-board-wordpress-theme-430-cross-site-request-forgery 2024-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/metform-pro/metform-pro-397-unauthenticated-payment-amount-manipulation-via-mf-calculation 2026-04-14T19:59:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-wordpress-page-builder-2742-authenticatedcontributor-stored-cross-site-scripting-via-audio-widget 2024-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b-blocks/b-blocks-205-authenticated-contributor-stored-cross-site-scripting 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/phlox/phlox-2177-authenticated-contributor-stored-cross-site-scripting-via-data-caption-html-attribute 2026-01-05T17:35:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ameliabooking/appointment-and-event-booking-calendar-for-wordpress-amelia-1047-information-disclosure-and-sms-spam 2022-03-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/spock/spock-117-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/json-api-user/json-api-user-393-unauthenticated-privilege-escalation 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-report-post/wp-report-post-212-reflected-cross-site-scripting 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ui-slider-filter-by-price/ui-slider-filter-by-price-11-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sirv/sirv-712-missing-authorization-via-sirv_disconnect 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-csv-importer/easy-drag-and-drop-all-import-wp-ultimate-csv-importer-381-cross-site-scripting 2015-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blocksy-companion/blocksy-companion-2042-authenticated-admin-server-side-request-forgery 2024-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirect-404-error-page-to-homepage-or-custom-page/redirect-404-error-page-to-homepage-or-custom-page-with-logs-178-log-deletion-via-cross-site-request-forgery 2021-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/donorbox-donation-form/donorbox-free-recurring-donation-form-716-cross-site-scripting 2022-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/codepeople-post-map/google-maps-cp-1043-cross-site-request-forgery-via-feedback_action 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/court-reservation/court-reservation-11011-missing-authorization 2026-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wecantrack/affiliate-sales-in-google-analytics-and-other-tools-200-open-redirect 2025-05-20T20:30:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-13987-authenticated-contributor-stored-cross-site-scripting 2024-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/colormag/colormag-316-authenticated-contributor-stored-cross-site-scripting-via-display-name 2024-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/coldfusion/coldfusion-responsive-fullscreen-video-image-audio-theme-12-arbitrary-file-upload 2013-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/header-footer-elementor/ultimate-addons-for-elementor-formerly-elementor-header-footer-builder-246-missing-authorization-to-authenticated-subscriber-limited-settings-update 2025-08-01T20:50:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nd-travel/travel-management-20-authenticated-contributor-stored-cross-site-scripting 2022-06-14T09:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wplms/wplms-19952-authenticated-subscriber-arbitrary-file-deletion 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-functional-flexi-lightbox/multi-functional-flexi-lightbox-12-authenticated-admin-stored-cross-site-scripting-via-message-parameter 2026-03-20T15:13:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-click-to-tweet/better-click-to-tweet-5101-reflected-cross-site-scripting 2022-04-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/categorify/categorify-1075-missing-authorization 2025-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/editor-custom-color-palette/editor-custom-color-palette-348-missing-authorization 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/member-access/member-access-116-unauthenticated-content-restriction-bypass-to-sensitive-information-exposure 2025-01-06T16:05:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yotuwp-easy-youtube-embed/video-gallery-youtube-playlist-channel-gallery-by-yotuwp-1313-authenticated-contributor-arbitrary-file-inclusion-via-shortcode 2024-06-14T20:13:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/crm-integration-freshworks-any-form/integration-for-freshsales-1015-unauthenticated-stored-cross-site-scripting-via-form-submission-data 2026-06-05T12:22:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integrate-google-drive/integrate-google-drive-133-missing-authorization-via-save_settings 2023-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/fitness-park/fitness-park-111-authenticated-contributor-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spirit-framework/spirit-framework-1214-authentication-bypass-to-account-takeover-and-privilege-escalation 2025-10-02T19:26:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-better-messages/bp-better-messages-240-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-jetpack/booster-for-woocommerce-710-authenticated-subscriber-information-disclosure-via-shortcode 2023-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/calendi/calendi-111-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-frontend/user-frontend-ai-powered-frontend-posting-user-directory-profile-membership-user-registration-428-missing-authorization 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gravityforms/gravity-forms-29281-authenticated-subscriber-stored-cross-site-scripting-via-form-title 2026-03-10T21:09:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fat-coming-soon/fat-cooming-soon-11-unauthenticated-local-file-inclusion 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-espresso-decaf/event-espresso-4-decaf-5028decaf-cross-site-request-forgery 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forms-for-campaign-monitor/campaign-monitor-for-wordpress-2812-reflected-cross-site-scripting 2023-11-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/calculated-fields-form/calculated-fields-form-5263-authenticated-admin-stored-cross-site-scripting 2025-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-altcoin-payment-gateway/bitcoin-altcoin-payment-gateway-for-woocommerce-172-unauthenticated-sql-injection 2023-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-social-login/woocommerce-social-login-282-cross-site-request-forgery 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-builder-by-azexo/page-builder-by-azexo-127133-cross-site-request-forgery-to-post-creationmodificationdeletion 2023-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-posts-webcam-recorder/video-posts-webcam-recorder-324-cross-site-scripting 2021-07-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexmls-idx/flexmls-idx-3157-unauthenticated-open-redirect 2025-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/squirrly-seo/seo-plugin-by-squirrly-seo-12110-authenticated-contributor-arbitrary-file-upload 2022-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/steam-group-viewer/steam-group-viewer-21-authenticated-stored-cross-site-scripting 2021-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mobile-friendly-app-builder-by-easytouch/how-to-create-an-app-for-android-iphone-easytouch-30-missing-authorization 2017-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/patron-button-and-widgets-by-codebard/codebards-patron-button-and-widgets-for-patreon-219-cross-site-request-forgery 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zalomeni/zalomen-15-authenticated-admin-stored-cross-site-scripting 2025-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-js-impress/impress-014-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/featured-image-from-url/featured-image-from-url-fifu-527-authenticated-contributor-stored-cross-site-scripting-via-featured-image-custom-fields 2025-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/php-execution-plugin/php-execution-100-cross-site-request-forgery 2023-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-pipes/wp-pipes-143-authenticated-administrator-server-side-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amazing-service-box-visual-composer-addons/amazing-service-box-addons-for-wpbakery-page-builder-200-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2025-03-25T14:11:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/create-with-code/create-with-code-14-authenticated-contributor-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-full-stripe-free/wp-full-stripe-free-7017-cross-site-request-forgery 2023-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-manager/wp-job-manager-240-missing-authorization 2026-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/penci-data-migrator/penci-soledad-data-migrator-130-unauthenticated-local-file-inclusion 2024-05-16T13:59:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nd-restaurant-reservations/restaurant-reservations-18-authenticated-contributor-stored-cross-site-scripting 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot-chatgpt/kognetiks-chatbot-for-wordpress-217-missing-authorization-to-authenticated-subscriber-assistant-addition 2024-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-elementor-page-builder/the-plus-addons-for-elementor-page-builder-lite-562-authenticated-author-stored-cross-site-scripting 2024-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-facebook-likebox/easy-social-feed-651-missing-authorization-via-hide_free_sidebar 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-contact-form-the-drag-and-drop-form-builder-for-wordpress-3030-html-injection 2017-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aeropage-sync-for-airtable/aeropage-sync-for-airtable-320-authenticated-subscriber-arbitrary-file-upload 2025-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.1/wordpress-core-511-cross-site-request-forgery-to-cross-site-scripting-via-comments 2019-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qtranslate-slug/qtranslate-slug-1116-reflected-cross-site-scripting 2015-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpguppy-lite/wpguppy-110-unauthenticated-php-object-injection 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/realestate-7/real-estate-7-wordpress-351-unauthenticated-privilege-escalation-to-administrator 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videowhisper-live-streaming-integration/broadcast-live-video-live-streaming-webrtc-hls-rtsp-rtmp-713-authenticated-admin-remote-code-execution 2026-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gravityforms/gravity-forms-2100-unauthenticated-stored-cross-site-scripting-via-hidden-product-field-in-repeater 2026-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ns-maintenance-mode-for-wp/ns-maintenance-mode-for-wp-131-authenticated-administrator-stored-cross-site-scripting 2025-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/careplus/careplus-health-medical-responsive-wordpress-theme-12-cross-site-scripting 2020-07-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mail-log/wp-mail-log-101-cross-site-request-forgery 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/oneline-lite/oneline-lite-66-missing-authorization 2026-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/participants-database/participants-database-249-authenticatedadministrator-stored-cross-site-scripting-via-plugin-settings 2023-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kindeditor-for-wordpress/kindeditor-for-wordpress-14-reflected-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/datalogics/datalogics-ecommerce-delivery-datalogics-2662-unauthenticated-privilege-escalation 2026-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ays-slider/image-slider-by-ays-responsive-slider-and-carousel-250-sql-injection 2021-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unusedcss/rapidload-power-up-for-autoptimize-171-missing-authorization-in-clear_uucss_logs 2023-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatra-live-chat/chatra-live-chat-chatbot-cart-saver-1011-authenticated-administrator-stored-cross-site-scripting 2025-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-paypal-add-on/easy-paypal-stripe-buy-now-button-183-contact-form-7-paypal-stripe-add-on-21-cross-site-request-forgery-to-settings-update 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-conferencing-with-zoom-api/video-conferencing-with-zoom-3816-e-mail-address-disclosure 2022-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/design-approval-system/design-approval-system-36-cross-site-scripting 2013-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extendons-registration-fields/woocommerce-registration-fields-plugin-custom-signup-fields-323-reflected-cross-site-scripting 2025-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spotify-play-button-for-wordpress/spotify-play-button-for-wordpress-211-authenticated-contributor-stored-cross-site-scripting-via-spotifyplaybutton-shortcode 2024-11-25T19:39:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/prime-listing-manager/prime-listing-manager-11-unauthenticated-privilege-escalation-via-account-takeover 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/another-wordpress-classifieds-plugin/wordpress-classifieds-plugin-ad-directory-listings-by-awp-classifieds-331-cross-site-scripting 2014-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-grid/post-grid-2250-missing-authorization-to-sensitive-information-exposure-via-rest-api 2023-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/labinator-content-types-duplicator/labinator-content-types-duplicator-113-cross-site-request-forgery 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pretty-link/shortlinks-by-pretty-links-362-reflected-cross-site-scripting-via-post_status 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/empowerwp/empowerwp-1021-cross-site-request-forgery-to-notice-dismissal 2024-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/indeed-membership-pro/indeed-membership-pro-73-86-authentication-bypass 2020-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/export-users-data-csv/export-users-data-csv-21-authenticated-subscriber-csv-injection 2022-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/intothedark/intothedark-105-reflected-cross-site-scripting 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-coming-soon/ultimate-coming-soon-maintenance-109-missing-authorization-to-unauthenticated-template-activation 2024-12-05T19:35:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/6.3/wordpress-core-56-631-reflected-cross-site-scripting-via-application-password-requests 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dt-chocolate/chocolate-wp-responsive-photography-theme-all-versions-arbitrary-file-upload 2013-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/search-and-share/search-and-share-093-cross-site-scripting 2013-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-analytics-for-wordpress/monsterinsights-google-analytics-dashboard-for-wordpress-532-stored-cross-site-scripting 2015-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/legal-stone/legal-stone-1211-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-advanced-database/contact-form-advanced-database-108-missing-authorization 2021-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/community-events/community-events-147-reflected-cross-site-scripting 2021-07-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formilla-chat-and-marketing/formilla-chat-and-marketing-automation-10-authenticated-administrator-cross-site-scripting-via-formillatoolsid 2023-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-contact-forms/custom-contact-forms-plugin-5102-reflected-cross-site-scripting 2012-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/rosalinda/rosalinda-123-unauthenticated-local-file-inclusion 2025-08-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-bookings/woocommerce-bookings-203-cross-site-request-forgery 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscribers-text-counter/subscribers-text-counter-17-cross-site-request-forgery-to-settings-update-and-cross-site-scripting 2023-08-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcoder/shortcoder-63-missing-authorization 2023-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-elementor-addons-header-footer-free-template-library-grid-carousel-table-parallax-animation-register-form-twitter-grid-532-authenticated-contributor-stored-cross-site-scripting-via-custom-gallery-widget 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp3-music-player-by-sonaar/mp3-audio-player-for-music-radio-podcast-by-sonaar-58-missing-authorization 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xllentech-english-islamic-calendar/xllentech-english-islamic-calendar-267-sql-injection 2021-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-soononline-page/wpsoononlinepage-19-cross-site-request-forgery 2023-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/music-store/music-store-wordpress-ecommerce-1113-authenticated-admin-sql-injection 2024-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdm-premium-packages/premium-packages-605-authenticated-administrator-sql-injection 2024-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-elementor-addons-header-footer-template-library-dynamic-grid-carousel-remote-arrows-572-authenticated-contributor-arbitrary-file-read 2024-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-helpdesk-support-ticket-system/happy-109-missing-authorization 2025-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/onionbuzz-viral-quiz/viral-quiz-maker-onionbuzz-122-sql-injection 2019-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chat-bubble/chat-bubble-23-authenticated-administrator-stored-cross-site-scripting 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-3110-unauthenticated-php-object-injection 2025-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yaymail/yaymail-432-missing-authorization-to-authenticated-shop-manager-plugin-installation-and-activation 2026-02-17T18:55:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/accio/accio-responsive-onepage-parallax-agency-wordpress-theme-110-sensitive-information-disclosure 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wsanalytics-google-analytics-and-dashboards/wsanalytics-112-reflected-cross-site-scripting 2025-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-manager/file-manager-30-unauthenticated-arbitrary-file-uploaddownload 2018-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-menu/responsive-menu-417-missing-authorization-checks 2022-03-16T11:48:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/amoveo/amoveo-multipurpose-wordpress-theme-20-arbitrary-file-upload 2013-11-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cds-simple-seo/simple-seo-2031-authenticated-contributor-stored-cross-site-scripting 2025-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/reina/reina-21-unauthenticated-php-object-injection 2026-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tinynav/tinynav-14-cross-site-request-forgery 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wysija-newsletters/mailpoet-newsletters-266-arbitrary-file-upload 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/name-directory/name-directory-1254-unauthorized-settings-update 2022-07-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/crowdfunding-for-woocommerce/crowdfunding-for-woocommerce-3114-authenticated-contributor-stored-cross-site-scripting-via-width-parameter 2025-07-17T16:28:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userpro-mediamanager/media-manager-for-userpro-3120-missing-authorization-to-unauthenticated-arbitrary-options-update 2025-01-30T00:49:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pods/pods-custom-content-types-and-fields-338-unauthenticated-stored-cross-site-scripting 2026-06-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-orders-ei/woocommerce-orders-customers-exporter-54-missing-authorization 2025-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/betterdocs/betterdocs-4310-unauthenticated-information-exposure 2026-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flash-show-and-hide-box/flash-show-and-hide-box-16-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-plugin/contact-form-by-bestwebsoft-334-cross-site-scripting 2013-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-publisher-desk-ads-txt/the-publisher-desk-adstxt-150-missing-authorization 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ghostkit/ghost-kit-343-authenticated-contributor-stored-cross-site-scripting 2025-09-17T20:48:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-category-posts/list-category-posts-0896-authenticated-contributor-stored-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fast-custom-social-share-by-codebard/fast-custom-social-share-by-codebard-112-cross-site-request-forgery 2024-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stockholm-core/stockholm-core-246-authenticated-contributor-local-file-inclusion 2025-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-security-and-firewall/all-in-one-wp-security-firewall-4410-open-redirect-and-reflected-cross-site-scripting 2022-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ad-inserter/ad-inserter-2711-authenticated-admin-remote-code-execution 2022-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html2wp/html2wp-100-arbitrary-file-upload 2022-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-places-review-slider/wp-google-review-slider-115-authenticated-administrator-stored-cross-site-scripting 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seraphinite-accelerator/seraphinite-accelerator-22047-unauthenticated-sensitive-information-exposure-via-log-file 2024-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-jetpack/booster-for-woocommerce-740-missing-authorization 2025-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/armember-membership/armember-membership-plugin-content-restriction-member-levels-user-profile-user-signup-4026-authenticated-contributor-php-object-injection 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/wordpress-download-manager-3221-cross-site-scripting 2021-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bold-page-builder/bold-page-builder-530-authenticated-administrator-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-membership-512-insecure-direct-object-reference-to-unauthenticated-limited-user-deletion 2026-02-25T13:29:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-mollie/mollie-for-contact-form-7-500-reflected-cross-site-scripting 2024-12-06T12:00:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ratatouille/ratatouille-126-authenticated-subscriber-server-side-request-forgery 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-child/mainwp-child-2027-multiple-cross-site-scripting 2015-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-twitter-feeds/custom-twitter-feeds-tweets-widget-184-cross-site-request-forgery 2023-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/share-this-image/share-this-image-104-cross-site-scripting 2017-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/skt-blocks/skt-blocks-gutenberg-based-page-builder-17-authenticated-contributor-stored-cross-site-scripting 2025-02-03T20:32:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-support/awesome-support-wordpress-helpdesk-support-plugin-636-missing-authorization-to-unauthenticated-role-demotion 2026-01-15T15:56:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-export-for-woocommerce/import-export-for-woocommerce-162-missing-authorization-to-authenticated-subscriber-settings-update 2025-11-03T16:00:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-lightbox-slider/gallery-lightbox-10039-authenticated-author-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stacks-mobile-app-builder/stacks-mobile-app-builder-523-unauthenticated-sensitive-information-disclosure 2024-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hurrytimer/hurrytimer-2112-authenticated-contributor-stored-cross-site-scripting-via-campaign-name 2025-02-13T21:00:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/grandconference/grand-conference-534-reflected-cross-site-scripting 2026-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xcloner-backup-and-restore/backup-restore-and-migrate-wordpress-sites-with-the-xcloner-plugin-42152-cross-site-request-forgery 2020-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/intelliwidget-elements/intelliwidget-elements-227-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-map-plugin/wp-google-map-plugin-409-cross-site-request-forgery-to-php-object-injection 2019-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-facethumb/wp-facethumb-02-cross-site-scripting 2012-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-custom-admin-interface/wp-custom-admin-interface-732-cross-site-request-forgery-to-transients-deletion 2023-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blockonomics-bitcoin-payments/wordpress-bitcoin-payments-blockonomics-32-reflected-cross-site-scripting 2021-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kali-forms/kali-forms-211-cross-site-request-forgery 2020-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/you-shang/-you-shang-101-authenticated-stored-cross-site-scripting 2021-07-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/1.2/wordpress-core-223-wordpress-mu-125a-sql-injection 2007-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adirectory/adirectory-wordpress-directory-listing-plugin-165-unauthenticated-php-object-injection 2025-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddyforms/buddyforms-289-email-verification-bypass-due-to-insufficient-randomness 2024-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/appointment-hour-booking/appointment-hour-booking-booking-calendar-1560-authenticated-administrator-stored-cross-site-scripting-via-minmax-length-field-configuration 2026-01-27T17:18:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-event-manager/wp-event-manager-3149-authenticated-administrator-stored-cross-site-scripting 2025-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thesis-openhook/openhook-431-cross-site-request-forgery 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sala/sala-116-unauthenticated-local-file-inclusion 2025-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-tweet/simple-tweet-1402-authenticated-author-stored-cross-site-scripting 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/verowa-connect/verowa-connect-301-unauthenticated-sql-injection 2024-12-05T21:14:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kratz/kratz-1012-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quote-tweet/quote-tweet-07-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/apply-online/applyonline-application-form-builder-and-manager-255-authenticated-administrator-stored-cross-site-scripting 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contentmx-content-publisher/contentmx-content-publisher-106-cross-site-request-forgery 2025-10-02T22:17:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-database-applications-by-caspio/custom-database-applications-by-caspio-21-authenticated-contributor-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stop-referrer-spam/stop-referrer-spam-130-cross-site-request-forgery-via-processparameters 2023-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pos/wcpos-point-of-sale-pos-plugin-for-woocommerce-1814-missing-authorization 2026-06-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iframe-widget/iframe-widget-41-authenticated-administrator-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/3d-cover-carousel/3d-cover-carousel-10-reflected-cross-site-scripting 2021-09-08T20:09:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videowhisper-live-streaming-integration/broadcast-live-video-live-streaming-html5-webrtc-hls-rtsp-rtmp-4295-arbitrary-file-readdeletion 2014-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-pricing-tables/pricing-tables-wordpress-plugin-easy-pricing-tables-325-reflected-cross-site-scripting 2024-10-29T16:31:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gnucommerce/gnucommerce-057-beta-cross-site-scripting 2016-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-step-form/multi-step-form-1716-authenticated-administrator-stored-cross-site-scripting 2023-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/colibri-page-builder/colibri-page-builder-10253-cross-site-request-fogery-via-cp_shortcode_refresh 2024-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auction-nudge/auction-nudge-your-ebay-on-your-site-720-authenticated-administrator-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/agreeme-checkboxes-for-woocommerce/agreeme-checkboxes-for-woocommerce-113-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-223-restriction-bypass 2007-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdpa-thailand/designil-pdpa-thailand-201-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/answer-my-question/answer-my-question-13-sql-injection 2016-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simply-schedule-appointments/appointment-booking-calendar-simply-schedule-appointments-booking-plugin-1695-unauthenticated-sensitive-information-exposure 2026-01-05T15:10:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/mystique/mystique-257-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar/the-events-calendar-663-unauthenticated-stored-cross-site-scripting 2024-07-23T19:02:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oracle-cards/oracle-cards-lite-121-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rt-easy-builder-advanced-addons-for-elementor/rt-easy-builder-advanced-addons-for-elementor-23-authenticated-contributor-stored-cross-site-scripting 2024-08-23T14:07:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adminify/wp-adminify-317-authenticated-admin-stored-cross-site-scripting 2023-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b1-accounting/b1lt-for-woocommerce-2256-authenticated-subscriber-sql-injection 2025-07-17T16:36:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-396-cross-site-request-forgery-to-order-title-update 2023-06-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-elearning-and-online-course-solution-176-sql-injection 2021-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-212-cross-site-scripting 2007-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zephyr-project-manager/zephyr-project-manager-3397-authenticated-subscriber-privilege-escalation-via-user-meta-update 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-affiliate-platform/wp-affiliate-platform-639-cross-site-request-forgery 2022-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-hubspot/integration-for-contact-form-7-hubspot-128-open-redirect-via-state-parameter 2023-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-csv-importer/easy-csv-importer-beta-700-unauthenticated-arbitrary-file-upload 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/knews/knews-multilingual-newsletters-110-reflected-cross-site-scripting 2018-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-link-to-facebook/add-link-to-facebook-1215-authenticated-stored-cross-site-scripting 2015-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/permalink-manager/permalink-manager-lite-253-missing-authorization 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fooevents/fooevents-for-woocommerce-1204-authenticated-subscriber-sql-injection 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-super-cache/wp-super-cache-132-remote-code-execution 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/squirrly-seo/seo-plugin-by-squirrly-seo-12315-authenticatedadministrator-stored-cross-site-scripting-via-plugin-settings 2024-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/include-mastodon-feed/include-mastodon-feed-199-authenticated-contributor-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-gdpr-compliance/gdpr-ccpa-compliance-support-271-missing-authorization 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpbookit/wpbookit-102-insecure-direct-object-reference-to-unauthenticated-privilege-escalation-via-email-update 2025-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vidshop-for-woocommerce/vidshop-shoppable-videos-for-woocommerce-114-unauthenticated-time-based-sql-injection-via-fields 2026-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sassy-social-share/sassy-social-share-3362-authenticated-administrator-stored-cross-site-scripting 2024-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-easy-calendar/event-easy-calendar-100-multiple-cross-site-request-forgery 2013-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leaguemanager/leaguemanager-405-sql-injection 2015-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blogchat-chat-system/blogchat-chat-system-1363-cross-site-request-forgery-to-stored-cross-site-scripting-via-settings-update 2026-05-19T12:06:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-categories-widget/wp-categories-widget-22-reflected-cross-site-scripting 2023-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/file-uploader-for-woocommerce/file-uploader-for-woocommerce-104-unauthenticated-path-traversal 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arconix-shortcodes/arconix-shortcodes-2115-reflected-cross-site-scripting 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/music-player-for-woocommerce/music-player-for-woocommerce-10172-authenticated-admin-stored-cross-site-scripting 2022-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/meris/meris-112-reflected-cross-site-scripting 2024-01-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sucuri-scanner/sucuri-security-1833-cross-site-request-forgery 2022-09-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpematico/wpematico-rss-feed-fetcher-2611-admin-stored-cross-site-scripting 2021-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-manage-fraud-orders/woo-manage-fraud-orders-261-unauthenticated-information-exposure-via-log-files 2024-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-avatar/profilepress-41514-authenticated-admin-stored-cross-site-scripting-via-product-files 2024-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/universal-analytics-injector/universal-analytics-injector-103-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/truelysell-core/truelysell-core-186-unauthenticated-arbitrary-user-password-change 2025-10-15T17:59:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acymailing/acymailing-an-ultimate-newsletter-plugin-and-marketing-automation-solution-for-wordpress-9110-reflected-cross-site-scripting 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/optin/wowoptin-1437-missing-authorization 2026-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/emails-verification-for-woocommerce/customer-email-verification-for-woocommerce-294-authenticated-contributor-sensitive-information-exposure 2025-02-14T20:00:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/logo-showcase-ultimate/logo-showcase-ultimate-logo-carousel-logo-slider-logo-grid-138-authenticatedcontributor-php-object-injection 2024-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/autogen-headers-menu/autogen-headers-menu-101-authenticated-contributor-stored-cross-site-scripting-via-head_class-shortcode-parameter 2026-01-08T21:56:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-elementor-addons/happy-addons-for-elementor-3120-authenticated-contributor-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp_rokbox/wordpress-rokbox-213-sensitive-data-disclosure 2012-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/grid-plus/grid-plus-133-authenticated-subscriber-local-file-inclusion-via-shortcode 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-post-grid/the-post-grid-743-authenticated-editor-stored-cross-site-scripting 2024-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/metform/metform-elementor-contact-form-builder-340-missing-authorization-via-submit 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dt-chocolate/chocolate-wp-responsive-photography-theme-all-versions-denial-of-service-and-abuse-of-functionality 2013-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-poll/responsive-poll-176-cross-site-request-forgery-to-cross-site-scripting 2017-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cloud/wp-cloud-143-unauthenticated-arbitrary-file-read 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modify-comment-fields/comment-fields-103-reflected-cross-site-scripting 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/play-ht/playht-364-missing-authorization 2024-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/church-admin/church-admin-446-authenticated-subscriber-arbitrary-file-upload 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userfeedback-lite/user-feedback-create-interactive-feedback-form-user-surveys-and-polls-in-seconds-1013-unauthenticated-stored-cross-site-scripting 2024-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-addons-for-elementor/mega-addons-for-elementor-19-authenticated-contributor-stored-cross-site-scripting 2024-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-data-filter-and-taxonomy-filter/mdtf-1337-unauthenticated-sql-injection 2025-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/360-sphere-images/360-photo-spheres-13-authenticated-contributor-stored-cross-site-scripting 2025-08-01T18:50:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/semalt/semalt-blocker-113-authenticated-administrator-stored-cross-site-scripting 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rrssb/rrssb-101-authenticated-contributor-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-sticky-sidebar/wordpress-cta-158-missing-authorization-via-multiple-ajax-actions 2023-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formlift/formlift-for-infusionsoft-web-forms-7521-missing-authorization-to-unauthenticated-infusionsoft-connection-hijack-via-oauth-connection-flow 2026-03-25T14:51:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter-popup/newsletter-popup-12-cross-site-request-forgery-to-subscriber-deletion 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nelio-ab-testing/nelio-ab-testing-450-directory-traversal 2016-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/w3-total-cache-293-unauthenticated-security-token-exposure-via-user-agent-header 2026-04-01T19:07:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-joomag/wp-joomag-252-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/donorbox-donation-form/donorbox-711-authenticated-stored-cross-site-scripting 2019-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdbspringclean/wpdbspringclean-16-reflected-cross-site-scripting 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bot-for-telegram-on-woocommerce/bot-for-telegram-on-woocommerce-127-authenticated-subscriber-telegram-bot-token-disclosure-to-authentication-bypass 2024-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oz-canonical/oz-canonical-05-reflected-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/url-shortify/url-shortify-150-cross-site-request-forgery 2021-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-manutencao/wordpress-manuteno-106-ip-spoofing-to-maintenance-mode-bypass 2024-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bukazu-search-widget/bukazu-search-widget-332-authenticated-contributor-stored-cross-site-scripting-via-shortcode-shortcode-attribute 2025-12-11T14:31:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qi-blocks/qi-blocks-136-authenticated-contributor-stored-cross-site-scripting-via-counter-block 2025-04-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-myparcel-belgium/wc-myparcel-belgium-455-beta-reflected-cross-site-scripting 2025-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-calendar-for-elementor/simple-calendar-for-elementor-164-cross-site-request-forgery 2025-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simply-static/simply-static-313-unauthenticated-information-exposure 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-applicantstack-jobs-display/wp-applicantstack-jobs-display-111-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-06-08T15:06:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3270-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/storefront-footer-text/storefront-footer-text-101-authenticated-admin-stored-cross-site-scripting 2021-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/realtycandy-idx-broker-extended/realtycandy-idx-broker-extended-151-cross-site-request-forgery 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-2321-missing-authorization-via-send_test_email 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-maps/wp-go-maps-formerly-wp-google-maps-71117-sql-injection 2020-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uichemy/uichemy-400-missing-authorization 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/car-rental-manager/car-rental-manager-109-missing-authorization 2025-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xqueue-maileon/maileon-2160-authenticated-administrator-stored-cross-site-scripting 2023-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-qsm-easy-quiz-and-survey-maker-1034-unauthenticated-insecure-direct-object-reference 2026-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-attachments-shortcode/list-attachments-shortcode-041a-authenticated-author-stored-cross-site-scripting-via-list-attachments-shortcode 2025-12-05T17:35:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themify-portfolio-post/themify-portfolio-post-120-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2022-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/konte/konte-246-missing-authorization 2026-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nextgen-gallery/nextgen-gallery-315-php-object-injection 2019-02-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elisqlreports/ez-sql-reports-shortcode-widget-and-db-backup-52511-authenticated-contributor-stored-cross-site-scripting-via-sqlreport-shortcode 2025-06-28T16:21:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/x-addons-elementor/x-addons-for-elementor-1023-missing-authorization 2026-01-14T06:04:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/recipe-card-blocks-by-wpzoom/recipe-card-blocks-lite-3413-authenticated-author-stored-cross-site-scripting-via-summary-and-notes 2026-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dominion-domain-checker-wpbakery-addon/dominion-domain-checker-for-wpbakery-230-authenticated-contributor-stored-cross-site-scripting 2025-01-10T19:03:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easycart/wp-easycart-548-cross-site-request-forgery-via-process_bulk_deactivate_product 2023-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/genki-announcement/genki-announcement-141-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trinity-audio/trinity-audio-5202-reflected-cross-site-scripting 2025-10-03T14:29:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/debatemaster/debatemaster-100-authenticated-administrator-stored-cross-site-scripting-via-color-options-via-debate-shortcode 2025-12-11T14:29:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hummingbird-performance/hummingbird-391-missing-authorization 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alo-easymail/alo-easymail-newsletter-2601-cross-site-request-forgery 2016-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-sentinel/wordpress-sentinel-100-cross-site-scripting 2011-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/api2cart-bridge-connector/api2cart-bridge-connector-110-arbitrary-code-execution 2022-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hslide/hero-slider-wordpress-slider-plugin-135-authenticated-subscriber-sql-injection 2025-03-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/6.9/wordpress-69-691-missing-authorization-to-authenticated-subscriber-arbitrary-note-creation-via-rest-api 2026-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masterslider/master-slider-pro-365-authenticated-editor-sql-injection 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusedesk/fusedesk-661-authenticated-contributor-stored-cross-site-scripting 2025-02-11T21:06:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/portugal-ctt-tracking-woocommerce/portugal-ctt-tracking-for-woocommerce-21-reflected-cross-site-scripting 2024-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foogallery/foogallery-2415-authenticated-contributor-stored-cross-site-scripting-via-gallery-custom-url 2024-06-13T17:03:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ebay-feeds-for-wordpress/wp-ebay-product-feeds-11-cross-site-scripting 2014-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3351-missing-authorization-to-authenticated-contributor-media-file-protection-removal 2026-04-09T12:00:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reamaze/reamaze-helpdesk-live-chat-125-authenticated-admin-stored-cross-site-scripting 2022-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-testimonial-rotator/easy-testimonial-slider-and-form-1015-unauthenticated-reflected-cross-site-scripting-via-search_term 2023-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fediverse-embeds/fediverse-embeds-157-unauthenticated-server-side-request-forgery 2026-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/logo-slider-wp/logo-slider-490-authenticated-author-stored-cross-site-scripting 2026-01-10T05:40:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cubewp-framework/cubewp-framework-1124-authenticated-subscriber-privilege-escalation 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/l-squared-hub-wp-virtual-device/l-squared-hub-wp-10-authenticated-contributor-sql-injection 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eazydocs/eazydocs-250-authenticated-contributor-stored-cross-site-scripting 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foogallery/foogallery-responsive-photo-gallery-image-viewer-justified-masonry-carousel-2431-authenticated-contributor-dom-based-stored-cross-site-scripting 2025-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popupally/popupally-210-cross-site-request-forgery-via-optin_submit_callback 2024-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gravityforms/gravityforms-1819-arbitrary-file-upload 2015-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kcaptcha/kcaptcha-101-cross-site-request-forgery-to-settings-update 2026-04-21T19:07:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vgw-metis/vg-wort-metis-201-missing-authorization 2025-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dricub-driving-school/dricub-29-unauthenticated-server-side-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/soledad/soledad-867-unauthenticated-arbitrary-shortcode-execution 2025-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-core/royal-core-292-authenticated-subscriber-arbitrary-options-update 2025-01-30T00:56:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alphabetic-pagination/alphabetic-pagination-321-reflected-cross-site-scripting 2025-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/site-suggest/site-suggest-139-missing-authorization 2026-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trust-reviews/trust-reviews-plugin-for-google-tripadvisor-yelp-airbnb-and-other-platforms-10-cross-site-request-forgery 2025-09-26T18:34:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rencontre/rencontre-3137-authenticated-administrator-stored-cross-site-scripting 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tradedoubler-affiliate-tracker/grow-by-tradedoubler-2021-unauthenticated-local-file-inclusion 2024-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/asgaros-forum/asgaros-forum-200-sql-injection 2022-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/do-that-task/do-that-task-155-unauthenticated-arbitrary-file-upload 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popcashnet-code-integration-tool/popcashnet-code-integration-tool-18-missing-authorization 2026-01-11T08:26:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-tickets/event-tickets-51104-cross-site-request-forgery 2024-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rafflepress/giveaways-and-contests-by-rafflepress-1120-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-gutenberg-products-block/woocommerce-blocks-55-authenticated-blind-sql-injection 2021-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-datepicker/contact-form-7-datepicker-260-authenticated-stored-cross-site-scripting 2020-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-order-statuses-for-woocommerce/custom-order-statuses-for-woocommerce-152-cross-site-request-forgery 2024-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/setsail/setsail-18-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/astra-widgets/astra-widgets-1215-authenticated-contributor-stored-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-seo-premium/yoast-seo-premium-257-259-authenticated-contributor-stored-cross-site-scripting 2025-10-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/crudlab-facebook-like-box/crudlab-like-box-209-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trackship-for-woocommerce/trackship-for-woocommerce-191-authenticated-shop-manager-sql-injection 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagemapper/imagemapper-126-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/honeypot/wp-armour-honeypot-anti-spam-2113-reflected-cross-site-scripting 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theme-editor/theme-editor-271-authenticated-administrator-arbitrary-file-upload 2023-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-search/jetsearch-3516-authenticated-contributor-stored-cross-site-scripting 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-dashboard-notes/wp-dashboard-notes-1010-insecure-direct-object-references-to-authenticated-private-note-deletion 2023-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elex-helpdesk-customer-support-ticket-system/elex-wordpress-helpdesk-customer-ticketing-system-331-unauthenticated-arbitrary-file-upload 2025-11-20T18:41:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/if-so/if-so-dynamic-content-personalization-171-missing-authorization 2024-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dwell/dwell-170-unauthenticated-local-file-inclusion 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-githuber-md/wp-githuber-md-1162-authenticated-author-arbitrary-file-upload 2023-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/filebird-document-library/filebird-document-library-206-unauthenticated-sensitive-information-exposure 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cm-pop-up-banners/cm-popup-plugin-for-wordpress-popup-maker-165-authenticated-contributor-stored-cross-site-scripting 2024-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meta-store-elements/meta-store-elements-109-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ipospays-gateways-wc/ipospays-gateways-wc-137-unauthenticated-missing-authorization-to-settings-update-via-rest-api-endpoint 2026-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-helpdesk-support-ticket-system/happy-helpdesk-support-ticket-system-106-missing-authorization 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/htaccess-file-editor/htaccess-file-editor-1018-missing-authorization 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dmsguestbook/dmsguestbook-180-directory-traversal 2008-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-maker/quiz-maker-6598-authenticated-admin-stored-cross-site-scripting 2024-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ksher-payment/ksher-112-missing-authorization 2025-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-manager/booking-manager-2117-authenticated-contributor-stored-cross-site-scripting 2025-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ays-facebook-popup-likebox/popup-like-box-page-plugin-352-cross-site-scripting 2021-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feedzy-rss-feeds/rss-aggregator-by-feedzy-feed-to-post-autoblogging-news-youtube-video-feeds-aggregator-432-authenticated-author-stored-cross-site-scripting 2024-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/opor-ayam/opor-ayam-18-reflected-cross-site-scripting 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aweos-wp-lock/aweos-wp-lock-148-authenticated-administrator-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-the-contact-form-builder-that-grows-with-you-380-authenticated-admin-stored-cross-site-scripting 2024-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletters-lite/newsletters-412-authenticated-contributor-stored-cross-site-scripting 2025-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foogallery/foogallery-2235-reflected-cross-site-scripting 2023-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blackhole-bad-bots/blackhole-for-bad-bots-38-unauthenticated-stored-cross-site-scripting-via-user-agent-http-header 2026-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iwp-client/infinitewp-client-137-php-object-injection 2014-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/delete-comments-by-status/delete-comments-by-status-211-unauthenticated-local-file-inclusion 2025-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ht-mega-for-elementor/ht-mega-absolute-addons-for-elementor-244-authenticated-contributor-stored-cross-site-scripting-via-post-carousel-widget 2024-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tiny-contact-form/tiny-contact-form-07-cross-site-request-forgery 2022-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-form-builder/easy-form-builder-388-missing-authorization-to-authenticated-subscriber-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bookingpress-appointment-booking/bookingpress-1064-unauthenticated-sensitive-information-exposure 2023-07-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-171017-authenticated-contributor-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/abbs-bing-search/bing-search-api-integration-033-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scroll-to-top-builder/scroll-top-wordpress-scroll-to-top-133-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-live-chat-support/wp-live-chat-support-819-stored-cross-site-scripting 2020-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sagepay-direct-for-woocommerce-payment-gateway/woocommerce-sagepay-direct-payment-gateway-0167-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wishlist/wishlist-210-reflected-cross-site-scripting 2025-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-wholesale-prices/wholesale-suite-215-cross-site-request-forgery 2022-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-maps/wp-google-maps-6314-stored-cross-site-scripting 2016-11-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/debug-tool/debug-tool-22-missing-authorization 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leaflet-maps-marker/leaflet-maps-marker-3126-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Avada/avada-7111-authenticatedcontributor-arbitrary-file-upload-via-ajax_import_options 2023-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-event-solution/event-manager-events-calendar-booking-registrations-and-tickets-eventin-4037-unauthenticated-server-side-request-forgery 2025-08-22T17:41:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slider-wd/slider-by-10web-1251-admin-stored-cross-site-scripting 2022-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extra-privacy-for-elementor/extra-privacy-for-elementor-013-reflected-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xelion-webchat/xelion-webchat-910-authenticated-subscriber-privilege-escalation 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-view/link-view-080-authenticated-administrator-stored-cross-site-scripting 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/socialdriver-framework/swift-framework-202400-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spider-facebook/spider-facebook-1015-reflected-cross-site-scripting 2023-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/private-messages-for-wordpress/private-messages-for-wordpress-2110-stored-cross-site-scripting 2022-05-26T12:13:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visual-portfolio/visual-portfolio-photo-gallery-post-grid-2180-contributor-css-injection 2022-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-access-manager/advanced-access-manager-6920-reflected-cross-site-scripting 2024-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themify-wc-product-filter/themify-woocommerce-product-filter-143-cross-site-request-forgery 2024-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yop-poll/yop-poll-602-reflected-cross-site-scripting-via-poll_id-parameter 2019-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscribe-to-comments/subscribe-to-comments-23-reflected-cross-site-scripting 2024-10-29T14:20:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sendpress/sendpress-newsletters-12-authenticated-sql-injection 2015-07-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photoblocks-grid-gallery/gallery-photoblocks-1142-reflected-cross-site-scripting 2019-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatic-grid-image-listing/agilautomatic-grid-image-listing-10-arbitrary-file-upload 2022-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/gamezone/gamezone-1111-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beerxml-shortcode/beerxml-shortcode-071-authenticated-contributor-server-side-request-forgery 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/canto/canto-304-unauthenticated-remote-file-inclusion 2023-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nepali-post-date/nepali-post-date-511-authenticated-contributor-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/diveit/diveit-143-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-manager/events-manager-calendar-bookings-tickets-and-more-6473-authenticated-contributor-stored-cross-site-scripting-via-event-location-and-event_category-shortcodes 2024-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mage-eventpress/wpevently-508-authenticated-contributor-php-object-injection 2025-12-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-calendar-booking-plugin-for-appointments-and-events-526-authenticated-subscriber-insecure-direct-object-reference 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xcloner-backup-and-restore/backup-restore-and-migrate-your-sites-with-xcloner-482-cross-site-request-forgery-in-xcloner_remote_storagesave 2025-12-04T13:31:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/the-next/the-next-110-authenticated-contributor-php-object-injection 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-lister-for-ebay/wp-lister-lite-for-ebay-360-reflected-cross-site-scripting 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-seo/yoast-seo-324-sensitive-data-exposure 2016-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/medinik-core/medinik-core-136-unauthenticated-sql-injection 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bg-hide-email-address/hide-email-address-01-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-11T14:24:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf-images/offload-ai-optimize-with-cloudflare-images-1102-authenticated-author-remote-code-execution-via-api-key-account-id-parameters-in-cf_images_do_setup-ajax-action 2026-06-17T16:18:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ameliabooking/amelia-211-authenticated-custom-role-sql-injection 2026-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/black-widgets/black-widgets-for-elementor-135-authenticated-contributor-stored-cross-site-scripting 2024-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amazon-product-price/amazon-product-price-11-cross-site-request-forgery-to-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-4183-authenticated-subscriber-insecure-direct-object-reference-to-arbitrary-user-meta-update 2026-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/houzez/houzez-404-missing-authorization 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/full-customer/full-customer-223-authenticatedsubscriber-information-disclosure-via-health-check 2023-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-survey-and-quiz-tool/wp-survey-and-quiz-tool-13-cross-site-scripting 2010-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/header-footer-elementor/elementor-header-footer-builder-1626-authenticated-contributor-stored-cross-site-scripting 2024-05-23T15:59:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-slider-widget/image-slider-11125-authenticated-editor-stored-cross-site-scripting 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cpt-bootstrap-carousel/cpt-bootstrap-carousel-112-reflected-cross-site-scripting 2024-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-tickets/event-tickets-and-registration-581-missing-authorization 2024-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supportcandy/supportcandy-helpdesk-customer-support-ticket-system-344-authenticated-subscriber-sql-injection-via-number-field-filter 2026-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dzs-zoomsounds/zoomsounds-wordpress-wave-audio-player-with-playlist-691-unauthenticated-arbitrary-file-download 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-addons-for-wpbakery-page-builder/unlimited-addons-for-wpbakery-page-builder-1042-authenticated-editor-arbitrary-file-upload 2024-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-addons/master-addons-for-elementor-211-authenticated-contributor-stored-cross-site-scripting-via-ma_el_bh_table_btn_text 2026-02-19T23:25:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/biteship/biteship-2227-authenticated-shop-manager-stored-cross-site-scripting 2023-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/polldaddy/crowdsignal-dashboard-polls-surveys-more-3011-reflected-cross-site-scripting 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41022-authenticated-contributor-sensitive-information-exposure 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/atec-duplicate-page-post/atec-duplicate-page-post-1220-missing-authorization-to-authenticated-contributor-arbitrary-post-duplication-and-data-exposure 2025-11-24T19:06:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lastudio-element-kit/la-studio-element-kit-for-elementor-1393-authenticated-contributor-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uipress-lite/uipress-lite-effortless-custom-dashboards-admin-themes-and-pages-3509-missing-authorization 2026-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broken-link-manager/broken-link-manager-060-cross-site-scripting 2015-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-floating-content-lite/advanced-floating-content-lite-125-authenticated-editor-stored-cross-site-scripting 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-gmail-smtp/wp-gmail-smtp-107-sensitive-information-exposure 2025-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/snssimen/simen-46-unauthenticated-local-file-inclusion 2025-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beacon-by/beacon-lead-magnets-and-lead-capture-157-reflected-cross-site-scripting 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-encoder-bundle/email-encoder-protect-email-addresses-and-phone-numbers-247-unauthenticated-stored-cross-site-scripting 2026-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mailer/wp-easy-post-mailer-064-reflected-cross-site-scripting 2025-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-custom-fields-font-awesome/advanced-custom-fields-font-awesome-field-502-authenticated-subscriber-stored-cross-site-scripting-via-json-field 2026-05-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/change-uploaded-file-permissions/change-uploaded-file-permissions-400-cross-site-request-forgery-to-options-update 2022-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/audio-player-with-playlist-ultimate/audio-player-with-playlist-ultimate-122-authenticated-contributor-stored-cross-site-scripting 2023-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/envialosimple-email-marketing-y-newsletters-gratis/envalosimple-email-marketing-y-newsletters-245-authenticated-administrator-sql-injection-via-orderby-parameter 2026-05-26T17:33:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-property-listings/easy-property-listings-352-authenticatedcontributor-sql-injection-via-shortcode 2024-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-booster/seo-booster-37-admin-sql-injection 2021-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/source/source-all-versions-cross-site-scripting 2013-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-315-authenticated-contributor-sql-injection-via-shortcode 2024-05-21T11:12:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gmap-embed/wp-google-map-183-arbitrary-post-deletion-and-plugin-settings-update-via-cross-site-request-forgery 2022-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lws-affiliation/lws-affiliation-226-unauthenticated-remotelocal-file-inclusion 2023-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/podlove-podcasting-plugin-for-wordpress/podlove-podcast-publisher-4011-missing-authorization-to-unauthenticated-data-export 2024-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pricer-ninja-pricing-tables/pricer-ninja-210-authenticated-contributor-stored-cross-site-scripting 2024-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-3121-authenticatedadministrator-sql-injection-via-replace_urls 2023-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirect-redirection/redirect-redirection-113-missing-authorization-in-loadredirectsettings-function 2023-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-post-grid/the-post-grid-774-missing-authorization-via-save_block_css 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter-bulk-email/newsletter-bulk-email-sender-201-authenticated-contributor-stored-cross-site-scripting 2023-10-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/betheme/betheme-2756-authenticated-contributor-php-object-injection 2024-08-29T16:01:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/citizen-space/citizen-space-11-reflected-cross-site-scripting 2015-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-226-insecure-direct-object-reference-to-unauthenticated-company-logo-deletion 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recipe-maker/wp-recipe-maker-910-authenticated-contributor-stored-cross-site-scripting-via-tag 2024-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/participants-database/participants-database-249-cross-site-request-forgery-via-_process_general 2023-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedpress/embedpress-394-missing-authorization 2023-12-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yikes-inc-easy-mailchimp-extender/easy-forms-for-mailchimp-662-authenticated-cross-site-scripting 2020-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wishsuite/wishsuite-137-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rewp/rewp-101-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-10-03T21:12:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/apartment-management/wpams-440-17-08-2023-authenticated-subscriber-privilege-escalation 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailchimp-wp/forms-for-mailchimp-by-optin-cat-254-authenticated-editor-stored-cross-site-scripting 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-restaurant-reservations/quick-restaurant-reservations-141-reflected-cross-site-scripting 2022-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-slider/simple-slider-11-reflected-cross-site-scripting 2021-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/posts-and-products-views/posts-and-products-views-for-woocommerce-21-authenticated-contributor-stored-cross-site-scripting 2024-12-13T15:49:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-business-intelligence-lite/wp-business-intelligence-lite-320-authenticated-subscriber-missing-authorization-to-privilege-escalation-via-arbitrary-sql-modification 2026-05-04T14:06:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-bulk-editor/bear-1131-cross-site-request-forgery-via-multiple-functions 2023-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easily-generate-rest-api-url/easily-generate-rest-api-url-100-stored-cross-site-scripting 2022-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-453-bypass-sanitize_file_name-protection 2016-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/our-team-enhanced/our-team-showcase-13-cross-site-scripting 2014-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirect-redirection/redirect-redirection-113-missing-authorization-in-livesearch-function 2023-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-1328-authenticated-administrator-stored-cross-site-scripting 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-simple-booking-calendar/wp-simple-booking-calendar-2013-missing-authorization 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-box/popup-box-easily-create-wordpress-popups-3212-authenticated-contributor-stored-cross-site-scripting 2026-02-17T16:37:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-online-users-stats/wp-online-users-stats-100-authenticated-editor-sql-injection-via-table_name-parameter 2025-06-05T17:51:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-prayer/wp-prayer-165-cross-site-request-forgery-bypass 2021-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cliengo/cliengo-chatbot-302-missing-authorization-to-unauthenticated-chatbot-settings-update 2024-07-08T19:56:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/translate-this-google-translate-web-element-shortcode/translate-this-google-translate-web-element-shortcode-10-authenticated-contributor-stored-cross-site-scripting-via-base_lang-parameter 2025-08-15T19:50:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/24liveblog/24liveblog-22-missing-authorization-to-authenticated-author-settings-modification-via-update_lb24_token-ajax-action 2026-06-23T16:39:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-resume-builder/my-resume-builder-103-authenticated-contributor-stored-cross-site-scripting 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instantio/instantio-woocommerce-quick-checkout-instant-checkout-side-cart-popup-cart-125-cross-site-request-forgery 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bsi-hotel-pro/online-hotel-booking-system-pro-11-cross-site-scripting 2020-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpb-popup-for-contact-form-7/wpb-popup-for-contact-form-7-showing-the-contact-form-7-popup-on-button-click-cf7-popup-175-unauthenticated-arbitrary-shortcode-execution-via-wpb_pcf_fire_contact_form 2024-11-18T23:01:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-multi-currency/curcy-223-reflected-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/faq-builder-ays/faq-builder-ays-182-unauthenticated-stored-cross-site-scripting 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-list/contact-list-3018-authenticated-contributor-stored-cross-site-scripting-via-_cl_map_iframe-parameter 2026-03-20T10:58:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/cozipress/cozipress-1032-authenticated-contributor-stored-cross-site-scripting 2024-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribers/icegram-express-552-unauthenticated-csv-injection 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/onetone/onetone-306-onetone-companion-111-unauthenticated-settings-update 2020-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultra-portfolio/ultra-portfolio-67-authenticated-subscriber-sql-injection 2026-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41033-authenticated-contributor-dom-based-stored-cross-site-scripting 2024-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fancy-product-designer/fancy-product-designer-450-stored-cross-site-scripting 2020-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tubepress/tubepress-165-cross-site-scripting 2008-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-post-template/simple-content-templates-for-blog-posts-pages-2261-cross-site-request-forgery 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mail-smtp-pro/wp-mail-smtp-pro-380-missing-authorization-to-information-dislcosure-via-is_print_page 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-ultra-pro/booking-ultra-pro-1119-reflected-cross-site-scripting 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/squeeze/squeeze-16-authenticated-admin-arbitrary-file-upload 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/core-web-vitals-pagespeed-booster/core-web-vitals-pagespeed-booster-1027-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/urna/urna-257-unauthenticated-local-file-inclusion 2025-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vr-calendar-sync/vr-calendar-244-authenticated-administrator-local-file-inclusion 2022-07-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/realhomes/rh-real-estate-wordpress-theme-440-authenticated-subscriber-privilege-escalation 2025-06-09T14:53:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/survey-maker/survey-maker-206-unauthenticated-stored-cross-site-scripting 2021-12-03T10:28:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexible-coupons/flexible-pdf-coupons-1102-authenticated-contributor-stored-cross-site-scripting 2025-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maintenance-switch/maintenance-switch-162-reflected-cross-site-scripting 2023-04-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yourchannel/yourchannel-125-authenticated-administrator-stored-cross-site-scripting 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flickr-set-slideshows/flickr-set-slideshows-09-authenticated-subscriber-sql-injection 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulk-editor/wolf-wordpress-posts-bulk-editor-and-manager-professional-1085-authenticated-editor-path-traversal 2024-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yml-for-yandex-market/yml-for-yandex-market-3107-reflected-cross-site-scripting 2023-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/standout-color-boxes-and-buttons/standout-color-boxes-and-buttons-070-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforo/wpforo-forum-243-authenticated-subscriber-privilege-escalation 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/debranding/debranding-102-authenticated-subscriber-arbitrary-options-update 2024-12-11T15:22:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vstemplate-creator/vstemplate-creator-202-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-usage/media-usage-004-reflected-cross-site-scripting 2021-08-13T15:31:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newstatpress/newstatpress-098-authenticated-cross-site-scripting 2015-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-and-salon-booking-system-pro-762-sensitive-data-disclosure 2022-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/litespeed-cache/litespeed-cache-443-authorization-bypass 2021-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-sitemap-generator/xml-sitemaps-409-authenticated-cross-site-scripting 2018-12-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcodes-ultimate-pro/shortcodes-ultimate-pro-720-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/svgator/svgator-add-animated-svg-easily-126-authenticated-author-stored-cross-site-scripting-via-svg 2024-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shorten-url/short-url-168-missing-authorization-via-multiple-ajax-functions 2023-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tarteaucitronjs/tarteaucitronjs-cookies-legislation-gdpr-wordpress-plugin-16-cross-site-scripting 2021-12-17T14:06:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-bet/easy-bet-107-authenticatedcontributor-sql-injection 2023-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/client-portal/client-portal-private-user-pages-and-login-121-missing-authorization 2026-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/block-editor-bootstrap-blocks/block-editor-bootstrap-blocks-661-reflected-cross-site-scripting-via-tab 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-videos/video-gallery-youtube-gallery-214-authenticated-administrator-sql-injection 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-carousel-slider-for-elementor/post-carousel-slider-for-elementor-170-missing-authorization 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagerank-tools/pagerank-tools-115-reflected-cross-site-scripting 2024-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ni-woocommerce-cost-of-goods/ni-woocommerce-cost-of-goods-328-missing-authorization 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jp-staticpagex/static-page-extended-21-cross-site-request-forgery 2022-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themify-builder/themify-builder-762-reflected-cross-site-scripting 2024-10-04T12:23:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geodirectory/geodirectory-wp-business-directory-plugin-and-classified-listings-directory-28152-unauthenticated-sql-injection 2026-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nextgen-gallery/nextgen-gallery-328-cross-site-request-forgery-leading-to-post-thumbnail-change 2023-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blackhole-bad-bots/blackhole-for-bad-bots-331-arbitrary-ip-address-blocking-via-ip-spoofing 2022-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/qt-kentharadio/kentharadio-220-reflected-cross-site-scripting 2026-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xpro-elementor-addons/xpro-elementor-addons-14191-authenticated-contributor-stored-cross-site-scripting 2025-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-226-missing-authorization-to-unauthenticated-arbitrary-email-sending 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/m1downloadlist/m1downloadlist-023-authenticated-contributor-sensitive-information-disclosure 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/constant-contact-forms-by-mailmunch/constant-contact-forms-by-mailmunch-2011-authenticated-contributor-stored-cross-site-scripting 2024-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribers/email-subscribers-newsletters-5711-reflected-cross-site-scripting-via-campaign_id 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusion-builder/avada-fusion-builder-3154-authenticated-contributor-php-object-injection 2026-06-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customer-reviews-woocommerce/customer-reviews-for-woocommerce-51010-reflected-cross-site-scripting-via-crsearch 2026-04-15T17:40:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/swiss-toolkit-for-wp/swiss-toolkit-for-wp-107-authenticated-contributor-authentication-bypass 2024-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-cloudflare-page-cache/super-page-cache-for-cloudflare-475-cross-site-request-forgery 2024-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cardoza-3d-tag-cloud/3d-tag-cloud-38-cross-site-request-forgery 2022-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sms-alert/sms-alert-order-notifications-woocommerce-381-authenticated-contributor-stored-cross-site-scripting-via-sa_verify-shortcode 2025-05-09T21:58:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/good-bad-comments/good-bad-comments-100-authenticated-admin-stored-cross-site-scripting 2022-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/findall-membership/findall-membership-104-authentication-bypass-via-social-login 2025-11-26T16:16:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/personal-favicon/personal-favicon-20-cross-site-request-forgery-to-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cms-commander-client/cms-commander-manage-multiple-sites-plugin-221-php-object-injection 2016-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stackable-ultimate-gutenberg-blocks/stackable-3195-authenticated-author-stored-cross-site-scripting 2026-01-07T12:46:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dn-sitemap-control/dn-sitemap-control-106-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-upload/wordpress-file-upload-243-reflected-cross-site-scripting 2014-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-education/wp-education-128-authenticated-contributor-stored-cross-site-scripting-via-text_html_tag 2024-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dc-woocommerce-multi-vendor/multivendorx-the-ultimate-woocommerce-multivendor-marketplace-solution-420-missing-authorization-to-limited-vendor-privilege-escalationaccount-takeover 2024-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/issuupress/issuupress-132-authenticated-administrator-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpqa/wpqa-59-cross-site-request-forgery 2022-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-custom-admin-interface/custom-admin-interface-741-missing-authorization 2026-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vr-calendar-sync/vr-calendar-233-cross-site-request-forgery 2022-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/web-push/web-push-140-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-power-stats/wp-power-stats-223-cross-site-request-forgery 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scroll-baner/scroll-baner-10-cross-site-request-forgery-to-remote-code-execution-andor-cross-site-scripting 2021-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scripts-n-styles/scripts-n-styles-353-authenticated-administrator-stored-cross-site-scripting 2023-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bookingpress-appointment-booking/bookingpress-1081-authenticated-customer-insecure-direct-object-reference 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yds-support-ticket-system/yds-support-ticket-system-10-cross-site-request-forgery 2022-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/school-management/school-management-system-for-wordpress-9200-authenticated-student-sql-injection-via-view-attendance 2025-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blogger-image-import/blogger-image-import-21-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chaty/floating-chat-widget-contact-chat-icons-telegram-chat-line-messenger-wechat-email-sms-call-button-whatsapp-chaty-335-authenticated-contributor-dom-based-stored-cross-site-scripting 2025-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awa-plugins/awa-plugins-144-reflected-cross-site-scripting 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-112-cross-site-request-forgery-via-wpfc_toolbar_save_settings_callback 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/peprodev-ups/peprodev-ultimate-profile-solutions-191-752-missing-authorization-to-limited-unauthenticated-arbitrary-user-meta-update-via-handel_ajax_req-function 2025-05-06T13:27:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/table-rate-shipping-pro/wowshipping-pro-106-injected-backdoor 2026-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cbxwpbookmark/cbx-bookmark-favorite-204-authenticated-subscriber-sql-injection-via-orderby-parameter 2026-01-05T15:12:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/crelly-slider/crelly-slider-146-authenticated-admin-stored-cross-site-scripting 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/table-maker/table-maker-191-authenticated-author-stored-cross-site-scripting 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/reconstruction/reconstruction-147-reflected-cross-site-scripting 2024-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/update-notifications/update-notifications-034-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seznam-webmaster/seznam-webmaster-147-cross-site-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comment-license/comment-license-130-cross-site-request-forgery-to-settings-update 2022-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/zentrum/zentrum-10-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weblizar-companion/is-theme-companion-157-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acymailing/acymailing-9110-1081-missing-authorization-to-authenticated-subscriber-privilege-escalation 2026-04-15T16:43:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widget-google-reviews/plugin-for-google-reviews-31-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dd-post-carousel/custom-post-carousels-with-owl-146-authenticated-editor-stored-cross-site-scripting 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-booking-system/wp-booking-system-201910-missing-authorization-via-wpbs_refresh_calendar_editor 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-paypal-events-tickets/easy-paypal-events-122-cross-site-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-migration-unlimited-extension/all-in-one-wp-migration-unlimited-extension-283-missing-authorization-to-authenticated-subscriber-arbitrary-backup-schedule-creation-and-backup-file-download 2026-05-05T14:37:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp/mainwp-dashboard-4241-cross-site-request-forgery 2022-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/browser-address-bar-color/browser-address-bar-color-33-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-street-view-shortcode/shortcode-for-google-street-view-057-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-11-20T19:32:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/creative-mail-by-constant-contact/creative-mail-154-cross-site-request-forgery 2022-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/worker-wpbakery/worker-for-wpbakery-111-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accordions-wp/accordion-26-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/antihacker/anti-hacker-434-cross-site-request-forgery-via-antihacker_ajax_scan 2023-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-property-listings/easy-property-listings-333-cross-site-scripting 2019-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-vendors/woocommerce-products-vendor-2168-insecure-direct-object-reference-to-vendor-commission-percentage-update 2022-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-406-authenticated-subscriber-sql-injection 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vk-all-in-one-expansion-unit/vk-all-in-one-expansion-unit-99910-authenticated-contributor-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-automatic/automatic-3920-unauthenticated-sql-injection 2024-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/so-widgets-bundle/siteorigin-widgets-bundle-1582-authenticated-contributor-stored-cross-site-scripting 2024-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-mixcloud/list-mixcloud-14-authenticated-contributor-stored-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-attachment/woocommerce-product-attachment-218-cross-site-request-forgery 2023-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/forumengine/forumengine-18-reflected-cross-site-scripting 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-support-ticket-system/support-ticket-system-121-sql-injection 2015-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/callphoner/callphoner-111-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restaurant-cafe-addon-for-elementor/restaurant-cafe-addon-for-elementor-159-authenticated-contributor-post-disclosure 2024-11-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exclusive-addons-for-elementor/exclusive-addons-for-elementor-2698-authenticated-contibutor-stored-cross-site-scripting-via-card-widget 2024-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mega-elements-addons-for-elementor/mega-elements-addons-for-elementor-132-authenticated-contributor-stored-cross-site-scripting-via-countdown-timer-widget 2025-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-food/wp-food-ordering-and-restaurant-menu-11-unauthenticated-local-file-inclusion 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/copy-delete-posts/duplicate-post-141-cross-site-request-forgery-via-cdp_action_handling-ajax-action 2023-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-0885-cross-site-scripting-via-wpfastestcachepage-options-wpfastestcachepreload_number-or-wpfastestcachelanguage-parameter 2018-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-import-export-lite/wp-import-export-lite-3927-authenticated-contributor-dom-based-stored-cross-site-scripting 2025-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/front-end-only-users/front-end-users-3233-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/razorpay-subscription-button-elementor/razorpay-subscription-button-elementor-plugin-103-reflected-cross-site-scripting-via-add_query_arg-and-remove_query_arg-functions 2025-03-04T19:18:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vr-frases/vr-frases-401-reflected-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/codehaveli-bitly-url-shortener/bitly-url-shortener-141-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-1339-cross-site-scripting 2016-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mx-time-zone-clocks/mx-time-zone-clocks-511-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dsidxpress/dsidxpress-211-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stratum/stratum-elementor-widgets-160-authenticated-contributor-stored-cross-site-scripting-via-advanced-google-maps-and-image-hotspot-widgets 2025-07-31T16:22:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tnc-toolbox/tnc-toolbox-web-performance-204-missing-authorization 2025-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventer/eventer-398-unauthenticated-sql-injection-via-eventer_get_attendees 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-best-elementor-templates-widgets-kits-woocommerce-builders-6112-authenticatedcontributor-stored-cross-site-scripting-via-event-calendar-widget 2025-06-06T21:37:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-simple-paypal-shopping-cart/simple-shopping-cart-524-authenticated-contributor-stored-cross-site-scripting-via-wpsc_display_product-shortcode 2026-04-03T19:30:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-cyr-cho/wp-cyr-cho-01-cross-site-request-forgery 2025-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-171006-cross-site-request-forgery-to-reflected-cross-site-scripting 2025-01-13T19:52:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-171001-authenticated-contributor-stored-cross-site-scripting-via-countdown-widget 2024-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder/popup-builder-425-authenticated-admin-server-side-request-forgery 2024-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/mavix-education/mavix-education-10-missing-authorization-to-authenticated-subscriber-creativ-demo-importer-plugin-activation 2025-12-12T15:29:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zij-kart/zij-kart-11-unauthenticated-local-file-inclusion 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/floating-action-buttons/floating-action-buttons-091-missing-authorization 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iubenda-cookie-law-solution/iubenda-332-authenticated-subscriber-privilege-escalation 2022-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meeting-scheduler-by-vcita/appointment-booking-and-online-scheduling-442-reflected-cross-site-scripting 2024-06-20T20:02:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-thank-you-page-nextmove-lite/nextmove-lite-thank-you-page-for-woocommerce-2230-authenticated-contributor-stored-cross-site-scripting-via-xlwcty_current_date-shortcode 2026-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sb-woocommerce-infinite-scrol/woocommerce-infinite-scroll-and-ajax-pagination-18-authenticated-subscriber-php-object-injection 2026-05-28T16:45:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-map/wp-google-map-plugin-10-authenticated-contributor-sql-injection 2025-10-14T19:47:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/melhor-envio-cotacao/melhor-envio-21511-unauthenticated-sensitive-information-exposure-via-hardcoded-hash 2025-04-07T15:53:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-products-slider/product-slider-product-grid-product-masonry-11361-missing-authorization 2026-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/external-media/external-media-1033-authenticated-arbitrary-file-upload 2021-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/typebot/typebot-build-beautiful-conversational-forms-143-authenticated-admin-cross-site-scripting 2021-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kallyas/kallyas-42-cross-site-request-forgery 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flickr-rss/flickrrss-531-cross-site-scripting-via-flickrrss_set 2018-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-monitor/download-monitor-4751-missing-authorization-to-unauthenticated-data-export 2022-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter-optin-box/noptin-342-missing-authorization-to-unauthenticated-form-submission 2024-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lifterlms/lms-by-lifterlms-online-course-membership-learning-management-system-plugin-for-wordpress-4212-insecure-direct-object-reference 2021-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/giveaway-boost/giveaway-boost-214-unauthenticated-php-object-injection 2024-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usc-e-shop/welcart-e-commerce-2821-authenticatededitor-sql-injection 2023-09-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accordions-or-faqs/accordions-multiple-accordions-or-faqs-builder-203-authenticated-admin-stored-cross-site-scripting-in-post_oxi_settings-function 2022-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcode-factory/shortcode-factory-11-reflected-cross-site-scripting 2015-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-single-page-checkout/woocommerce-single-page-checkout-127-cross-site-request-forgery 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-analytics-opt-out/google-analytics-opt-out-234-authenticated-admin-stored-cross-site-scripting 2023-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/w3-total-cache-094-cross-site-request-forgery 2014-12-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/truenorth-srcset/srcset-responsive-images-for-wordpress-14-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/onesignal-free-web-push-notifications/onesignal-web-push-notifications-1177-stored-cross-site-scripting 2019-07-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-211-cross-site-scripting 2007-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member-widgets-for-elementor/ultimate-member-widgets-for-elementor-23-missing-authorization-to-unauthenticated-information-exposure 2025-11-19T16:28:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yayextra/yayextra-155-authenticated-administrator-sql-injection 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blaze-demo-importer/blaze-demo-importer-1012-missing-authorization-to-authenticated-subscriber-limited-plugin-install 2025-09-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aruba-hispeed-cache/aruba-hispeed-cache-304-missing-authorization 2026-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-popular-posts/wordpress-popular-posts-632-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sip-reviews-shortcode-woocommerce/sip-reviews-shortcode-for-woocommerce-123-authenticated-contributor-sql-injection 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-playground/quick-playground-134-authenticated-administrator-arbitrary-file-read-via-filename-parameter 2026-06-05T14:22:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mautic-integration-for-woocommerce/mautic-integration-for-woocommerce-103-cross-site-request-forgery-leading-to-arbitrary-options-update 2022-12-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comment-genius/comment-genius-125-reflected-cross-site-scripting-via-_serverphp_self 2026-03-20T15:18:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/avanix/imediapixel-themes-various-versions-cross-site-scripting 2012-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modal-window/modal-window-create-popup-modal-window-521-cross-site-request-forgery-to-remote-code-execution 2021-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paytium/paytium-mollie-payment-forms-donations-437-missing-authorization-in-paytium_sw_save_api_keys 2023-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/complianz-gdpr/complianz-gdprccpa-cookie-consent-645-cross-site-request-forgery 2023-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vayu-blocks/vayu-blocks-139-authenticated-contributor-stored-cross-site-scripting-via-multiple-block-attributes 2025-09-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pdf-invoices-packing-slips/pdf-invoices-packing-slips-for-woocommerce-376-authenticated-shop-manager-sql-injection 2024-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bloggie/bloggie-208-unauthenticated-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cliptakes/cliptakes-134-authenticated-contributor-stored-cross-site-scripting 2025-01-22T21:32:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-vendors/woocommerce-product-vendors-2176-reflected-cross-site-scripting 2023-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yampi-checkout/yampi-checkout-103-reflected-cross-site-scripting 2022-06-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-system/pinpoint-booking-system-1-wordpress-booking-plugin-13-sql-injection 2014-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zingiri-web-shop/zingiri-web-shop-plugin-241-cross-site-scripting 2012-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-calendar/booking-calendar-appointment-booking-system-223-unauthenticated-parameter-manipulation 2018-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-453-cross-site-scripting-via-attachment-name 2016-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spider-facebook/spider-facebook-1015-cross-site-request-forgery 2023-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-transition/page-transition-13-authenticated-administrator-stored-cross-site-scripting 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brave-popup-builder/brave-popup-builder-065-unauthenticated-server-side-request-forgery 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paypal-shortcodes/paypal-shortcodes-03-authenticated-contributor-stored-cross-site-scripting-via-amount-and-name-shortcode-attributes 2026-03-20T15:07:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/views-for-wpforms-lite/views-for-wpforms-322-missing-authorization-via-create_view 2024-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wr-age-verification/wr-age-verification-100-reflected-cross-site-scripting 2021-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anywhere-flash-embed/anywhere-flash-embed-105-authenticated-contributor-stored-cross-site-scripting 2023-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/go-sphinx/gigaom-sphinx-01-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-registration/simple-user-registration-64-authenticated-contributor-privilege-escalation 2025-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/landing-page-cat/landing-page-cat-178-reflected-cross-site-scripting 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fable-extra/fable-extra-106-unauthenticated-sql-injection 2025-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-discord-invite/wp-discord-invite-241-reflected-cross-site-scripting-via-webhook 2023-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/expand-maker/read-more-accordion-347-cross-site-request-forgery-to-local-file-inclusion 2025-04-04T13:09:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geo-my-wp/geo-my-wordpress-40-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/augmented-reality/augmented-reality-plugin-120-arbitrary-file-upload 2020-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/visual-arts/visual-art-gallery-wordpress-theme-24-authenticated-subscriber-php-object-injection 2025-07-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videowhisper-live-streaming-integration/broadcast-live-video-live-streaming-4274-cross-site-scripting 2014-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/hobo/hobo-1010-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/course-booking-system/course-booking-system-606-unauthenticated-sql-injection 2025-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-301-redirects/simple-301-redirects-200-203-authenticated-arbitrary-plugin-installation 2021-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.8/wordpress-core-382-authentication-cookie-forgery 2014-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/co-authors-plus/co-authors-plus-35-351-sensitive-information-disclosure 2022-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-popups-lite/wp-popups-wordpress-popup-builder-215-authenticated-contributor-stored-cross-site-scripting 2023-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-302-authenticated-subscriber-arbitrary-file-upload 2023-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/astra/astra-464-authenticated-editor-stored-cross-site-scripting-via-theme-headerfooter 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulk-term-editor/bulk-term-editor-114-cross-site-request-forgery 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dn-cookie-notice/simple-fixed-notice-16-cross-site-request-forgery 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-login-control/wp-login-control-200-reflected-cross-site-scripting 2025-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/siteorigin-panels/page-builder-by-siteorigin-22915-authenticated-contributor-stored-cross-site-scripting-via-siteorigin_widget-shortcode 2024-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visualizer/visualizer-3105-reflected-cross-site-scripting 2024-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kivicare-clinic-management-system/kivicare-366-authenticated-patient-insecure-direct-object-reference 2024-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-related-products-refresh-on-reload/related-products-for-woocommerce-3315-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pwa-for-wp/pwa-for-wp-amp-1732-missing-authorization 2021-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/process-steps-template-designer/process-steps-template-designer-121-cross-site-request-forgery-bypass 2021-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/twenty20/twenty20-image-before-after-159-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-2251-cross-site-request-forgery-via-process_bulk_action 2023-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-salesforce/integration-for-salesforce-and-contact-form-7-wpforms-elementor-formidable-ninja-forms-144-unauthenticated-full-path-disclosure 2025-05-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quttera-web-malware-scanner/quttera-web-malware-scanner-34148-authenticated-administrator-directory-traversal-via-showfile 2023-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-more-than-just-a-page-builder-3234-authenticated-contributor-stored-cross-site-scripting-in-the-url-parameter-in-multiple-widgets 2024-09-10T23:03:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revslider/slider-revolution-6711-authenticated-author-stored-cross-site-scripting-via-add-layer-class-id-and-title-attributes 2024-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-manager/events-manager-calendar-bookings-tickets-and-more-7222-cross-site-request-forgery-to-location-deletion 2025-12-11T21:40:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/activitytime/sessions-time-monitoring-full-automatic-113-missing-authorization 2026-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-firebase-sms-otp-verification/miniorange-otp-verification-with-firebase-310-362-unauthenticated-privilege-escalation 2025-09-19T00:13:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-addons/master-addons-free-widgets-hover-effects-toggle-conditions-animations-for-elementor-2059-contributor-stored-cross-site-scripting 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kia-subtitle/kia-subtitle-401-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting 2026-05-21T14:37:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bns-featured-category/bns-featured-category-282-authenticated-contributor-stored-cross-site-scripting 2025-06-05T17:47:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-2251-authenticated-contributor-arbitrary-content-deletion 2023-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kallyas/kallyas-4220-authenticated-contributor-arbitrary-file-upload 2025-09-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-icons/popular-brand-icons-simple-icons-277-authenticated-cross-site-scripting 2021-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp/mainwp-dashboard-the-private-wordpress-manager-for-multiple-website-maintenance-plugin-312-stored-cross-site-scripting 2016-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/don8/don8-04-authenticated-administrator-stored-cross-site-scripting-via-settings 2023-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-links/social-links-1011-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-dispatcher/wp-dispatcher-120-authenticated-contributor-sql-injection 2025-10-02T22:17:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nex-forms-express-wp-form-builder/nex-forms-ultimate-form-builder-852-cross-site-request-forgery 2023-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/qreatix/qreatix-194-unauthenticated-stored-cross-site-scripting 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ltl-freight-quotes-fedex-freight-edition/ltl-freight-quotes-for-customers-of-fedex-freight-341-unauthenticated-sql-injection 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder/popup-builder-410-sql-injection 2022-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-load-more/ajax-load-more-701-authenticated-administrator-stored-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/super-testimonial/testimonials-free-26-pro-107-authenticated-administrator-stored-cross-site-scripting 2022-10-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xcloner-backup-and-restore/backup-restore-and-migrate-wordpress-sites-with-the-xcloner-plugin-311-directory-traversal 2014-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beacon-by/beacon-lead-magnets-and-lead-capture-158-cross-site-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-input-fields-for-woocommerce/product-input-fields-for-woocommerce-1120-unauthenticated-limited-file-upload 2025-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-type-x/product-catalog-simple-184-cross-site-request-forgery 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/injection-guard/injection-guard-121-missing-authorization-to-whitelist-update 2023-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-serial-numbers/serial-numbers-for-woocommerce-license-manager-210-missing-authorization 2024-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-donations/donations-made-easy-smart-donations-4012-authenticated-administrator-sql-injection 2023-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/original-texts-yandex-webmaster/original-texts-yandex-webmaster-118-cross-site-request-forgery 2023-10-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-addons-for-beaver-builder-lite/ultimate-addons-for-beaver-builder-lite-157-authenticated-contributor-stored-cross-site-scripting-via-advanced-icons-widget 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nmedia-user-file-uploader/frontend-file-manager-182-unauthenticated-stored-cross-site-scripting 2021-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/frontend-dashboard/frontend-dashboard-221-authenticated-subscriber-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-transliteration/google-transliteration-172-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ibryl-switch-user/ibryl-switch-user-101-authenticated-subscriber-privilege-escalation-via-account-takeover 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-abandoned-cart-pro/abandoned-cart-lite-for-woocommerce-520-and-abandoned-cart-pro-for-woocommerce-7130-stored-cross-site-scripting 2019-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premmerce-user-roles/premmerce-user-roles-1013-authenticated-administrator-stored-cross-site-scripting 2025-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ecommerce-paypal/easy-paypal-buy-now-button-19-unauthenticated-open-redirect 2024-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multifox-plus/multifox-plus-116-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dobsondev-shortcodes/dobsondev-shortcodes-2112-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modula-best-grid-gallery/modula-image-gallery-photo-grid-video-gallery-21418-authenticated-author-php-object-injection 2026-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-1378-unauthenticated-arbitrary-file-upload 2023-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot/ai-chatbot-489-and-492-missing-authorization-on-ajax-actions 2023-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-child-pages-shortcode/list-child-pages-shortcode-131-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recentcomments/wp-recentcomments-207-sql-injection 2011-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/buddyboss-theme/buddyboss-theme-2461-cross-site-request-forgery 2024-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementskit/elementskit-pro-360-authenticated-contributor-stored-cross-site-scripting-via-ekit_btn_id 2024-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/newspaper-x/epsilon-framework-themes-various-versions-unauthenticated-plugin-activationdeactivation 2020-10-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weforms/weforms-1613-authenticated-admin-stored-cross-site-scripting 2022-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/privatecontent-free/privatecontent-free-120-authenticated-contributor-stored-cross-site-scripting-via-align-shortcode-attribute 2026-04-07T21:05:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shop-page-wp/shop-page-wp-127-authenticated-cross-site-scripting 2021-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-manager/booking-manager-2028-authenticated-subscriber-server-side-request-forgery 2023-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/workreap/workreap-263-insecure-direct-object-reference 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xili-tidy-tags/xili-tidy-tags-11206-reflected-cross-site-scripting 2025-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-memberships-pro/paid-memberships-pro-301-cross-site-request-forgery 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/movie-booking/movie-booking-115-unauthenticated-arbitrary-file-deletion 2026-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/live-composer-page-builder/live-composer-free-wordpress-website-builder-202-authenticated-contributor-dom-based-stored-cross-site-scripting 2025-12-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/show-visitor-ip-address/show-visitor-ip-address-02-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/evergreen-content-poster/evergreen-content-poster-auto-post-and-schedule-your-best-content-to-social-media-144-missing-authorization-to-unauthenticated-arbitrary-post-deletion 2025-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/canto/canto-306-remote-file-inclusion-to-code-execution 2024-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-polls/wp-polls-273-cross-site-scripting 2016-07-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accessibe/web-accessibility-by-accessibe-211-unauthenticated-sensitive-information-exposure 2026-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ko-fi-button/ko-fi-button-132-authenticated-administrator-stored-cross-site-scripting 2023-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insert-special-characters/ansi-regex-211-301-400-411-500-501-600-601-regular-expression-denial-of-service-redos 2021-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-espresso-free/event-espresso-freelite-313712l-unauthenticated-sql-injection 2019-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jobwp/jobwp-243-cross-site-request-forgery 2025-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-poll/liquidpoll-advanced-polls-for-creators-and-brands-3368-missing-authorization-via-activate_addon 2023-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iwp-client/infinitewp-client-1111-authenticated-subscriber-sensitive-information-exposure 2023-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multiple-pages-generator-by-porthas/multiple-page-generator-plugin-mpg-340-cross-site-request-forgery 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kopatheme/kopa-framework-135-cross-site-request-forgery 2023-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-flash-video/simple-flash-video-17-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-gateway-gocardless/woocommerce-gocardless-gateway-256-unauthenticated-insecure-direct-object-reference 2023-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wppm/wp-plugin-manager-wppm-164b-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tagembed-widget/tagembed-58-missing-authorization 2024-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/xstore/xstore-938-reflected-cross-site-scripting 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforo/wpforo-forum-249-authenticated-susbscriber-sql-injection 2025-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-members/wp-members-membership-plugin-3542-authenticated-subscriber-arbitrary-shortcode-execution-via-profile-names 2025-09-08T16:23:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-chrono/wp-chrono-154-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-store-kit/ultimate-store-kit-elementor-addons-240-unauthenticated-php-object-injection 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mimo-woocommerce-order-tracking/mimo-woocommerce-order-tracking-102-missing-authorization-to-authenticated-contributor-stored-cross-site-scripting 2024-06-18T14:42:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/directorist/directorist-784-missing-authorization-to-unauthenticated-settings-change 2024-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/finale-woocommerce-sales-countdown-timer-discount/finale-lite-2180-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-language-translator/google-language-translator-609-reflected-cross-site-scripting 2021-07-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/export-users/export-users-to-csv-14-csv-injection 2019-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/xstore/xstore-964-unauthenticated-arbitrary-shortcode-execution 2026-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-facebook-messenger/live-chat-with-facebook-messenger-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/magicform/magicform-wordpress-form-builder-162-missing-authorization 2025-01-31T18:12:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/related-posts/related-posts-181-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/snazzy-maps/snazzy-maps-114-multiple-cross-site-scripting 2018-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sala/sala-startup-saas-wordpress-theme-114-unauthenticated-privilege-escalation-via-password-resetaccount-takeover 2025-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-digital-content-delivery-with-drm-flickrocket/woocommerce-digital-content-delivery-incl-drm-flickrocket-475-reflected-cross-site-scripting 2025-01-06T16:27:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chart-builder/chartify-wordpress-chart-plugin-359-missing-authentication-for-administrative-function 2025-10-07T16:43:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reflex-gallery/reflex-gallery-143-cross-site-scripting 2021-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zedity/zedity-the-layout-free-content-editor-251-reflected-cross-site-scripting 2014-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webinar-ignition/webinarignition-3050-authenticatedsubscriber-php-object-injection 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-views-query-and-display-post-page/content-views-362-authenticatedadministrator-stored-cross-site-scripting-via-settings 2024-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-popups-lite/wp-popups-2147-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2022-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailchimp-for-wp/mailchimp-for-wordpress-4916-authenticated-administrator-stored-cross-site-scripting 2024-09-20T20:24:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bit-form/contact-form-by-bit-form-multi-step-form-calculation-contact-form-payment-contact-form-custom-contact-form-builder-2152-authenticated-administrator-improper-input-validation-via-iconupload-function-to-arbitrary-file-read 2024-10-10T19:11:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cost-calculator-builder/cost-calculator-builder-3532-authenticated-subscriber-missing-authorization-via-get_cc_ordersupdate_order_status-functions 2025-10-03T14:11:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/prismatic/prismatic-373-unauthenticated-stored-cross-site-scripting-via-prismatic_encoded-pseudo-shortcode 2026-04-15T18:26:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integracao-rd-station/rd-station-532-authenticated-contributor-stored-cross-site-scripting 2024-09-04T21:25:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cbxgooglemap/cbx-map-for-google-map-openstreetmap-1111-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easycart/shopping-cart-ecommerce-store-572-authenticated-contributor-sql-injection-via-model_number-parameter 2024-08-19T11:55:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-currency-switcher/fox-145-authenticated-shop-manager-sql-injection 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-5914-authenticated-contributor-store-cross-site-scripting-via-widget-url-attribute 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-text-to-speech/ai-text-to-speech-303-missing-authorization 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor-pro/tutor-lms-pro-272-missing-authorization-to-authenticated-subscriber-insecure-direct-object-reference 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simply-rets/simplyrets-real-estate-idx-2113-authenticated-contributor-stored-cross-site-scripting 2025-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/petsland/pets-land-128-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-knowledgebase/wp-knowledgebase-134-cross-site-request-forgery 2023-10-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-download-counter/simple-download-counter-16-authenticated-contributor-stored-cross-site-scripting 2023-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/disqus-comment-system/disqus-comment-system-279-multiple-cross-site-request-forgery 2014-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforms-lite/wpforms-easy-form-builder-for-wordpress-contact-forms-payment-forms-surveys-more-11004-missing-authorization 2026-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-popup-banners/wp-popup-banners-125-authenticated-subscriber-sql-injection-via-value 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/betheme/betheme-2662-missing-authorization-to-post-status-change 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bwl-advanced-faq-manager/bwl-advanced-faq-manager-203-authenticated-administrator-sql-injection 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bit-form/bit-form-22110-authenticated-administrator-sql-injection 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-prism-syntax-highlighter/easy-prism-syntax-highlighter-102-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-05-26T17:26:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-elementor-page-builder/the-plus-addons-for-elementor-pro-419-the-plus-addons-for-elementor-206-authenticated-contributor-arbitrary-file-read 2021-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-ithemes-security-extension/mainwp-ithemes-security-extension-411-missing-authorization-to-arbitrary-plugin-activation 2023-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/task-manager-pro/task-manager-pro-131-blind-sql-injection 2017-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/goqmieruca/goqmieruca-100-reflected-cross-site-scripting 2024-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-maps-easy/easy-google-maps-11118-authenticated-author-xml-entity-injection 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-best-elementor-templates-widgets-kits-woocommerce-builders-5923-authenticated-contributor-stored-cross-site-scripting 2024-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/debug/debug-110-cross-site-request-forgery 2024-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-contact-form-the-drag-and-drop-form-builder-for-wordpress-3313-cross-site-scripting 2018-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bigmart-elements/bigmart-elements-103-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elfsight-pricing-table/pricing-table-201-missing-authorization 2024-07-08T20:06:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-info-page/wp-139-authenticated-administrator-stored-cross-site-scripting 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/6.9/wordpress-691-authenticated-author-xml-external-entity-injection-via-getid3-library-media-upload 2026-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-bannerRotator/allinone-banner-rotator-38-authenticated-contributor-sql-injection 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pawfriends/pawfriends-pet-shop-and-veterinary-wordpress-13-authenticated-subscriber-insecure-direct-object-reference 2026-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/coleo/coleo-117-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-localization/quick-localization-010-reflected-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/rife-free/rife-free-2418-cross-site-request-forgery-to-notice-dismissal 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforo/wpforo-forum-246-authenticated-subscriber-insecure-direct-object-reference 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jquery-collapse-o-matic/collapse-o-matic-1855-authenticated-contributor-stored-cross-site-scripting 2023-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-491-stored-cross-site-scripting-via-language 2017-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iphone-webclip-manager/iphone-webclip-manager-05-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cubewp-forms/cubewp-forms-all-in-one-form-builder-111-unauthenticated-stored-cross-site-scripting 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nmedia-user-file-uploader/frontend-file-manager-plugin-234-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-file-renaming 2025-11-24T19:15:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zip-attachments/zip-attachments-16-missing-authorization-to-limited-file-deletion 2025-10-14T19:35:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modal-dialog/modal-dialog-3516-authenticated-admin-remote-code-execution 2026-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/caldera-forms/caldera-forms-1591-cross-site-scripting 2018-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eshop/eshop-6314-multiple-sql-injections 2016-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-subscribe/quick-subscribe-171-cross-site-request-forgery-to-arbitrary-settings-update-and-stored-cross-site-scripting 2022-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/winterlock/activity-log-for-wordpress-127-missing-authorization 2026-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pearsonspecter/pearson-specter-1113-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/motors/motors-5682-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-installation 2025-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mass-messaging-in-buddypress/mass-messaging-in-buddypress-221-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/insurance/insurance-35-authenticated-subscriber-php-object-injection 2025-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ad-guru/wp-ad-guru-banner-ad-responsive-popup-popup-maker-ad-rotator-more-254-reflected-cross-site-scripting 2024-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-content-pilot/content-pilot-217-missing-authorization 2025-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alt-manager/alt-manager-161-missing-authorization 2023-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/delucks-seo/delucks-seo-218-stored-cross-site-scripting 2019-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/job-board-manager/job-board-manager-2160-reflected-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/donate-me/donate-me-125-authenticated-subscriber-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/blueprint/blueprint-115-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/datasets-manager-by-arttia-creative/datasets-manager-by-arttia-creative-15-unauthenticated-arbitrary-file-upload 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nd-booking/hotel-booking-37-authenticated-contributor-local-file-inclusion 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/stockholm/stockholm-96-unauthenticated-local-file-inclusion 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mappress-google-maps-for-wordpress/mappress-maps-for-wordpress-2854-authenticated-contributor-sql-injection-via-get_maps 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpop-elementor-addons/wpoperation-elementor-addons-119-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-b2b-for-woocommerce/all-in-one-b2b-for-woocommerce-103-unauthenticated-privilege-escalation 2023-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paypal-payment-button-by-vcita/online-payments-get-paid-with-paypal-square-stripe-3200-authenticated-contributor-stored-cross-site-scripting 2025-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/persuasion/persuasion-24-arbitrary-file-deletion 2013-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/passwordless-login/passwordless-login-112-authenticated-subscriber-stored-cross-site-scripting 2024-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simplemodal/simple-modal-033-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-login/quick-social-login-146-authenticated-contributor-stored-cross-site-scripting 2025-10-14T19:35:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integration-with-hubspot-forms/integration-with-hubspot-forms-122-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-03-20T15:09:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/af-tell-a-friend/af-tell-a-friend-14-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js-multihotel/js-multi-hotel-221-reflected-cross-site-scripting 2014-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/storecontrl-wp-connection/storecontrl-woocommerce-413-unauthenticated-arbitrary-file-download 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexmls-idx/flexmls-idx-plugin-31422-reflected-cross-site-scripting 2024-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulk-change/bulk-change-of-posts-terms-and-post-types-10-reflected-cross-site-scripting 2016-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ht-mega-for-elementor/ht-mega-absolute-addons-for-elementor-255-authenticated-contributor-stored-cross-site-scripting-via-video-player-widget-settings 2024-06-25T13:45:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventon-rsvp/rsvp-events-294-reflected-cross-site-scripting 2023-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stackable-ultimate-gutenberg-blocks/stackable-3181-missing-authorization 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/project-status/project-status-16-reflected-cross-site-scripting 2021-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-code-highlightjs/wp-code-highlightjs-063-cross-site-scripting 2019-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-blocks/gutenberg-essential-blocks-page-builder-for-gutenberg-blocks-patterns-571-authenticated-contributor-stored-cross-site-scripting 2025-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/generate-pdf-using-contact-form-7/generate-pdf-using-contact-form-7-412-cross-site-request-forgery 2024-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/liveforms/live-forms-484-missing-authorization-to-authenticated-subscriber-settings-update 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2110-authenticated-subscriber-profile-privacy-setting-bypass 2025-12-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mailgun-smtp/wp-mailgun-smtp-107-missing-authorization 2025-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-readme-parser/plugin-readme-parser-1315-authenticated-contributor-stored-cross-site-scripting-via-target-parameter 2025-08-14T20:11:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-301-and-302-redirect/advanced-301-and-302-redirect-169-unauthenticated-sql-injection 2026-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/alliance/alliance-311-unauthenticated-local-file-inclusion 2026-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/stockholm/stockholm-9141-authenticated-contributor-stored-cross-site-scripting 2025-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reciply/reciply-plugin-118-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mail-masta/mail-masta-10-sql-injection-via-camp_id-parameter 2017-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arconix-shortcodes/arconix-shortcodes-2114-authenticated-contributor-stored-cross-site-scripting 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/permalink-manager/permalink-manager-lite-244-missing-authorization-to-unauthenticated-sensitive-information-exposure 2024-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customer-area/wp-customer-area-834-authenticated-subscriber-arbitrary-file-readdeletion-via-ajax_attach_file 2026-04-17T04:24:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videos-on-admin-dashboard/videos-on-admin-dashboard-114-cross-site-scripting 2020-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobsearch/jobsearch-259-reflected-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enhanced-e-commerce-for-woocommerce-store/all-in-one-google-analytics-pixels-and-product-feed-manager-for-woocommerce-523-cross-site-request-forgery 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-presenter/simple-presenter-151-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/z-downloads/z-downloads-1117-authenticated-administrator-stored-cross-site-scripting 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/board-election/board-election-101-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elite-notification/elite-notification-sales-popup-social-proof-fomo-woocommerce-15-missing-authorization 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rsvpmaker/rsvpmaker-1065-unauthenticated-stored-cross-site-scripting-via-email 2023-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/invento/invento-architecture-building-agency-template-2015-05-15-sensitive-information-disclosure 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-variation-gallery/variation-images-gallery-for-woocommerce-233-reflected-cross-site-scripting-via-style 2023-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-autokeyword/wp-autokeyword-10-missing-authorization-to-arbitrary-content-deletion 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/updraftplus/updraftplus-wordpress-backup-plugin-1229-reflected-cross-site-scripting 2022-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ameliabooking/booking-for-appointments-and-events-calendar-amelia-1093-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fitness-calculators/fitness-calculators-plugin-208-authenticated-administrator-stored-cross-site-scripting-via-admin-settings 2023-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-content-construction-kit/simple-custom-post-type-custom-field-103-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-search-to-menu/ivory-search-5515-authenticated-administrator-stored-cross-site-scripting-via-menu_title-and-menu_magnifier_color-settings 2026-06-26T12:57:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/taboola/taboola-201-cross-site-request-forgery-to-plugin-settings-update 2023-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booktics/booktics-1016-missing-authorization-to-addon-plugin-installation 2026-03-09T13:22:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/patiotime/patiotime-21-unauthenticated-local-file-inclusion 2026-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/editor-wysiwyg-background-color/editor-wysiwyg-background-color-10-missing-authorization 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ads-for-wp/google-adsense-banner-ads-by-adsforwp-1928-cross-site-request-forgery 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/permalinks-migration-plugin-for-wordpress/deans-permalinks-migration-10-cross-site-request-forgery-to-cross-site-scripting 2008-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-quick-contact-us/wp-quick-contact-us-10-cross-site-request-forgery-to-settings-update 2026-02-13T18:28:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-logging-service/wordpress-logging-service-154-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-photo-feed-widget/widgets-for-social-photo-feed-18-missing-authentication-to-unauthenticated-plugin-settings-accessupdate-via-trustindex_feed_hook_instagram-rest-api-endpoints 2026-05-01T15:55:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-elementor-page-builder/the-plus-addons-for-elementor-542-authenticated-contributor-stored-cross-site-scripting-via-countdown-widget 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/consulting-elementor-widgets/consulting-elementor-widgets-130-unauthenticated-local-file-inclusion 2024-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/suretriggers/suretriggers-connect-all-your-plugins-apps-tools-automate-everything-1046-authenticated-contributor-stored-cross-site-scripting-via-trigger-link-shortcode 2024-06-03T18:02:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-category-slider-grid/category-slider-for-woocommerce-1415-missing-authorization-via-notice-dismissal-functionality 2023-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/frappe/frapp-18-unauthenticated-local-file-inclusion 2026-01-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/indeed-membership-pro/indeed-membership-pro-73-86-missing-authorization-checks 2020-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/directorist/directorist-771-csv-injection 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wellspring/wellspring-28-unauthenticated-local-file-inclusion 2026-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bold-page-builder/bold-page-builder-541-authenticated-contributor-stored-cross-site-scripting 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widget-manager-light/widget-manager-light-118-missing-authorization 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-order-statuses-woocommerce/custom-order-status-for-woocommerce-230-cross-site-request-forgery 2024-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bfres/bfres-121-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpglobus/wpglobus-multilingual-everything-196-cross-site-scripting-via-wpglobus_optionenabled_languages 2018-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/semantic-shortcode/semantic-shortcode-101-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-maker/quiz-maker-6583-unauthenticated-sql-injection-via-ays_questions-parameter 2024-06-24T20:09:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-rocket-extension/mainwp-rocket-extension-403-missing-authorization-to-arbitrary-plugin-activation 2023-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/lawyer-landing-page/lawyer-landing-page-124-cross-site-request-forgery-to-notice-dismissal 2024-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lawyer-directory/lawyer-directory-134-missing-authorization 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-gateway-stripe/woocommerce-stripe-payment-gateway-1070-missing-authorization-to-unauthenticated-order-status-manipulation-via-order-parameter 2026-06-15T21:08:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dentalux/dentalux-dentist-healthcare-site-template-33-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cforms2/cformsii-14132-cross-site-scripting 2017-04-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-crontrol/wp-crontrol-1170-1191-authenticated-administrator-blind-server-side-request-forgery 2025-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-embed-code/code-embed-24-authenticated-contributor-stored-cross-site-scripting 2024-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/daily-prayer-time-for-mosques/daily-prayer-time-20220301-unauthenticated-sql-injection 2022-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seedprod-coming-soon-pro-5/seedprod-pro-6195-authenticated-contributor-stored-cross-site-scripting 2026-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/felan-framework/felan-framework-114-hardcoded-credentials 2025-10-15T18:07:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/renden/renden-181-authenticated-contributor-stored-cross-site-scripting-via-post-title 2026-02-18T15:22:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eg-series/eg-series-211-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-05-14T14:24:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-front-end-profile/wp-frontend-profile-121-cross-site-request-forgery 2020-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/farazsms/-273-reflected-cross-site-scripting 2026-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coupon-creator/coupon-creator-31-cross-site-request-forgery-bypass 2020-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-live-chat-support/wp-live-chat-support-8005-stored-cross-site-scripting 2018-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userswp/userswp-1215-missing-authorization 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-address-encoder/email-address-encoder-1022-authenticated-contributor-stored-cross-site-scripting 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/windsor/windsor-250-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-abandoned-cart/abandoned-cart-lite-for-woocommerce-585-cross-site-request-forgery-bypass 2021-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visual-portfolio/visual-portfolio-photo-gallery-post-grid-332-authenticated-author-stored-cross-site-scripting-via-title_tag-parameter 2024-05-14T11:31:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/metro-magazine/metro-magazine-141-missing-authorization 2026-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lmsace-connect/lmsace-connect-34-missing-authorization 2025-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kuteshop/kuteshop-429-authenticated-contributor-local-file-inclusion 2026-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spin360/spin-360-deg-and-3d-model-viewer-127-authenticated-contributor-stored-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/schema-and-structured-data-for-wp/schema-structured-data-for-wp-amp-133-authenticated-contributor-stored-cross-site-scripting-via-url-attribute 2024-07-16T18:46:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/marquee-addons-for-elementor/marqueeaddons-243-authenticated-contributor-stored-cross-site-scripting-via-testimonial-marquee-widget 2025-12-12T19:49:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-351-stored-cross-site-scripting 2013-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comparison-slider/comparison-slider-105-missing-authorization 2024-05-29T19:51:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-share-buttons-by-supsystic/social-share-buttons-by-supsystic-223-missing-authorization 2022-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tlp-food-menu/food-menu-restaurant-menu-online-ordering-for-woocommerce-514-missing-authorization-to-authenticated-subscriber-settings-update 2025-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-472-cross-site-scripting 2017-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accounting-for-woocommerce/accounting-for-woocommerce-168-unauthenticated-local-file-inclusion 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/angel/angel-fashion-model-agency-wordpress-cms-theme-323-authenticated-subscriber-stored-cross-site-scripting 2025-11-12T20:19:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-facebook-reviews/wp-review-slider-121-authenticated-subscriber-sql-injection 2023-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-grid/post-grid-combo-36-gutenberg-blocks-2264-authenticated-contributor-cross-site-scripting 2023-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-s3/wordpress-amazon-s3-plugin-15-reflected-cross-site-scripting 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/church-admin/church-admin-34134-cross-site-request-forgery-leading-to-plugin-backup-disclosure 2022-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-forms/contact-forms-by-cimatti-160-cross-site-request-forgery-via-accua_forms_list_page_table 2023-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sogrid/sogrid-152-cross-site-request-forgery-to-arbitrary-options-update 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/http-https-remover/inisev-plugins-various-versions-cross-site-request-forgery-on-handle_installation-function 2023-07-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nex-forms-express-wp-form-builder/nex-forms-8715-authenticated-admin-sql-injection 2024-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/viet-affiliate-link/viet-affiliate-link-12-authenticated-administrator-stored-cross-site-scripting 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/filmix/filmix-11-reflected-cross-site-scripting 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar/the-events-calendar-6159-missing-authorization-to-authenticated-subscriber-draft-event-titleqr-code-exposure 2025-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ipushpull/live-updates-from-excel-232-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sina-extension-for-elementor/sina-extension-for-elementor-357-authenticated-contributor-sensitive-information-exposure-via-sina-modal-box-widget-elementor-template 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sparkpost/sparkpost-327-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/jupiter/jupiter-theme-6101-authenticated-arbitrary-plugin-deletion 2022-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-social-buttons/simple-social-media-share-buttons-510-unauthenticated-password-protected-post-disclosure 2023-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fg-joomla-to-wordpress/fg-joomla-to-wordpress-4202-sensitive-information-exposure 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-social-icons/easy-social-icons-324-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/skip-to/skip-to-200-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/surveyjs/surveyjs-drag-drop-wordpress-form-builder-to-create-style-and-embed-multiple-forms-of-any-complexity-252-cross-site-request-forgery-to-survey-renaming 2026-01-23T20:33:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duplicate-post-and-page/duplicate-page-and-post-10-authenticated-contributor-sql-injection 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-plugins-dashboard/download-plugins-and-themes-from-dashboard-150-unauthenticated-stored-cross-site-scripting 2019-10-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-pug/hubbub-lite-1310-unauthenticated-information-exposure 2024-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/opti-marketing/opti-marketing-209-unauthenticated-sql-injection 2024-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wcp-openweather/wcp-openweather-250-reflected-cross-site-scripting-via-tab 2023-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp-timetable/timetable-and-event-schedule-by-motopress-241-unauthorised-event-timeslot-update 2021-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-addons-for-elementor-best-elementor-addons-with-ready-templates-blocks-widgets-and-woocommerce-builder-5112-authenticated-contributor-dom-based-stored-cross-site-scripting 2025-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-with-a-meeting-scheduler-by-vcita/contact-form-builder-by-vcita-4104-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcf7-redirect/redirection-for-contact-form-7-233-authenticated-arbitrary-post-deletion 2021-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/speedycache/speedycache-112-authenticated-subscriber-server-side-request-forgery 2023-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/localize-remote-images/localize-remote-images-109-cross-site-request-forgery-via-admin-menu 2023-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/interactions/interactions-create-interactive-experiences-in-the-block-editor-131-authenticated-contributor-stored-cross-site-scripting 2026-01-27T17:57:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/speakout/speakout-email-petitions-214151-unauthenticated-sql-injection 2022-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/labtools/labtools-10-missing-authorization 2021-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-auto-affiliate-links/auto-affiliate-links-646-authenticated-admin-sql-injection 2024-09-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailchimp-subscribe-sm/mailchimp-subscribe-forms-4093-open-redirect 2023-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theasys/theasys-101-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-424-cross-site-scripting-via-widget-title 2015-08-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/password-protected/password-protected-266-authenticated-admin-stored-cross-site-scripting 2024-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-elements/jetelements-for-elementor-2712-authenticated-contributor-stored-cross-site-scripting 2025-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pods/pods-2441-2726-authenticated-stored-cross-site-scripting 2021-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iamport-payment/-1119-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-vibes/form-vibes-database-manager-for-forms-1412-missing-authorization-in-multiple-functions 2024-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpextended/the-ultimate-wordpress-toolkit-wp-extended-3012-unauthenticated-sql-injection-via-login-attempts-module 2025-01-17T19:59:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/notification-for-telegram/notification-for-telegram-331-missing-authorization-to-authenticated-subscriber-send-telegram-test-message 2024-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-piwik/wp-matomo-integration-wp-piwik-1026-cross-site-request-forgery 2022-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/implied-cookie-consent/implied-cookie-consent-13-reflected-cross-site-scripting 2025-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdirectorykit/wp-directory-kit-122-missing-authorization-to-plugin-installation-settings-changedelete-demo-import-directory-kit-deletion-via-wdk_public_action 2023-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-addon/ppom-product-addons-custom-fields-for-woocommerce-33018-missing-authorization 2026-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aspose-cloud-ebook-generator/aspose-cloud-ebook-generator-10-directory-traversal 2015-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-media-replace/easy-media-replace-013-authenticated-author-arbitrary-file-deletion 2023-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-4263-authenticatedlp-instructor-stored-cross-site-scripting 2024-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/penci-recipe/penci-recipe-40-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-addons/master-addons-for-elementor-203-authenticatedcontributor-stored-cross-site-scripting 2023-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/greenshift-animation-and-page-builder-blocks/greenshift-animation-and-page-builder-blocks-499-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/w3-total-cache-213-reflected-cross-site-scripting-via-extension 2021-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userfeedback-lite/user-feedback-109-unauthenticated-cross-site-scripting 2023-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-ajax-chat/simple-ajax-chat-20251121-unauthenticated-information-exposure 2026-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/traveler/traveler-326-authenticated-subscriber-sql-injection 2025-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visualizer/visualizer-376-reflected-cross-site-scripting 2022-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliates-manager/affiliates-manager-2930-sensitive-information-exposure-via-log-file 2023-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geo-mashup/geo-mashup-11318-unauthenticated-time-based-sql-injection-via-object_ids-parameter 2026-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/drag-and-drop-multiple-file-upload-for-woocommerce/drag-and-drop-multiple-file-upload-for-woocommerce-110-unauthenticated-stored-cross-site-scripting 2023-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iq-block-country/iq-block-country-1218-country-blocking-bypass 2022-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/agp-font-awesome-collection/agp-font-awesome-collection-324-cross-site-request-forgery 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/twitter-posts-to-blog/twitter-posts-to-blog-11125-missing-authorization-to-unauthenticated-plugin-settings-update 2026-02-10T20:03:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mlm/wp-mlm-unilevel-40-unauthenticated-privilege-escalation 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nextcart-woocommerce-migration/next-cart-store-to-woocommerce-migration-392-reflected-cross-site-scripting 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-upload/wordpress-file-upload-wordpress-file-upload-pro-4191-authenticated-administrator-path-traversal 2023-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-announcements/wp-announcements-18-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/audiocase/audiocase-121-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exchange-rates/exchange-rates-125-authenticated-contributor-stored-cross-site-scripting 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ablocks/ablocks-wordpress-gutenberg-blocks-161-authenticated-contributor-stored-cross-site-scripting 2025-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wooemailreport/woocommerce-email-report-24-unauthenticated-cross-site-scripting 2023-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-wp-events/simple-wp-events-1817-unauthenticated-arbitrary-file-deletion 2025-04-07T15:52:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/case-theme-user/case-theme-user-104-unauthenticated-local-file-inclusion 2025-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/the-conference/the-conference-120-cross-site-request-forgery-to-notice-dismissal 2024-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/robo-gallery/photo-gallery-images-slider-in-rbs-image-gallery-2014-remote-code-execution 2016-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpbookit/wpbookit-107-missing-authorization 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mtouch-quiz/mtouch-quiz-307-cross-site-scripting 2014-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formforall/contact-form-form-for-all-12-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addon-elements-for-elementor-page-builder/elementor-addon-elements-1131-authenticated-contributor-stored-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gtmetrix-for-wordpress/gtmetrix-for-wordpress-046-reflected-cross-site-scripting-via-report_id-and-event_id 2023-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/realteo/realteo-real-estate-plugin-by-purethemes-128-authentication-bypass-via-do_register_user 2025-03-13T22:09:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bookalet/bookalet-103-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/siteorigin-panels/page-builder-by-siteorigin-2310-authenticated-contributor-stored-cross-site-scripting-via-row-label-parameter 2025-01-13T21:46:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-meta/user-meta-242-authenticated-admin-cross-site-scripting 2022-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/primer-mydata/primer-mydata-for-woocommerce-428-unauthenticated-path-traversal 2026-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/classified-listing/classified-listing-ai-powered-classified-ads-business-directory-plugin-534-authenticated-subscriber-sensitive-data-exposure 2026-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mwp-skype/wow-skype-buttons-403-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/mags/mags-116-unauthenticated-local-file-inclusion 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-965-cross-site-request-forgery-to-settings-update 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/showeblogin-facebook-page-like-box/showeblogin-social-70-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nmedia-user-file-uploader/frontend-file-manager-215-missing-authorization-to-unauthenticated-arbitrary-post-deletion 2025-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mass-delete-unused-tags/mass-delete-unused-tags-200-cross-site-request-forgery-via-plugin_mass_delete_unused_tags_init 2023-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-svg/wp-svg-09-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restrict-content/membership-plugin-restrict-content-3220-unauthenticated-privilege-escalation-via-rcp_level 2026-03-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leadin/hubspot-crm-email-marketing-live-chat-forms-analytics-11122-authenticated-contributor-stored-cross-site-scripting-via-hubspot-meeting-widget 2024-08-29T15:39:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-pages-shortcode/list-pages-shortcode-175-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sql-chart-builder/sql-chart-builder-2372-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/upsell-order-bump-offer-for-woocommerce/upsell-order-bump-offer-for-woocommerce-307-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-lucky-wheel/lucky-wheel-giveaway-1022-authenticated-administrator-remote-code-execution-via-conditional_tags-parameter 2026-02-10T11:56:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/autoshare-for-twitter/autoshare-for-twitter-231-missing-authorization 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/site-offline/site-offline-149-maintenance-mode-bypass 2022-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-site-enhancements-pro/admin-and-site-enhancements-ase-pro-7611-missing-authorization 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/terms-of-service-and-privacy-policy/terms-of-service-privacy-policy-generator-10-authenticated-administrator-stored-cross-site-scripting 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customize-wpadmin/custom-links-on-admin-dashboard-toolbar-33-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bb-bootstrap-cards/cards-for-beaver-builder-112-authenticatedcontributor-stored-cross-site-scripting-via-bootstrapcard-link 2024-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cubewp-framework/cubewp-framework-1123-authenticated-contributor-stored-cross-site-scripting 2025-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/falang/falang-multilanguage-1339-cross-site-request-forgery-via-add_language 2023-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ocean-extra/ocean-extra-222-cross-site-request-forgery-to-arbitrary-plugin-activation 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-pie-maintenance-mode/ezp-maintenance-mode-101-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/schema-and-structured-data-for-wp/schema-structured-data-for-wp-amp-126-missing-authorization-to-recaptcha-key-modification 2024-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addons-for-visual-composer/wpbakery-page-builder-addons-by-livemesh-394-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-05-26T17:34:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-producttables-pro/wbw-product-table-pro-194-unauthenticated-arbitrary-sql-execution 2024-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cubepoints/cubepoints-321-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/winning-portfolio/winning-portfolio-11-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-share-buttons-by-supsystic/social-share-buttons-by-supsystic-223-cross-site-request-forgery-to-settings-update 2022-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/thisway/thisway-170-arbitrary-file-upload 2013-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/streamcast/streamcast-223-authenticated-editor-stored-cross-site-scripting 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bertha-ai-free/bertha-ai-11211-missing-authorization 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mediavine-control-panel/mediavine-control-panel-2102-cross-site-request-forgery-via-render_settings_page 2023-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cforms-plugin/cforms-light-speed-fast-form-builder-300-cross-site-request-forgery 2025-09-26T18:34:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-basic-contact-form/simple-basic-contact-form-20240511-authenticated-admin-stored-cross-site-scripting 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-management/user-management-12-authenticated-subscriber-privilege-escalation 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b-slider/b-slider-gutenberg-slider-block-for-wp-200-authenticated-subscriber-server-side-request-forgery 2025-08-14T14:02:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/christmasify/christmasify-155-cross-site-request-forgery-to-stored-cross-site-scripting 2024-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp_rokbox/wordpress-rokbox-213-denial-of-service 2012-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-table-builder/wp-table-builder-wordpress-table-plugin-2012-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-08-14T19:13:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp2html/wp2html-102-cross-site-request-forgery-to-settings-update 2025-06-12T13:08:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-social-buttons/simple-social-media-share-buttons-320-reflected-cross-site-scripting 2020-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kkprogressbar/kkprogressbar2-free-1142-authenticated-admin-sql-injection 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/afterpay-gateway-for-woocommerce/afterpay-gateway-for-woocommerce-350-reflected-cross-site-scripting 2022-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/encrypted-contact-form/encrypted-contact-form-11-cross-site-scripting 2015-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-discount-rules/discount-rules-for-woocommerce-220-missing-authorization 2020-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-events-calendar-bookings-and-tickets-4341-authenticated-subscriber-php-object-injection 2026-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-php-widget/wp-php-widget-102-full-path-disclosure 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bold-page-builder/bold-page-builder-511-authenticated-contributor-stored-cross-site-scripting 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-blocks/ultimate-blocks-wordpress-blocks-plugin-327-authenticated-contributor-stored-cross-site-scripting 2025-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/custom-community/custom-community-20-2024-stored-cross-site-scripting 2015-03-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/credova-financial/credova_financial-250-cross-site-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/appointify/appointify-108-cross-site-request-forgery 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ni-woo-sales-commission/ni-sales-commission-for-woocommerce-124-missing-authorization-to-authenticated-subscriber-commission-update 2025-01-30T16:50:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-22-arbitrary-file-upload 2007-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-chat/quick-chat-414-sql-injection 2018-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geo-to-lat/geo-to-lat-1019-authenticated-contributor-sql-injection 2026-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qodeblock/plum-spin-wheel-email-pop-up-20-missing-authorization-to-unauthenticated-stored-cross-site-scripting 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/prime-addons-for-elementor/prime-addons-for-elementor-201-authenticated-contributor-insecure-direct-object-reference-via-pae_global_block-shortcode 2025-02-19T21:08:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/emergency-password-reset/emergency-password-reset-93-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/tastyc/tastyc-252-unauthenticated-local-file-inclusion 2025-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf2post/pdf-2-post-240-authenticated-subscriber-remote-code-execution 2025-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/demon-image-annotation/demon-image-annotation-50-improper-input-restriction-validation 2022-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/button-block/button-block-get-fully-customizable-multi-functional-buttons-115-authenticated-contributor-post-disclosure-via-post-duplication 2024-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/greencon/greencon-101-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-simple-paypal-shopping-cart/wordpress-simple-shopping-cart-471-authenticatedadministrator-stored-cross-site-scripting 2024-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simplelife/simplelife-plugin-12-cross-site-scripting 2014-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/folders/folders-unlimited-folders-to-organize-media-library-folder-pages-posts-file-manager-315-missing-authorization-to-authenticated-author-media-replacement 2026-01-07T14:21:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advance-search/advance-search-116-cross-site-request-forgery-to-shortcode-deletion 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-1359-reflected-cross-site-scripting 2023-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-slider/master-slider-responsive-touch-slider-399-authenticatededitor-stored-cross-site-scripting-via-slider-callback 2024-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nirweb-support/nirweb-support-303-missing-authorization 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/password-protect-page/ppwp-password-protect-pages-1915-missing-authorization 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slider-image/responsive-slider-image-slider-slideshow-for-wordpress-270-authenticated-admin-sql-injection 2015-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-tao/track-analyze-amp-optimize-by-wp-tao-13-reflected-cross-site-scripting 2025-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-users-from-csv-with-meta/import-and-export-users-and-customers-1242-authenticatedadministrator-directory-traversal-via-recurring-import-functionality 2023-12-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wired-impact-volunteer-management/wired-impact-volunteer-management-25-authenticated-contributor-stored-cross-site-scripting 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/idbbee/idbbee-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ymc-smart-filter/filter-grids-2833-cross-site-request-forgery 2024-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dsgvo-all-in-one-for-wp/dsgvo-all-in-one-for-wp-39-unauthenticated-stored-cross-site-scripting 2021-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/data-visualizer/data-visualizer-11-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-11T14:23:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/speedycache/speedycache-112-missing-authorization-via-speedycache_create_test_cache 2023-12-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mdc-comment-toolbar/mdc-comment-toolbar-11-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpadcenter/wp-adcenter-ad-manager-adsense-ads-256-authenticated-contributor-stored-cross-site-scripting-via-ad_alignment-attribute 2024-09-05T18:12:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pods/pods-2726-authenticated-stored-cross-site-scripting-via-menu-label-field 2021-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arprice/arprice-413-unauthenticated-sql-injection 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-tracker/email-tracker-526-cross-site-request-forgery 2021-11-01T20:42:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/activedemand/activedemand-0243-cross-site-request-forgery 2024-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailchimp-forms-by-mailmunch/mailchimp-forms-by-mailmunch-322-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/woostify/woostify-242-authenticated-shop-manager-stored-cross-site-scripting 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddyforms/buddyforms-2812-authenticated-editor-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youzify/youzify-106-stored-cross-site-scripting 2021-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gutenverse/gutenverse-ultimate-wordpress-fse-blocks-addons-ecosystem-353-authenticated-contributor-server-side-request-forgery-via-imageurl 2026-05-04T14:51:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/everest-news/everest-news-110-reflected-cross-site-scripting 2023-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fastdup/fastdup-27-authenticated-contributor-path-traversal-via-dir_path-rest-parameter 2026-01-05T14:50:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-lockdown/login-lockdown-protection-211-missing-authorization-to-authenticated-subscriber-arbitrary-ip-whitelisting 2025-05-06T16:12:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/neoforum/neoforum-10-authenticated-administrator-sql-injection 2026-01-10T14:46:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/s2b-ai-assistant/s2b-ai-assistant-chatbot-chatgpt-openai-content-image-generator-178-authenticated-editor-arbitrary-file-upload 2025-11-20T16:50:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fix-multiple-redirects/fix-multiple-redirects-123-reflected-cross-site-scripting 2025-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-tactical-popup/tactical-popup-11-reflected-cross-site-scripting 2025-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/primer-mydata/primer-mydata-for-woocommerce-421-reflected-cross-site-scripting 2024-12-12T16:14:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subpage-view/subpage-list-133-authenticated-contributor-stored-cross-site-scripting 2025-05-02T11:32:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/voice-feedback/voice-feedback-voice-recorder-for-audio-feedback-103-authenticated-subscriber-privilege-escalation 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ibtana-visual-editor/multiple-plugins-and-themes-various-versions-authenticated-contributor-dom-based-stored-cross-site-scripting-via-lightgallery-javascript-library 2025-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/picture-gallery/picture-gallery-1511-authenticated-author-stored-cross-site-scripting 2024-05-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/links-shortcode/links-shortcode-183-authenticated-contributor-stored-cross-site-scripting 2025-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-338-insufficient-restrictions-during-export-personal-data-requests 2018-07-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/autoglot/autoglot-247-reflected-cross-site-scripting 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatic-ban-ip/automatic-ban-ip-107-reflected-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortpixel-adaptive-images/shortpixel-adaptive-images-361-reflected-cross-site-scripting 2023-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/leblix/leblix-24-unauthenticated-local-file-inclusion 2025-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-real-estate/essential-real-estate-522-authenticated-ere-customer-insecure-direct-object-reference 2025-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vikrentcar/vikrentcar-car-rental-management-system-1110-authenticated-admin-stored-cross-site-scripting 2021-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2051-cross-site-request-forgery-and-stored-cross-site-scripting 2019-06-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jobcareer/jobcareer-job-board-responsive-wordpress-theme-24-unauthenticated-arbitrary-password-reset 2018-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/Woo-product-multiaction/woocommerce-product-multi-action-13-unauthenticated-php-object-injection 2025-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/notarius/notarius-legal-advisor-wordpress-theme-19-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/watu/watu-quiz-341-sensitive-information-disclosure 2024-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/payaza/payaza-038-missing-authorization-to-unauthenticated-order-status-update 2025-12-04T17:31:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ibuildapp/ibuildapp-020-reflected-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/categorify/categorify-1074-missing-authorization-in-categorifyajaxclearcategory 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddyforms/frontend-content-forms-for-user-submissions-ugc-2813-authenticated-contributor-stored-cross-site-scripting 2025-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-brands/woocommerce-brands-1645-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userplus/userplus-20-cross-site-request-forgery-to-stored-cross-site-scripting 2023-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/search-everything/search-everything-81-cross-site-request-forgery 2014-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/best-restaurant-menu-by-pricelisto/best-restaurant-menu-by-pricelisto-142-missing-authorization 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-security-hardening/wp-hardening-fix-your-wordpress-security-121-reflected-cross-site-scripting 2021-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-party/illi-link-party-10-cross-site-request-forgery-to-settings-update 2024-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/funnelforms-free/funnelforms-free-38-missing-authorization 2025-12-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-payrexx-gateway/payrexx-payment-gateway-for-woocommerce-315-missing-authorization 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-generator/contact-form-generator-255-reflected-cross-site-scripting 2023-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/whizz/whizz-108-reflected-cross-site-scripting 2016-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ghost/ghost-055-missing-authorization-checks 2016-04-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/footer-putter/footer-putter-117-authenticated-contributor-stored-cross-site-scripting 2024-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sf-booking/service-finder-booking-60-unauthenticated-privilege-escalation 2025-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/css-javascript-toolbox/css-javascript-toolbox-118-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-gutenberg/gutenberg-blocks-331-unauthenticated-local-file-inclusion 2025-07-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/survey-maker/survey-maker-5135-authenticated-administrator-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-database-backup/wp-database-backup-43-cross-site-request-forgery 2016-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/astra/astra-4123-authenticated-contributor-stored-cross-site-scripting-via-post-meta 2026-03-10T17:27:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/billey/billey-216-unauthenticated-local-file-inclusion 2025-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dbview/dbview-055-authenticated-contributor-stored-cross-site-scripting 2025-09-29T15:23:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shiptimize-for-woocommerce/shiptimize-for-woocommerce-3186-missing-authorization-to-authenticated-subscriber-settings-update 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpstickybar-sticky-bar-sticky-header/wpstickybar-sticky-bar-sticky-header-210-reflected-cross-site-scripting 2024-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gamipress/gamipress-gamification-plugin-to-reward-points-achievements-badges-ranks-in-wordpress-761-missing-authorization-to-authenticated-subscriber-information-exposure 2026-01-05T18:53:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cforms2/cformsii-1501-unauthenticated-html-injection-cross-site-request-forgery 2019-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-embed-optimizer/video-embed-optimizer-100-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restaurant-cafe-addon-for-elementor/restaurant-cafe-addon-for-elementor-153-missing-authorization-via-multiple-ajax-functions 2023-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatically-hierarchic-categories-in-menu/automatically-hierarchic-categories-in-menu-207-authenticated-contributor-stored-cross-site-scripting 2025-01-30T00:22:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exact-links/url-shortener-307-unauthenticated-sql-injection 2025-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/soumettre-fr/soumettrefr-213-missing-authorization 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/read-more-login/read-more-login-203-authenticated-administrator-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-csv-importer/import-csv-or-xml-datafeed-with-ease-372-cross-site-request-forgery 2015-05-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kau-boys-backend-localization/backend-localization-2110-cross-site-request-forgery 2023-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/helpgent/helpgent-224-unauthenticated-php-object-injection 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/gutenberg-blocks-with-ai-by-kadence-wp-3236-authenticated-contributor-stored-cross-site-scripting-via-block-link 2024-05-09T18:38:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/asgard/asgard-security-scanner-07-reflected-cross-site-scripting 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-addon-for-ninja-forms/popup-addon-for-ninja-forms-34-authenticated-contributor-stored-cross-site-scripting 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usc-e-shop/welcart-e-commerce-283-authenticated-subscriber-stored-cross-site-scripting 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gf-insightly/gravity-forms-insightly-116-unauthenticated-php-object-injection 2025-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sandbox/sandbox-161-full-path-disclosure 2013-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-whisper/link-whisper-free-090-unauthenticated-stored-cross-site-scripting 2026-05-28T18:06:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking/booking-calendar-891-reflected-cross-site-scripting 2021-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirect-after-login/redirect-after-login-019-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2023-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/mrseo/mr-seo-20-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sailing/sailing-446-authenticated-contributor-local-file-inclusion 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/radio-forge/radio-forge-muses-player-with-skins-25-reflected-cross-site-scripting 2023-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/marketing-automation/marketing-automation-1268-reflected-cross-site-scripting 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/s3-video/s3-video-0982-cross-site-scripting 2013-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/beelove/beelove-honey-production-and-sweets-online-store-wordpress-theme-126-unauthenticated-php-object-injection 2026-03-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youzify/youzify-buddypress-community-user-profile-social-network-membership-plugin-for-wordpress-134-missing-authorization-to-authenticated-subscriber-limited-options-update 2025-01-24T18:53:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bux-woocommerce/bux-woocommerce-123-missing-authorization 2025-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-whisper/link-whisper-free-078-unauthenticated-sensitive-information-exposure 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-blocks/essential-blocks-406-missing-authorization-via-templates 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restrict-content/restrict-content-327-information-exposure-via-legacy-log-file 2023-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-video-gallery/all-in-one-video-gallery-457-authenticated-author-arbitrary-file-upload-via-vtt-upload-bypass 2026-01-15T16:28:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/full-circle/full-circle-0578-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/products-rearrange-woocommerce/product-rearrange-for-woocommerce-122-unauthenticated-sql-injection 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dologin/dologin-security-36-unauthenticated-stored-cross-site-scripting 2023-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp-timetable/timetable-and-event-schedule-by-motopress-2318-author-stored-cross-site-scripting 2021-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ez-form-calculator-premium/ez-form-calculator-wordpress-plugin-21412-reflected-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ba-book-everything/ba-book-everything-168-authenticated-administrator-stored-cross-site-scripting 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/display-during-conditional-shortcode/display-during-conditional-shortcode-12-authenticated-contributor-stored-cross-site-scripting-via-message-parameter 2026-02-17T15:37:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-extra-fields/wordpress-user-extra-fields-166-unauthenticated-arbitrary-file-deletion 2024-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recall/wp-recall-registration-profile-commerce-more-162610-missing-authorization-to-authenticated-subscriber-arbitrary-shortcode-exeuction 2025-03-07T20:52:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusion-builder/fusion-builder-361-avada-761-unauthenticated-server-side-request-forgery 2022-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bruteguard/bruteguard-brute-force-login-protection-014-reflected-cross-site-scripting 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-translitera/wp-translitera-p125-cross-site-request-forgery 2023-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-checkout-field-editor/checkout-field-editor-174-cross-site-request-forgery-to-checkout-fields-update 2023-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-zip-attachments/download-zip-attachments-10-directory-traversal 2015-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-lightbox/responsive-lightbox-gallery-261-unauthenticated-stored-cross-site-scripting 2026-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-custom-codes/add-custom-codes-480-authenticated-author-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/infographic-and-list-builder-ilist/infographic-maker-ilist-437-sql-injection 2022-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor-pro/tutor-lms-pro-398-missing-authorization 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/doofinder-for-woocommerce/doofinder-for-woocommerce-2033-missing-authorization-via-multiple-ajax-actions 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/theaisle/the-aisle-291-unauthenticated-local-file-inclusion 2026-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/icegram/icegram-3124-missing-authorization-to-unauthenticated-message-duplication 2024-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duplicate-wp-page-post/duplicate-page-and-post-27-authenticated-admin-stored-cross-site-scripting 2022-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customer-area/wp-customer-area-813-cross-site-request-forgery 2023-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pearl-header-builder/pearl-139-cross-site-request-forgery 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/15zine/15zine-magazine-newspaper-blog-news-wordpress-theme-330-reflected-cross-site-scripting 2020-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-stickers/social-stickers-229-cross-site-request-forgery-to-stored-cross-site-scripting 2022-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dd-rating/dd-rating-171-authenticated-author-stored-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-engine/jetengine-324-authenticated-contributor-privilege-escalation 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lightbox-block/lightbox-block-1130-authenticated-contributor-stored-cross-site-scripting 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/m-vslider/m-vslider-213-authenticated-admin-sql-injection 2021-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/faqs/faqs-102-authenticated-subscriber-stored-cross-site-scripting 2024-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/banner-system/banner-system-100-missing-authorization 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buy-one-click-woocommerce/buy-one-click-woocommerce-229-missing-authorization-to-authenticated-subscriber-order-deletion 2024-11-12T13:28:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yoco-payment-gateway/yoco-payments-390-unauthenticated-arbitrary-file-read 2026-01-06T20:31:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/colibri-page-builder/colibri-page-builder-10334-authenticated-shop-manager-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/modernhousewife/modern-housewife-1012-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-2172-reflected-cross-site-scripting 2022-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-1911-reflected-cross-site-scripting 2021-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/domain-replace/domain-replace-138-reflected-cross-site-scripting 2022-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-maker/form-maker-by-10web-11526-reflected-cross-site-scripting 2024-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/search-cloud-one/search-cloud-one-225-authenticated-administrator-stored-cross-site-scripting 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hotscot-contact-form/hotscot-contact-form-13-sql-injection 2021-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-custom-links/gallery-custom-links-225-authenticated-author-stored-cross-site-scripting 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inventory-presser/inventory-presser-1526-authenticated-administrator-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dazzlersoft-teams/team-members-showcase-134-authenticated-administrator-stored-cross-site-scripting 2023-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kaya-qr-code-generator/kaya-qr-code-generator-152-authenticatedcontributor-stored-cross-site-scripting-via-url-parameter 2023-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/innovio/innovio-17-authenticated-subscriber-insecure-direct-object-reference 2026-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mediamatic/mediamatic-media-library-folders-281-cross-site-request-forgery 2023-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/albo-pretorio-on-line/albo-pretorio-online-46-reflected-cross-site-scripting-via-errore 2023-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insert-post-ads/insert-post-ads-132-missing-authorization 2024-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-twitter-feeds/easy-twitter-feed-12-cross-site-scripting 2021-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-392-brute-force-of-cross-site-request-forgery-tokens 2014-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-media-gallery/gallery-photo-albums-plugin-13170-authenticated-contributor-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pop-up-pop-up/pop-up-111-missing-authorization-to-settings-change 2022-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/svg-uploads-support/svg-uploads-support-211-authenticated-author-stored-cross-site-scripting-via-svg 2024-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enable-svg/enable-svg-131-cross-site-scripting-via-svg 2022-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-calendar/my-calendar-3423-authenticated-admin-stored-cross-site-scripting-via-events 2024-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking/booking-calendar-10146-authenticated-contributor-stored-cross-site-scripting-via-bookingcalendar-shortcode 2025-12-04T13:08:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/interview/interview-101-authenticated-contributor-sql-injection 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spiffy-calendar/spiffy-calendar-490-event-deletion-via-cross-site-request-forgery 2022-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insert-php/woody-code-snippets-insert-php-css-js-and-headerfooter-scripts-271-authenticated-contributor-remote-code-execution 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/publishpress-authors/publishpress-authors-4101-missing-authorization 2026-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-1350-authenticated-sql-injection-via-tag_id-parameter 2017-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-grid/essential-grid-311-unauthenticated-private-post-disclosure 2024-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nmedia-user-file-uploader/frontend-file-manager-182-authenticated-settings-change-leading-to-arbitrary-file-upload 2021-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/grand-media/gmedia-photo-gallery-164-local-file-inclusion 2015-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hover-video-preview/hover-video-preview-102-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rss-images/wp-rss-images-11-cross-site-request-forgery 2023-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-layouts/custom-layouts-post-product-grids-made-easy-1412-missing-authorization 2025-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpfront-scroll-top/wpfront-scroll-top-205-authenticated-stored-cross-site-scripting 2021-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-registration/event-registration-60202-unauthenticated-stored-cross-site-scripting 2016-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/referral-link-tracker/referral-link-tracker-114-missing-authorization 2025-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/binary-mlm-plan/binary-mlm-plan-50-authenticated-subscriber-insecure-direct-object-reference 2025-10-16T20:57:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-entries/database-for-contact-form-7-wpforms-elementor-forms-138-unauthenticated-stored-cross-site-scripting 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/off-page-seo/off-page-seo-303-reflected-cross-site-scripting 2025-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gift-certificate-creator/gift-certificate-creator-110-reflected-cross-site-scripting-via-receip_address-parameter 2025-04-01T20:30:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pinfinity/pinfinity-192-reflected-cross-site-scripting 2017-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-options-pages/admin-options-pages-097-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jsmol2wp/jsmol2wp-107-cross-site-scripting 2019-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementinvader-addons-for-elementor/elementinvader-addons-for-elementor-131-missing-authorization 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/solar-wizard-lite/solar-wizard-lite-124-authenticated-contributor-stored-cross-site-scripting 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stock-sync-for-woocommerce/stock-sync-for-woocommerce-240-reflected-cross-site-scripting-via-page-parameter 2023-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wholesale-market/wholesale-market-220-information-disclosure-via-unauthenticated-arbitrary-file-download 2022-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ssv-mailchimp/ssv-mailchimp-315-unauthenticated-local-file-inclusion 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sentence-to-seo/sentence-to-seo-keywords-description-and-tags-10-cross-site-request-forgery-to-stored-cross-site-scripting-via-settings-page-parameters 2026-05-19T12:03:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qi-addons-for-elementor/qi-addons-for-elementor-187-authenticated-contributor-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-woo-search/advanced-woo-search-200-information-disclosure 2020-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/indutri/indutri-130-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nix-anti-spam-light/nix-anti-spam-light-004-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-app-banners/smart-app-banners-12-authenticated-contributor-stored-cross-site-scripting-via-size-and-verticalalign-shortcode-attributes 2026-01-06T20:30:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-donation-plugin-and-fundraising-platform-2202-sensitive-information-disclosure 2022-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-user-profiles-groups-and-communities-5954-reflected-cross-site-scripting-via-pm_get_messenger_notification-function 2025-07-15T16:14:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gum-elementor-addon/gum-elementor-addon-132-authenticated-contributor-stored-cross-site-scripting-via-post-meta-widget 2024-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bbp-topic-count/bbp-topic-count-31-authenticated-contributor-stored-cross-site-scripting 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-twitter-feeds/custom-twitter-feeds-a-tweets-widget-or-x-feed-widget-222-authenticated-admin-stored-cross-site-scripting 2024-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-lightbox/responsive-lightbox-246-missing-authorization-via-information-disclosure 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/check-plagiarism/check-plagiarism-20-missing-authorization-to-authenticated-subscriber-settings-update 2025-10-23T19:57:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bookly-responsive-appointment-booking-tool/bookly-2231-authenticatedadministrator-sql-injection 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-menu/admin-menu-plugin-11-reflected-cross-site-scripting 2020-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-elementor-addons/happy-addons-for-elementor-3105-authenticated-contributor-stored-cross-site-scripting-via-html-tags 2024-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ra-qrcode/ra_qrcode-210-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/password-policy-manager/password-policy-manager-204-authenticated-subscriber-privilege-escalation-via-account-takeover 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redux-framework/gutenberg-template-library-redux-framework-4123-cross-site-request-forgery 2020-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pay-per-media-player/pay-per-media-player-124-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-distance-calculator/mk-google-directions-311-authenticated-contributor-stored-cross-site-scripting 2026-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-block-editor/nexter-blocks-404-authenticated-contributor-stored-cross-site-scripting 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/squelch-tabs-and-accordions-shortcodes/squelch-tabs-and-accordions-shortcodes-043-authenticated-contributor-stored-cross-site-scripting-via-accordions-shortcode 2024-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/eventicity/eventicity-15-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.4/wordpress-core-541-authenticated-cross-site-scripting-via-customizer 2020-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-support/awesome-support-635-authenticated-support-manager-php-object-injection 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/expand-maker/read-more-accordion-357-privilege-escalation-via-importdata 2026-05-19T12:12:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forge/forge-front-end-page-builder-146-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/portfolio-filter-gallery/portfolio-gallery-image-gallery-plugin-164-authenticated-contributor-dom-based-stored-cross-site-scripting 2024-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/word-freshener/word-freshener-13-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-simple-paypal-shopping-cart/wordpress-simple-shopping-cart-507-authenticated-contributor-stored-cross-site-scripting 2024-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-migration-duplicator/wordpress-backup-migration-141-missing-authorization-to-settings-and-schedule-modification 2023-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/apartment-management/wpams-440-17-08-2023-authenticated-subscriber-arbitrary-file-upload 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/push-monkey-desktop-push-notifications/push-monkey-pro-web-push-notifications-and-woocommerce-abandoned-cart-39-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/portfolio-manager-powered-by-behance/behance-portfolio-manager-175-authenticated-administrator-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/authentication-and-xmlrpc-log-writer/authentication-and-xmlrpc-log-writer-122-reflected-cross-site-scripting 2025-08-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enhanced-e-commerce-for-woocommerce-store/conversiosio-650-missing-authorization 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-power-bi/power-bi-embedded-for-wordpress-113-authenticated-contributor-stored-cross-site-scripting 2022-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pretty-link/pretty-links-219-unauthenticated-stored-cross-site-scripting-via-track_link 2019-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bootstrap-ultimate/bootstrap-ultimate-149-unauthenticated-limited-local-file-inclusion 2025-01-23T19:34:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-query-console/wp-query-console-10-unauthenticated-remote-code-execution 2024-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/podcast-feed-player-widget/podcast-feed-player-widget-and-shortcode-220-authenticated-contributor-stored-cross-site-scripting 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/finale-woocommerce-sales-countdown-timer-discount/finale-lite-sales-countdown-timer-discount-for-woocommerce-2190-authenticated-contributor-stored-dom-based-cross-site-scripting-via-countdown-timer 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/liquid-chatgpt/ai-engine-for-wordpress-chatgpt-gpt-content-generator-101-authenticated-contributor-arbitrary-file-read 2025-11-24T19:08:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insta-gallery/social-feed-gallery-492-missing-authorization-to-unauthenticated-information-exposure 2025-10-24T18:01:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/plg_novana/plg-novana-plugin-all-versions-sql-injection 2012-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/counter-visitor-for-woocommerce/counter-live-visitors-for-woocommerce-136-unauthenticated-arbitrary-file-deletion-in-wcvisitor_get_block 2025-07-15T18:17:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-filterable-portfolio/responsive-filterable-portfolio-1022-server-side-request-forgery 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dashi/dashi-318-missing-authorization 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/modern/modern-141-cross-site-scripting 2015-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-avatar/paid-membership-plugin-ecommerce-user-registration-form-login-form-user-profile-restrict-content-profilepress-41611-missing-authorization-to-authenticated-subscriber-membership-payment-bypass 2026-04-03T19:47:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-mortgage-calculator/ai-mortgage-calculator-101-authenticated-contributor-local-file-inclusion 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/depicter/popup-and-slider-builder-by-depicter-add-email-collecting-popup-popup-modal-coupon-popup-image-slider-carousel-slider-post-slider-carousel-404-missing-authorization-to-authenticated-contributor-safe-file-type-upload 2025-11-04T17:49:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-calendar/contact-form-7-calendar-301-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/squirrly-seo/geo-plugin-by-squirrly-seo-12416-missing-authorization 2026-06-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elex-helpdesk-customer-support-ticket-system/elex-wordpress-helpdesk-customer-ticketing-system-330-missing-authorization-to-authenitcated-subscriber-to-scheduled-trigger-deletion 2025-11-20T16:58:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dyn-business-panel/dyn-business-panel-100-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/altos-connect/altos-connect-130-cross-site-scripting 2015-06-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brizy/brizy-page-builder-2418-ip-address-spoofing-to-protection-mechanism-bypass 2023-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-booking-system/wp-booking-system-booking-calendar-14-cross-site-scripting 2017-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-wordpress-lms-plugin-432-missing-authentication-to-unauthenticated-course-modification 2026-01-05T19:55:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/parallax-slider-block/parallax-slider-block-125-authenticated-author-stored-cross-site-scripting 2023-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-extra-file-types/wp-extra-file-types-05-cross-site-request-forgery-to-stored-cross-site-scripting 2021-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tourfic/tourfic-21115-authenticated-subscriber-arbitrary-file-upload 2024-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-grid-gallery/video-gallery-vimeo-and-youtube-gallery-115-stored-cross-site-scripting 2021-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jupiterx-core/jupiter-x-core-4141-authenticated-subscriber-stored-cross-site-scripting 2026-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/connections/connections-business-directory-10436-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-images-ape/gallery-images-ape-228-reflected-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-playlist-for-youtube/video-playlist-for-youtube-66-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elisqlreports/ez-sql-reports-shortcode-widget-and-db-backup-52508-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/branda-white-labeling/branda-white-label-branding-free-login-page-customizer-3424-unauthenticated-privilege-escalation-via-account-takeover 2026-01-01T13:29:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jk-html-to-pdf/jk-html-to-pdf-100-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/testimonials-widget/testimonials-widget-351-multiple-authenticated-stored-cross-site-scripting 2020-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/peters-collaboration-e-mails/peters-collaboration-e-mails-220-cross-site-request-forgery 2022-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-snippets/post-snippets-custom-wordpress-code-snippets-customizer-4012-authenticated-contributor-remote-code-execution 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/digital-lottery/digital-lottery-305-unauthenticated-arbitrary-file-upload 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-estimation-form/wp-cost-estimation-9642-missing-authorization-to-arbitrary-file-uploaddelete 2019-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-film-studio/wp-film-studio-134-cross-site-request-forgery-to-arbitrary-plugin-activation 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/athos/athos-19-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/indexisto/indexisto-105-reflected-cross-site-scripting 2016-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/robo-gallery/robo-gallery-3218-unauthenticated-information-exposure 2024-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/emailkit/emailkit-165-authenticated-author-arbitrary-file-read-via-emailkit-editor-template-rest-parameter 2026-05-04T14:47:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recall/wp-recall-registration-profile-commerce-more-162610-unauthenticated-sql-injection 2025-03-07T20:57:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor-premium/unlimited-elements-for-elementor-and-unlimited-elements-for-elementor-premium-20-unauthenticated-stored-cross-site-scripting-via-svg-file-upload 2025-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventon-lite/eventon-wordpress-virtual-event-calendar-plugin-454-pro-227-free-missing-authorization-via-config_virtual_event 2024-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-112-missing-authorization-to-cache-deletion 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simply-schedule-appointments/appointment-booking-calendar-simply-schedule-appointments-booking-plugin-16115-unauthenticated-denial-of-service 2026-05-26T13:07:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/radio-station/radio-station-2512-cross-site-request-forgery 2025-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pretty-link/pretty-links-link-management-branding-tracking-sharing-plugin-156-reflected-cross-site-scripting 2011-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/selar-co-widget/selarco-widget-12-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-memberships-pro/paid-memberships-pro-2127-cross-site-request-forgery-to-level-orders-update 2024-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/estatik/estatik-real-estate-plugin-410-missing-authorization-to-limited-arbitrary-options-update 2023-12-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41170-authenticated-contributor-stored-cross-site-scripting-via-custom_svg-parameter 2026-05-01T21:53:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sfwd-lms/learndash-lms-4102-sensitive-information-exposure-via-api 2024-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/axioma/axioma-premium-responsive-112-information-disclosure 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visitors-traffic-real-time-statistics/visitor-traffic-real-time-statistics-113-cross-site-request-forgery 2019-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/metform/metform-elementor-contact-form-builder-330-authenticated-contributor-stored-cross-site-scripting-via-mf_first_name-shortcode 2023-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widget-countdown/widget-countdown-274-authenticated-contributor-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-splashing-images/splashing-images-211-cross-site-scripting 2018-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cpt-speakers/cpt-speakers-11-authenticated-administrator-stored-cross-site-scripting 2023-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-external-links/external-links-257-cross-site-request-forgery-via-action_admin_action_wpel_dismiss_notice 2023-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/graphina-elementor-charts-and-graphs/graphina-elementor-charts-and-graphs-313-authenticated-contributor-stored-cross-site-scripting 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vdocipher/vdocipher-129-authenticated-contributor-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-slider-3/smart-slider-3-3519-authenticated-contributor-php-object-injection 2022-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/gecko/gecko-60-responsive-shopify-theme-rtl-support-198-reflected-cross-site-scripting 2026-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-coming-soon-page/coming-soon-page-responsive-coming-soon-maintenance-mode-1118-cross-site-scripting-via-logo_width-parameter 2018-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-slider/master-slider-271-cross-site-scripting 2016-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpress/powerpress-11011-authenticatedcontributor-stored-cross-site-scripting-via-media-url 2023-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wicked-folders/wicked-folders-21816-cross-site-request-forgery-via-ajax_save_sort_order 2023-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-pagespeed-insights/google-pagespeed-insights-403-reflected-cross-site-scripting 2022-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/url-media-uploader/url-media-uploader-100-authenticated-author-server-side-request-forgery-via-dns-rebinding 2025-02-27T20:10:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/strong-testimonials/strong-testimonials-323-missing-authorization 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/final-tiles-grid-gallery-lite/image-photo-gallery-final-tiles-grid-258-authenticated-contributor-stored-cross-site-scripting 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.6/wordpress-core-361-swf-and-exe-file-upload 2013-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-event-booking/awesome-event-booking-271-reflected-cross-site-scripting 2024-11-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/data-tables-generator-by-supsystic/data-tables-generator-by-supsystic-11025-missing-authorization 2023-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mg-post-contributors/mg-post-contributors-13-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-pixel/social-pixel-21-authenticated-admin-stored-cross-site-scripting 2024-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-downloader/media-library-downloader-131-missing-authorization 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acf-extended/advanced-custom-fields-extended-0886-admin-sql-injection 2021-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visitors-app/visitors-03-unauthenticated-stored-cross-site-scripting 2021-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/linear/linear-280-authenticated-contributor-stored-cross-site-scripting 2024-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-currency-exchange-rates/wp-currency-exchange-rates-120-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventer/eventer-397-authenticated-subscriber-arbitrary-file-read 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mapsvg-lite-interactive-vector-maps/mapsvg-lite-864-missing-authorization 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/print-invoices-packing-slip-labels-for-woocommerce/woocommerce-pdf-invoices-packing-slips-delivery-notes-and-shipping-labels-442-missing-authorization-to-unauthenticated-settings-reset 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weblizar-pinterest-feeds/weblizar-pin-feeds-112-cross-site-scripting 2018-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bnm-blocks/post-blocks-tools-130-authenticated-author-stored-cross-site-scripting-via-sliderstyle-block-attribute 2026-04-08T09:11:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/marquee-style-rss-news-ticker/marquee-style-rss-news-ticker-320-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/poll-builder/poll-builder-135-authenticated-contributor-stored-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/color-your-bar/color-your-bar-20-authenticated-administrator-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ithemes-sync/solid-central-site-management-backups-security-and-reporting-328-missing-authorization 2026-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kali-forms/contact-form-builder-with-drag-drop-kali-forms-2328-missing-authorization-via-get_log 2023-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/like-box/social-like-box-and-page-by-wpdevart-0839-authenticated-admin-stored-cross-site-scripting 2023-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/limit-login-attempts-plus/limit-login-attempts-plus-110-ip-address-spoofing-to-protection-mechanism-bypass 2024-09-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-elementor-addons/easy-elementor-addons-228-authenticated-contributor-local-file-inclusion 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lbg_radio_player_addon_visual_composer/html5-radio-player-wpbakery-page-builder-addon-25-reflected-cross-site-scripting 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-post-thumbnail/auto-featured-image-auto-post-thumbnail-412-missing-authorization 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetpack/jetpack-130-140-reflected-dom-based-cross-site-scripting 2024-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/watu/watu-quiz-3121-3125-reflected-cross-site-scripting 2019-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beeteam368-extensions/beeteam368-extensions-234-authenticated-subscriber-directory-traversal-to-arbitrary-file-deletion 2025-06-27T14:26:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sensitive-tag-cloud/sensitivetagcloud-141-cross-site-request-forgery 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-carousel/post-grid-post-carousel-list-category-posts-2427-authenticated-editor-stored-cross-site-scripting 2024-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broadstreet/broadstreet-1510-authenticated-contributor-stored-cross-site-scripting-via-zone-parameter 2025-01-24T18:41:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/emerce-core/emerce-core-18-unauthenticated-sql-injection 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cost-of-goods-for-woocommerce/cost-of-goods-product-cost-profit-calculator-for-woocommerce-410-authenticated-contributor-stored-cross-site-scripting 2026-05-12T15:52:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mywebtonet-performancestats/phpmysql-cpu-performance-statistics-121-unauthenticated-php-object-injection 2025-03-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shmapper-by-teplitsa/shmapper-by-teplitsa-150-authenticated-editor-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-editor/wp-editor-126-cross-site-request-forgery 2016-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enteraddons/enter-addons-232-cross-site-request-forgery 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-hide-security-enhancer/wp-hide-security-enhancer-1392-arbitrary-file-download 2017-07-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beautiful-and-responsive-cookie-consent/beautiful-cookie-consent-banner-2100-missing-authorization-to-settings-update 2023-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dforms/dforms-10-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lh-qr-codes/lh-qr-codes-106-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/1-click-migration/1-click-wordpress-migration-plugin-100-free-for-a-limited-time-22-cross-site-request-forgery-to-backup-process-cancellation 2025-02-17T15:40:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/residential-address-detection/residential-address-detection-259-missing-authorization 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/author-box-after-posts/author-box-after-posts-16-authenticated-contributor-stored-cross-site-scripting 2025-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/call-me-now/call-me-now-105-cross-site-request-forgery 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/filester/file-manager-pro-filester-182-authenticated-plugin-settings-update 2024-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-base-booking-of-appointments-services-and-events/wp-base-booking-500-unauthenticated-stored-cross-site-scripting 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stop-spammer-registrations-plugin/anti-spam-spam-protection-block-spam-users-comments-forms-20247-cross-site-request-forgery-to-multiple-administrative-actions 2025-06-05T17:43:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mantenimiento-web/mantenimiento-web-013-authenticated-administrator-stored-cross-site-scripting 2022-10-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leadsnap/leadsnap-123-unauthenticated-php-object-injection-via-ajax 2023-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-polylang-support-for-customizer/add-polylang-support-for-customizer-145-cross-site-request-forgery 2026-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/spreadsheet-price-changer-for-woocommerce-and-wp-e-commerce-light-2437-unauthenticated-privilege-escalation 2025-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cloudsecure-wp-security/cloudsecure-wp-security-147-two-factor-authentication-bypass 2026-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-profile-avatar/wp-user-profile-avatar-102-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/checkout-plugins-stripe-woo/stripe-payments-for-woocommerce-by-checkout-plugins-1410-cross-site-request-forgery 2023-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobhunt/wp-jobhunt-77-missing-authorization-to-authenticated-candidate-stored-cross-site-scripting-via-status 2025-12-20T01:30:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-ideas/post-ideas-2-unauthenticated-sql-injection 2024-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-slimstat/slimstat-analytics-4933-authenticated-subscriber-sql-injection-via-shortcode 2023-03-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chart-builder/chartify-353-cross-site-request-forgery 2025-07-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/isee-products-extractor/isee-products-extractor-213-reflected-cross-site-scripting 2024-12-19T18:34:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/xstore/xstore-964-authenticated-contributor-stored-cross-site-scripting 2026-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nd-travel/travel-management-161-open-redirect 2019-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-maker/form-maker-by-10web-11524-authenticated-subscriber-stored-self-based-cross-site-scripting 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sell-digital-downloads/sell-digital-downloads-227-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masterstudy-lms-learning-management-system-pro/masterstudy-lms-pro-4716-missing-authorization-to-unauthenticated-arbitrary-content-deletion 2025-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-elementor-addons-842-authenticated-editor-sql-injection 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ahathat/ahathat-plugin-16-cross-site-request-forgery-to-aha-page-deletion 2025-05-05T15:46:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oleggo-livestream/oleggo-livestream-026-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bg-book-publisher/bg-book-publisher-125-authenticated-contributor-stored-cross-site-scripting 2025-10-21T20:20:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/getyourguide-ticketing/getyourguide-ticketing-102-authenticated-admin-stored-cross-site-scripting 2022-09-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inseri-core/scientific-and-interactive-blocks-inseri-core-105-missing-authorization 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder-block/popupkit-215-authenticated-subscriber-information-exposure 2025-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-3302-authenticated-contributor-stored-cross-site-scripting-via-text-path-widget 2025-07-28T16:22:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/piotnetforms/piotnet-forms-1028-unauthenticated-arbitrary-file-upload 2023-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/indeed-membership-pro/ultimate-membership-pro-861-cross-site-request-forgery 2020-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/client-dash/client-dash-221-missing-authorization 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ml-slider/slider-gallery-and-carousel-by-metaslider-image-slider-video-slider-3940-authenticated-admin-stored-cross-site-scripting 2025-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alfie-the-productfeedtool-wp-plugin/alfie-121-cross-site-request-forgery-to-feed-deletion-via-delete-parameter 2026-05-21T16:12:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-auction/ultimate-wordpress-auction-plugin-429-missing-authorization-to-arbitrary-post-deletion 2025-03-03T20:35:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-free-widgets-addons-templates-15109-authenticated-contributor-information-exposure 2024-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-jetpack/booster-for-woocommerce-543-authentication-bypass 2021-08-24T15:09:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetformbuilder/jetformbuilder-3512-authenticated-administrator-php-object-injection 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gamipress-button/gamipress-button-107-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/peepso-core/community-by-peepso-6270-unauthenticated-sensitive-information-disclosure-via-log-file 2024-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-custom-css/easy-custom-css-10-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-oer/wp-oer-090-cross-site-scripting 2022-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.6/wordpress-core-361-spoof-post-authorship 2013-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-graphql/wpgraphql-034-information-exposure 2019-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-create-native-android-ios-apps-on-the-cloud-4164-authenticated-subscriber-html-file-upload-stored-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-blocks-pro/essential-blocks-420-unauthenticated-php-object-injection-via-queries 2023-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maxbuttons/maxbuttons-953-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcode-gallery-for-matterport-showcase/wp-matterport-shortcode-215-reflected-cross-site-scripting 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/st-gallery-wp/st-gallery-wp-108-missing-authorization-to-authenticated-subscriber-settings-update 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insert-or-embed-articulate-content-into-wordpress/insert-or-embed-articulate-content-into-wordpress-43000000023-authenticated-author-arbitrary-file-upload 2024-06-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cms-fuer-motorrad-werkstaetten/plugin-cms-fr-motorrad-werksttten-100-authenticated-subscriber-sql-injection-via-arttype-parameter 2026-04-20T14:05:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/map-addons-for-elementor-waze-map/local-business-addons-for-elementor-115-authenticated-contributor-stored-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meetinghub/meetinghub-1239-authenticated-subscriber-information-exposure 2025-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mycred/mycred-points-management-system-for-gamification-ranks-badges-and-loyalty-program-297-missing-authorization-to-unauthenticated-withdrawal-request-approval 2025-12-12T17:05:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paytium/paytium-mollie-payment-forms-donations-437-missing-authorization-in-check_for_verified_profiles 2023-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-post/postx-4115-authenticated-contributor-stored-cross-site-scripting 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/updraftplus/updraftplus-backuprestore-12412-reflected-cross-site-scripting 2025-01-15T09:43:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ht-slider-for-elementor/ht-slider-for-elementor-174-authenticated-contributor-stored-cross-site-scripting 2025-12-12T14:55:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/broadscope/broadscope-unknown-versions-cross-site-scripting 2012-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mage-eventpress/event-manager-for-woocommerce-377-cross-site-request-forgery-leading-to-uninstall-form-submission 2023-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-super-minify/wp-super-minify-151-cross-site-request-forgery-via-wpsmy_admin_options 2023-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ecwid-shopping-cart/ecwid-ecommerce-shopping-cart-443-unauthenticated-php-object-injection 2016-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/opal-woo-custom-product-variation/opal-woo-custom-product-variation-113-unauthenticated-arbitrary-file-deletion 2024-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-by-rank-math/rank-math-seo-ai-seo-tools-to-dominate-seo-rankings-10228-authenticated-administrator-php-object-injection 2024-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-elementor-page-builder/the-plus-addons-for-elementor-542-authenticated-contributor-stored-cross-site-scripting-via-custom-attributes 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-pdf-wpforms/embed-pdf-for-wpforms-115-authenticated-subscriber-arbitrary-file-upload 2025-09-18T19:35:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/podlove-subscribe-button/podlove-subscribe-button-137-cross-site-request-forgery-via-process_form-function 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bc-woo-custom-thank-you-pages/custom-thank-you-page-customize-for-woocommerce-by-binary-carpenter-1413-missing-authorization 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ban-users/ban-users-153-missing-authorization-to-authenticated-subscriber-settings-update-privilege-escalation 2023-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meeting-scheduler-by-vcita/online-booking-scheduling-calendar-for-wordpress-by-vcita-455-cross-site-request-forgery 2025-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vc-addons-by-bit14/web-and-woocommerce-addons-for-wpbakery-builder-15-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wd-image-magnifier-xoss/wd-image-magnifier-xoss-10-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/hypnotherapy/hypnotherapy-psychologist-theme-1210-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy2map-photos/easy2map-photos-109-sql-injection 2015-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-sign-up/easy-sign-up-341-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/debug-bar/debug-bar-08-reflected-cross-site-scripting 2013-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/groundhogg/groundhogg-2798-cross-site-request-forgery-to-disable-all-plugins 2023-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zero-spam/wordpress-zero-spam-211-sql-injection 2016-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/before-after-image-slider/before-after-image-slider-wp-22-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/6.3/wordpress-core-63-631-authenticatedcontributor-cross-site-scripting-via-footnotes-block 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatically-hierarchic-categories-in-menu/automatically-hierarchic-categories-in-menu-209-authenticated-contributor-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpvivid-backuprestore/wpvivid-backup-0976-authenticated-administrator-arbitrary-file-deletion 2022-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acurax-social-media-widget/social-media-widget-by-acurax-325-cross-site-request-forgery-leading-to-cross-site-scripting-via-the-recordsarray-parameter 2018-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-step-form/multi-step-form-1725-authenticated-admin-arbitrary-file-upload 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/final-tiles-grid-gallery-lite/image-photo-gallery-final-tiles-grid-3611-authenticated-author-insecure-direct-object-reference 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bft-autoresponder/arigato-autoresponder-and-newsletter-2724-reflected-cross-site-scripting 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/button-generation/button-generator-easily-button-builder-235-cross-site-request-forgery-in-tools-data-basephp 2023-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/skt-blocks/skt-blocks-gutenberg-based-page-builder-18-authenticated-contributor-stored-cross-site-scripting 2025-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tweet-blender/tweet-blender-401-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/backup-backup/backup-migration-143-information-exposure-via-log-files 2024-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ays-chatgpt-assistant/ai-chatbot-with-chatgpt-and-content-generator-by-ays-266-unauthenticated-information-exposure 2025-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/private-wp-suite/private-wp-suite-041-authenticated-administrator-stored-cross-site-scripting-via-exceptions-setting 2026-04-21T19:15:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wanderland/wanderland-travel-blog-15-unauthenticated-local-file-inclusion 2026-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-email/wp-email-2672-sql-injection 2016-05-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dologin/dologin-security-371-missing-authorization-via-rest-endpoints 2023-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cmp-coming-soon-maintenance/cmp-coming-soon-maintenance-417-maintenance-mode-bypass 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Avada/avada-7132-cross-site-request-forgery 2026-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/12-step-meeting-list/12-step-meeting-list-3199-unauthenticated-information-exposure 2026-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/richtexteditor/rich-text-editor-101-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-column-taxonomy-list/multi-column-taxonomy-list-15-authenticated-contributor-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-slider/master-slider-responsive-touch-slider-3910-authenticated-contributor-stored-cross-site-scripting 2024-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simasicher-dsgvo-cookie/simacookie-132-cross-site-request-forgery 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-travel/wp-travel-931-authenticated-administrator-stored-cross-site-scripting 2024-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eewee-admincustom/eewee-admin-custom-1824-cross-site-request-forgery-to-privilege-escalation 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/noo-citilights/support-for-citilights-real-estate-wordpress-theme-371-authenticated-subscriber-php-object-injection 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ays-slider/image-slider-by-ays-responsive-slider-and-carousel-249-reflected-cross-site-scripting 2021-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobhunt/wp-jobhunt-72-authenticated-subscriber-insecure-direct-object-reference-to-arbitrary-account-deletion 2025-07-21T15:58:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/upscale/upscale-unknown-versions-cross-site-scripting 2012-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/knight-lab-timelinejs/knight-lab-timeline-3933-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-maker/form-maker-by-10web-11530-authenticated-admin-stored-cross-site-scripting 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/random-banner/random-banner-414-authenticated-admin-stored-cross-site-scripting 2022-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-export-for-woocommerce/import-export-for-woocommerce-161-authenticated-subscriber-arbitrary-file-upload 2024-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/v-form/vform-319-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/eduma/eduma-564-missing-authorization 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-232-unauthenticated-sql-injection 2025-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-wordpress-page-builder-2552-authenticated-stored-cross-site-scripting-via-caption 2022-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdiscuz/comments-wpdiscuz-730-authenticated-stored-cross-site-scripting 2021-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-slimstat/slimstat-analytics-534-unauthenticated-stored-cross-site-scripting-via-notesresource-parameters 2026-01-08T17:59:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/atarim-visual-collaboration/atarim-408-unauthenticated-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-field-suite/custom-field-suite-267-authenticated-contributor-sql-injection-via-term-custom-field 2024-06-19T13:02:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/magone/magone-88-reflected-cross-site-scripting 2025-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-delete-user-accounts/wp-delete-user-accounts-124-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-appointment-booking/smart-appointment-booking-108-missing-authorization-to-unauthenticated-arbitrary-booking-cancellation 2026-05-11T19:03:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auth0/login-by-auth0-3113-stored-cross-site-scripting 2020-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery-builder/photo-gallery-builder-30-missing-authorization 2024-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-list/user-list-151-reflected-cross-site-scripting 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-import/wp-all-import-400-reflected-cross-site-scripting-via-filepath 2026-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-private-files/frontend-file-manager-sharing-user-private-files-110-sensitive-information-disclosure 2022-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-custom-fields/advanced-custom-fields-638-authenticated-admin-limited-arbitrary-function-call 2024-10-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdirectorykit/wp-directory-kit-151-unauthenticated-sql-injection 2026-05-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-testimonials/awesome-testimonials-221-cross-site-request-forgery 2025-10-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/redart/red-art-38-authenticated-subscriber-php-object-injection 2025-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xcloner-backup-and-restore/backup-restore-and-migrate-wordpress-sites-with-the-xcloner-plugin-310-cross-site-request-forgery 2014-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/animated-counters/animated-counters-20-authenticated-contributor-stored-cross-site-scripting 2024-12-16T10:46:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meks-flexible-shortcodes/meks-flexible-shortcodes-137-authenticated-contributor-stored-cross-site-scripting 2025-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supportboard/support-board-380-unauthenticated-authorization-bypass-due-to-use-of-default-secret-key 2025-07-08T10:43:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/homevillas-real-estate/home-villas-real-estate-wordpress-theme-28-authenticated-subscriber-arbitrary-file-deletion 2025-07-01T14:57:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rimons-twitter-widget/rimons-twitter-widget-124-cross-site-scripting 2017-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qtranslate-x/qtranslate-x-3468-authenticated-admin-stored-cross-site-scripting 2021-08-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-dropzone/wp-dropzone-110-authenticated-subscriber-arbitrary-file-upload 2025-11-17T20:11:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-popup-blaster/smart-popup-blaster-143-authenticated-contributor-stored-cross-site-scripting 2024-12-13T16:13:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dc-woocommerce-multi-vendor/multivendorx-4025-improper-authorization-on-rest-routes-via-save_settings_permission 2023-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-smart-wishlist/wpc-smart-wishlist-for-woocommerce-503-insecure-direct-object-reference-to-unauthenticated-wishlist-manipulation 2025-10-10T19:41:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woolentor-addons/shoplentor-woocommerce-builder-for-elementor-gutenberg-12-modules-all-in-one-solution-formerly-woolentor-297-authenticated-contributor-dom-based-stored-cross-site-scripting 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-social-sharebar/easy-social-sharebar-100-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-post/postx-508-authenticated-administrator-server-side-request-forgery-via-rest-api-endpoints 2026-03-03T12:22:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dr-patterson/drpatterson-132-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sign-in-with-google/sign-in-with-google-180-authentication-bypass-in-authenticate_user 2024-12-11T15:18:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-532-insecure-direct-object-reference-to-unauthenticated-sensitive-financial-data-exposure-via-sequential-invoice-id 2026-04-16T15:19:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bb-plugin/beaver-builder-plugin-starter-version-2921-authenticated-contributor-stored-cross-site-scripting-via-auto_play 2025-10-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/analyticswp/analyticswp-212-unauthenticated-sensitive-information-exposure 2025-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sarada-lite/sarada-lite-112-cross-site-request-forgery-to-notice-dismissal 2024-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-elementor-addons/happy-addons-for-elementor-3104-incorrect-authorization-to-information-exposure 2024-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-sidebars/custom-sidebars-308-cross-site-request-forgery 2017-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/evarisk/evarisk-5154-arbitrary-file-upload 2012-06-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wysija-newsletters/mailpoet-newsletters-272-reflected-cross-site-scripting 2016-09-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duplicator/duplicator-1241-sensitive-information-disclosure-leading-to-remote-code-execution 2018-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elegant-addons-for-elementor/elegant-addons-for-elementor-108-authenticated-contributor-stored-cross-site-scripting-via-html-tags 2024-05-21T16:54:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-widget/gallery-widget-121-authenticated-contributor-sql-injection 2025-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/q2w3-post-order/q2w3-post-order-128-reflected-cross-site-scripting 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/minimal-coming-soon-maintenance-mode/minimal-coming-soon-coming-soon-page-238-missing-authorization-to-limited-settings-change 2024-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pressforward/pressforward-523-cross-site-scripting 2017-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/patron-button-and-widgets-by-codebard/codebards-patron-button-and-widgets-for-patreon-220-reflected-cross-site-scripting 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lisfinity-core/lisfinity-core-lisfinity-core-plugin-used-for-pebas-lisfinity-wordpress-theme-140-unauthenticated-privilege-escalation-to-editor 2025-10-14T16:29:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-354-dom-based-iframe-injection 2023-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/w3-total-cache-0973-improper-input-validation-via-openssl_verify 2019-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-membership/simple-membership-441-open-redirect 2024-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/facebook-photo-fetcher/social-photo-fetcher-304-cross-site-request-forgery 2025-12-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/logo-showcase-with-slick-slider/logo-showcase-with-slick-slider-20-cross-site-request-forgery 2022-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-facebook-reviews/wp-review-slider-139-authenticated-subscriber-stored-cross-site-scripting 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/gutenberg-blocks-by-kadence-blocks-page-builder-features-3126-authenticatedcontributor-server-side-request-forgery-ssrf 2024-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/data-dash/data-dash-123-authenticated-subscriber-stored-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iq-block-country/wordpress-iq-block-country-1211-authenticated-stored-cross-site-scripting 2021-09-22T23:26:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sinotype/wp-sinotype-10-cross-site-request-forgery 2025-10-02T22:12:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-cors/wp-cors-022-missing-authorization 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-email-test/woocommerce-email-test-15-sensitive-data-exposure 2016-12-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/invite-anyone/invite-anyone-147-reflected-cross-site-scripting 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/truelysell-core/truelysell-core-187-unauthenticated-privilege-escalation-via-registration 2026-02-13T20:06:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oauth-client-for-user-authentication/oauth-client-single-sign-on-for-wordpress-oauth-20-sso-303-missing-authorization 2022-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/magic-fields/magic-fields-1-171-cross-site-scripting-via-custom-write-panel-id-parameter 2019-09-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/giveaway/giveaway-122-authenticated-admin-sql-injection 2021-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kudos-donations/kudos-donations-easy-donations-and-payments-with-mollie-329-reflected-cross-site-scripting-via-add_query_arg 2024-11-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jquery-hover-footnotes/jquery-hover-footnotes-14-authenticated-author-stored-cross-site-scripting-via-footnote-qualifier-syntax 2026-06-08T15:07:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-301-redirects/simple-301-redirects-200-203-authenticated-arbitrary-plugin-activation 2021-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addblockblocker/adblocker-blocker-001-arbitrary-file-upload 2016-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-multipurpose-woocommerce-theme-826-improper-input-validation-leading-to-unauthenticated-cart-manipulation 2025-07-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fat-services-booking/fat-services-booking-56-authenticated-subscriber-stored-cross-site-scripting 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forms-gutenberg/gutenberg-forms-229-unauthenticated-arbitrary-file-upload 2024-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tablesome/tablesome-1134-missing-authorization 2025-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-392-denial-of-service-via-xml-2 2014-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/terraclassifieds/terraclassifieds-203-unauthenticated-arbitrary-file-upload 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clicksend-contactform7/sms-contact-form-7-notifications-by-clicksend-140-missing-authorization 2025-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xml-sitemap-generator-for-google/xml-sitemap-generator-for-google-133-cross-site-request-forgery-to-plugin-settings-changes 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gf-zoho/gravity-forms-zoho-crm-and-bigin-129-unauthenticated-php-object-injection 2025-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bigcontact/bigcontact-158-cross-site-request-forgery-leading-to-plugin-settings-updates 2023-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-wp-smtp/easy-wp-smtp-by-sendlayer-230-exposure-of-sensitive-information-via-the-ui 2024-06-12T20:02:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/edd-content-restriction/easy-digital-downloads-content-restriction-207-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-propagator/plugin-propagator-01-unauthenticated-arbitrary-file-upload 2024-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/front-editor/guest-posting-frontend-posting-front-editor-wp-front-user-submit-506-unauthenticated-information-exposure 2026-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leaflet-map/leaflet-map-344-authenticated-contributor-stored-cross-site-scripting 2026-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bogo/bogo-391-missing-authorization-to-authenticated-subscriber-sensitive-information-exposure-via-rest-api 2026-06-18T16:00:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bing-site-verification-using-meta-tag/binge-site-verification-using-meta-tag-10-authenticated-admin-stored-cross-site-scripting-via-admin-settings 2023-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wcfm-marketplace-rest-api/woocommerce-multivendor-marketplace-rest-api-153-missing-authorization-to-authenticated-subscriber-arbitrary-orderorder-note-disclosure-order-note-addition-via-rest-api 2023-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bug-library/bug-library-214-authenticated-contributor-sql-injection 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-profile-avatar/wp-user-profile-avatar-105-cross-site-request-forgery-to-settings-update 2025-01-15T15:23:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hide-category-by-user-role-for-woocommerce/hide-category-by-user-role-for-woocommerce-231-missing-authorization-to-unauthenticated-cache-flushing 2025-11-26T17:45:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-automatic-newsletter/easy-automatic-newsletter-lite-320-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meenews/newsletter-meenews-510-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliate-ai-lite/affiliate-ai-lite-101-authenticated-contributor-stored-cross-site-scripting 2025-11-20T18:41:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cryptocurrency-price-ticker-widget/cryptocurrency-widgets-price-ticker-coins-list-20-265-unauthenticated-sql-injection 2024-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-custom-fields/advanced-custom-fields-acf-681-missing-authorization 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-binary-mlm/binary-mlm-woocommerce-20-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-06T16:22:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatorwp/automatorwp-automator-plugin-for-no-code-automations-webhooks-custom-integrations-in-wordpress-567-unauthenticated-stored-cross-site-scripting 2026-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dk-pdf/dk-pdf-wordpress-pdf-generator-230-authenticated-author-server-side-request-forgery 2026-01-15T18:31:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tableberg/table-block-by-tableberg-0610-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slider-wd/slider-by-10web-1258-authenticated-administrator-stored-cross-site-scripting 2024-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-social-share/simple-social-share-30-authenticated-administrator-stored-cross-site-scripting 2024-07-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdirectorykit/wp-directory-kit-147-unauthenticated-sql-injection 2025-12-12T15:19:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/another-wordpress-classifieds-plugin/awp-classifieds-43-cross-site-request-forgery 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sugar-calendar-lite/sugar-calendar-lite-330-reflected-cross-site-scripting 2024-11-19T17:26:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/frontend-login-and-registration-blocks/frontend-login-and-registration-blocks-108-authenticated-subscriber-privilege-escalation-via-password-reset 2025-04-23T19:45:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gdlr-hostel/goodlayers-hostel-312-unauthenticated-sql-injection 2025-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-stripe/simple-stripe-0917-cross-site-request-forgery 2025-10-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kirki/kirki-606-unauthenticated-limited-arbitrary-file-read-and-deletion-via-downloadzip 2026-05-19T06:24:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ban-user/wp-ban-user-10-cross-site-request-forgery-to-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yet-another-stars-rating/yet-another-stars-rating-312-authenticated-subscriber-cross-site-scripting-via-shortcodes 2023-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/perfmatters/perfmatters-216-missing-authorization 2023-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vikbooking/vikbooking-hotel-booking-engine-pms-1512-cross-site-request-forgery-in-widgets_watch_data-function 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seedprod-coming-soon-pro-5/seedprod-pro-61812-authenticated-administrator-sql-injection 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/klamra-paycal-for-aspaclaria/klamra-paycal-for-aspaclaria-114-insecure-direct-object-reference-to-authenticated-subscriber-sensitive-information-exposure-via-invoice_id-parameter 2026-06-05T14:28:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-blocks/essential-blocks-page-builder-gutenberg-blocks-patterns-templates-509-authenticated-admin-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jch-optimize/jch-optimize-420-authenticated-subscriber-directory-traversal 2024-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jay-login-register/jay-login-register-2603-unauthenticated-privilege-escalation-via-jay_login_register_ajax_create_final_user 2026-02-07T12:43:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-the-contact-form-builder-that-grows-with-you-3120-cross-site-request-forgery-to-limited-file-deletion 2025-09-26T14:15:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-accessibility/wp-accessibility-231-authenticated-contributor-stored-dom-based-cross-site-scripting-via-alt-attribute 2026-02-26T19:26:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sureforms/sureforms-1131-cross-site-request-forgery-protection-bypass-via-improper-nonce-distribution 2025-11-18T17:53:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/like-box/social-like-box-and-page-by-wpdevart-0840-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vikbooking/vikbooking-hotel-booking-engine-pms-167-missing-authorization 2024-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/triple-seven/777-13-unauthenticated-local-file-inclusion 2025-08-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/transmail/zoho-zeptomail-331-cross-site-request-forgery 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/nooni/nooni-151-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-protector/passster-4225-missing-authorization 2026-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miwoftp/miwoftp-106-cross-site-request-forgery-leading-to-remote-code-execution 2015-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blogmentor/blogmentor-blog-layouts-for-elementor-15-authenticated-contributor-stored-cross-site-scripting-via-pagination_style-parameter 2024-06-18T14:31:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-1387-cross-site-request-forgery-via-add_to_compare 2024-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-data-filter-and-taxonomy-filter/mdtf-1339-missing-authorization 2025-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/envo-elementor-for-woocommerce/envos-elementor-templates-widgets-for-woocommerce-148-authenticated-contributor-stored-cross-site-scripting 2024-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/postlists/postlists-202-reflected-cross-site-scripting 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/w3-total-cache-094-server-side-request-forgery-leading-to-host-information-disclosure 2016-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-social-media-icons/social-media-share-buttons-social-sharing-icons-217-reflected-cross-site-scripting 2019-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/watu/watu-quiz-343-authenticated-administrator-sql-injection 2025-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-additional-fees-on-checkout-wordpress/woocommerce-additional-fees-on-checkout-free-147-reflected-cross-site-scripting-via-number 2024-12-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lbg-audio4-html5-shoutcast/radio-player-shoutcast-icecast-447-reflected-cross-site-scripting 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-filter-combine-rss-feeds/wp-filter-combine-rss-feeds-04-missing-authorization-to-authenticated-contributor-feed-deletion 2025-08-22T15:52:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/element-ready-lite/elementsready-addons-for-elementor-648-authenticated-contributor-sensitive-information-exposure-via-elementor-templates 2024-12-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accelerated-mobile-pages/amp-for-wp-accelerated-mobile-pages-10961-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-07-23T21:41:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-e-commerce/wp-ecommerce-3151-missing-authorization-to-unauthenticated-arbitrary-post-creation 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fl3r-feelbox/fl3r-feelbox-81-cross-site-request-forgery-leading-to-stored-cross-site-scripting 2023-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b-slider/b-slider-gutenberg-slider-block-for-wp-1123-authenticated-contributor-private-post-disclosure-via-bsb-slider-shortcode 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-shipping-multiple-addresses/woocommerce-ship-to-multiple-addresses-385-reflected-cross-site-scripting 2023-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wd-google-maps/10webmapbuilder-1071-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2022-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ebook-store/ebook-store-58001-authenticated-administrator-stored-cross-site-scripting 2024-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yaysmtp/yaysmtp-266-authenticated-administrator-sql-injection 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/file-manager/bit-file-manager-500-information-disclosure 2018-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acf-frontend-form-element/frontend-admin-by-dynamiapps-3283-authenticated-subscriber-sql-injection 2025-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paypal-payments-shortcode/paypal-payment-shortcode-101-authenticated-contributor-stored-cross-site-scripting-via-buttom_image-shortcode-attribute 2025-12-11T14:25:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-menu-bar-cart/woocommerce-menu-cart-2110-reflected-cross-site-scripting 2022-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder/profile-builder-3103-cross-site-request-forgery-via-pms-cross-promotionphp 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-builder/builder-for-contact-form-7-by-webconstruct-122-cross-site-request-forgery 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wooexim/wooexim-woocommerce-export-import-plugin-500-reflected-cross-site-scripting 2025-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder/profile-builder-user-profile-user-registration-forms-242-cross-site-scripting 2016-07-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yamaps/yamaps-for-wordpress-0640-authenticated-contributor-stored-cross-site-scripting-via-shortcode-parameters 2026-02-18T16:26:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enable-accessibility/enable-accessibility-14-cross-site-request-forgery 2023-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-proposals/wp-proposals-23-authenticated-editor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-courses/wp-courses-2028-improper-access-controls 2020-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/logo-showcase-with-slick-slider/logo-showcase-with-slick-slider-logo-carousel-logo-slider-logo-grid-123-stored-cross-site-scripting 2021-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-photo-album-plus/wp-photo-album-plus-8010-stored-cross-site-scripting 2022-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-expire-popup/page-expire-popupredirection-for-wordpress-10-authenticated-author-sql-injection-via-id-shortcode-attribute 2026-01-05T14:51:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cds-simple-seo/simple-seo-1812-cross-site-request-forgery 2022-10-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-and-rental-manager-for-woocommerce/rental-and-booking-manager-for-bike-car-dress-resort-with-woocommerce-integration-wprently-wordpress-plugin-221-reflected-cross-site-scripting 2025-01-10T19:06:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ba-book-everything/ba-book-everything-168-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sw-product-bundles/sw-product-bundles-2015-missing-authorization 2023-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jquery-vertical-accordion-menu/jquery-accordion-menu-widget-312-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/announce-from-the-dashboard/announce-from-the-dashboard-152-authenticated-admin-stored-cross-site-scripting 2024-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-products-from-gsheet-for-woo-importer/gsheet-for-woo-importer-231-missing-authorization-to-authenticated-subscriber-plugin-settings-reset 2026-05-21T06:40:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leaflet-map/leaflet-map-300-cross-site-request-forgery-to-stored-cross-site-scripting 2021-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/wordpress-download-manager-3212-cross-site-request-forgery 2021-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rss-aggregator/wp-rss-aggregator-4191-admin-stored-cross-site-scripting 2021-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-calendar/my-calendar-319-unauthenticated-cross-site-scripting 2019-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/upsell-order-bump-offer-for-woocommerce/upsell-funnel-builder-for-woocommerce-300-unauthenticated-order-manipulation 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mail-boxes-etc/mbe-eship-224-reflected-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-carousel-for-elementor/ultimate-carousel-for-elementor-217-authenticated-contributor-stored-cross-site-scripting 2023-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-db/contact-form-to-db-by-bestwebsoft-171-authenticated-administrator-sql-injection-via-s 2023-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluent-support/fluent-support-191-cross-site-request-forgery 2025-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/helion/helion-personal-portfolio-agency-wordpress-theme-1112-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hamburger-icon-menu-lite/hamburger-icon-menu-lite-10-reflected-cross-site-scripting 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auxin-portfolio/premium-portfolio-features-for-phlox-theme-232-authenticated-contributor-stored-cross-site-scripting-via-grid-portfolios 2024-07-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-regenerate-select-crop/image-regenerate-select-crop-710-missing-authorization-on-multiple-ajax-actions 2023-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cloak-front-end-email/cloak-front-end-email-191-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-poll/simple-poll-111-cross-site-request-forgery-to-stored-cross-site-scripting 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mapster-wp-maps/mapster-wp-maps-1200-authenticated-contributor-stored-cross-site-scripting 2025-09-25T14:31:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ltl-freight-quotes-rl-edition/ltl-freight-quotes-rl-carriers-edition-334-unauthenticated-sql-injection 2025-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/search-exclude/search-exclude-257-missing-authorization-to-authenticated-contributor-search-settings-modification-via-rest-api 2025-11-24T15:08:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theatre/theater-for-wordpress-0183-authenticated-administrator-stored-cross-site-scripting-via-settings 2023-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/resume-submissions-job-postings/resume-submissions-job-postings-plugin-253-stored-cross-site-scripting 2016-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-thumbnail-editor/post-thumbnail-editor-248-sensitive-information-exposure 2024-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforms-lite/contact-form-by-wpforms-free-and-premium-1812-reflected-cross-site-scripting 2023-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brid-video-easy-publish/target-video-easy-publish-385-authenticated-contributor-stored-cross-site-scripting-via-width-parameter 2025-06-17T20:30:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/survey-maker/survey-maker-502-authenticated-administrator-stored-cross-site-scripting 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/site-offline/site-offline-or-coming-soon-or-maintenance-mode-142-cross-site-request-forgery-and-cross-site-scripting 2020-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-seo-pack-light-version/aa-team-premium-seo-pack-180-local-file-disclosure-and-arbitrary-file-upload 2015-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-by-rank-math/rank-math-seo-10218-authenticated-administrator-stored-cross-site-scripting 2024-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/no-api-amazon-affiliate/no-api-amazon-affiliate-422-authenticated-administrator-stored-cross-site-scripting 2023-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/finalist/finalist-all-versions-sql-injection 2013-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter-subscription-widget-for-sendblaster/newsletter-subscription-optin-module-129-cross-site-request-forgery-to-stored-cross-site-scripting 2025-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-login-openid/social-login-and-register-770-authenticated-administrator-local-file-inclusion 2025-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zm-ajax-login-register/zm-ajax-login-register-202-authentication-bypass 2023-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recipe-maker/wp-recipe-maker-912-missing-authorization-to-authenticated-subscriber-sql-injecton 2024-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wiredminds-leadlab/leadlab-by-wiredminds-13-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sounder/sounder-internet-radio-streaming-elementor-template-kit-1311-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lizza-lms-pro/lizza-lms-pro-103-unauthenticated-privilege-escalation 2026-02-18T15:49:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-wordpress-plugin-for-online-courses-and-education-3711-authenticated-contributor-stored-cross-site-scripting-via-stm_lms_courses_grid_display-shortcode 2026-02-13T18:22:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-github-gist-shortcodes/easy-github-gist-shortcodes-10-authenticated-contributor-stored-cross-site-scripting-via-id-shortcode-attribute 2026-01-06T20:33:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woc-order-alert/order-listener-for-woocommerce-361-missing-authorization 2026-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/error-notification/error-notification-027-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-testimonial-widget/wp-testimonial-widget-31-authenticated-admin-stored-cross-site-scripting 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shopwarden/shopwarden-automated-woocommerce-monitoring-testing-1011-cross-site-request-forgery-to-arbitrary-options-update 2025-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/evaluate/evaluate-10-authenticated-administrator-stored-cross-site-scripting 2022-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b-blocks/b-blocks-the-ultimate-block-collection-200-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/orion-sms-otp-verification/orion-sms-otp-verification-117-authentication-bypass-via-account-takeover 2025-10-14T20:00:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rencontre/rencontre-dating-site-3101-privilege-escalation 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addons-for-elementor/livemesh-addons-for-elementor-723-authenticated-admin-stored-cross-site-scripting 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-editormd/wp-editormd-the-perfect-wordpress-markdown-editor-1021-authenticated-administrator-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/armember-membership/armember-3410-missing-access-control-leading-to-authenticated-subscriber-sensitive-information-disclosure 2023-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sp-blog-designer/sp-blog-designer-100-authenticated-contributor-local-file-inclusion 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/library-viewer/library-viewer-206-open-redirect-via-redirect_to 2023-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/log-http-requests/log-http-requests-131-stored-cross-site-scripting 2022-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/luckywp-table-of-contents/luckywp-table-of-contents-214-authenticated-contributor-stored-cross-site-scripting 2024-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/virim/virim-04-php-object-injection 2019-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spnbabble/spnbabble-141-multiple-cross-site-request-forgery 2014-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-more-than-just-a-page-builder-3257-authenticated-contributor-stored-cross-site-scripting 2024-11-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-bitly/bitlys-wordpress-plugin-273-missing-authorization-to-authenticated-subscriber-settings-update 2025-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/async-javascript/async-javascript-2190714-authenticated-subscriber-stored-cross-site-scripting 2020-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ical-feeds/ical-feeds-153-reflected-cross-site-scripting 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smoothness-slider-shortcode/smoothness-slider-shortcode-v122-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ldap-ad-staff-employee-directory-search/staff-employee-business-directory-for-active-directory-121-insufficient-escaping-of-stored-ldap-values 2023-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-addons-for-gutenberg/spectra-266-authenticated-contributor-server-side-request-forgery-in-template_importer 2023-07-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-custom-fields/advanced-custom-fields-607-authenticated-contributor-php-object-injection 2023-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/solidres/solidres-094-authenticated-admin-stored-cross-site-scripting 2023-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-redirection/seo-redirection-plugin-301-redirect-manager-73-reflected-cross-site-scripting 2021-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-552-misconfiguration-that-allows-trigger-of-new-installation 2020-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/new-adman/new-adman-168-cross-site-request-forgery-via-plugin_menu 2023-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dokan-lite/dokan-ai-powered-woocommerce-multivendor-marketplace-solution-build-your-own-amazon-ebay-etsy-502-authenticated-customer-privilege-escalation 2026-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-207-full-path-disclosure 2007-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wplms/wplms-199-missing-authorization-to-unauthenticated-user-token-generation 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multiple-post-type-order/multiple-post-type-order-1100-authenticated-contributor-stored-cross-site-scripting-via-mpto-shortcode 2025-05-06T13:28:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lawyer-directory/lawyer-directory-133-missing-authorization 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recall/wp-recall-162614-missing-authorization 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp-timetable/timetable-and-event-schedule-by-motopress-2319-arbitrary-users-hashed-passwordemailusername-disclosure 2021-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-system/pinpoint-booking-system-29928-authenticated-subscriber-sql-injection 2023-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/favicon-by-realfavicongenerator/favicon-by-realfavicongenerator-1321-reflected-cross-site-scripting 2021-07-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pie-register/pie-register-user-registration-forms-3700-reflected-cross-site-scripting 2021-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/academy/academy-lms-elearning-and-online-course-solution-for-wordpress-1919-authenticated-subscriber-privilege-escalation 2024-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-15107-authenticated-contributor-sql-injection-via-datapost_ids0 2024-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/futurio-extra/futurio-extra-190-cross-site-request-forgery 2023-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/srs-simple-hits-counter/srs-simple-hits-counter-plugin-for-wordpress-103-104-unauthenticated-sql-injection 2020-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-management-controller/wp-controller-320-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/float-menu/float-menu-43-arbitrary-menu-deletion-via-cross-site-request-forgery 2022-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-edit-password-protected/wp-edit-password-protected-134-open-redirect 2025-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-rights-access-manager/user-rights-access-manager-107-access-restriction-bypass 2021-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qode-wishlist-for-woocommerce/qode-wishlist-for-woocommerce-127-unauthenticated-insecure-direct-object-reference-to-wishlist-update 2025-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/super-block-slider/super-block-slider-279-missing-authorization 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/football-pool/football-pool-2119-authenticated-subscriber-stored-cross-site-scripting 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fulltext-search/wp-fast-total-search-179262-missing-authorization 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/almera/almera-responsive-portfolio-site-template-118-sensitive-information-disclosure 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/recaptcha-jetpack/recaptcha-jetpack-022-cross-site-request-forgery-to-settings-update 2024-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-209-cross-site-scripting 2007-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-forms-anti-spam/maspik-spam-blacklist-0106-authenticated-administrator-stored-cross-site-scripting-via-settings 2024-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/6.4/wordpress-core-640-641-remote-code-execution-pop-chain 2023-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusion-builder/fusion-builder-3111-reflected-cross-site-scripting-via-user-register-element 2023-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mighty-builder/mighty-builder-102-authenticated-contributor-stored-cross-site-scripting 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/total/total-221-authenticated-contributor-stored-cross-site-scripting-via-post-title-in-blog-section-image-alt-attribute 2026-05-01T20:29:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-memberships-pro/paid-memberships-pro-233-authenticated-sql-injection 2020-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/apollo13-framework-extensions/apollo13-framework-extensions-193-authenticated-author-stored-cross-site-scripting 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/edd-pushover-notifications/easy-digital-downloads-pushover-notifications-128-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/onwebchat/live-chat-live-support-310-cross-site-request-forgery 2020-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clients/clients-114-missing-authorization 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/searchplus/searchplus-171-missing-authorization-to-unauthenticated-settings-modification-and-deletion-via-searchplus_save_token-searchplus_reset_token-ajax-actions 2026-06-23T16:38:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-thumbnail-generator/pdf-thumbnail-generator-13-reflected-cross-site-scripting 2024-09-12T20:29:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cmp-coming-soon-maintenance/cmp-coming-soon-maintenance-4113-authenticated-admin-arbitrary-file-upload 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lazy-blocks/custom-block-builder-lazy-blocks-420-authenticated-contributor-remote-code-execution 2026-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/albo-pretorio-on-line/albo-pretorio-online-463-reflected-cross-site-scripting 2023-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ismobile/ismobile-111-authenticated-contributor-stored-cross-site-scripting-via-device-parameter 2025-06-26T16:18:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pay-with-contact-form-7/pay-with-contact-form-7-104-reflected-cross-site-scripting 2025-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-post-list-table/wp-post-list-table-103-authenticated-contributor-stored-cross-site-scripting 2025-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ask-me/ask-me-681-cross-site-request-forgery 2022-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/colormag/colormag-4019-missing-authorization-to-authenticated-subscriber-themegrill-demo-importer-plugin-installation 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/news-announcement-scroll/news-announcement-scroll-888-authenticated-admininstrator-stored-cross-site-scripting 2022-11-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-14164-missing-authorization-to-authenticated-subscriber-sensitive-information-exposure-and-privacy-audit-manipulation 2026-04-16T13:23:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gotham-block-extra-light/gotham-block-extra-light-150-authenticated-contributor-arbitrary-file-read-via-ghostban-shortcode 2026-01-13T17:17:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mediabay-lite/mediabay-16-authenticated-editor-stored-cross-site-scripting-vulnerability 2023-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-business-intelligence-lite/wp-business-intelligence-lite-320-missing-authorization 2026-05-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/photography/photography-752-missing-authorization 2025-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/funnel-builder/funnel-builder-for-wordpress-by-funnelkit-3101-authenticated-administrator-sql-injection 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-wp-mail/ultimate-wp-mail-1017-136-missing-authorization-to-authenticated-contributor-privilege-escalation-via-get_email_log_details-function 2025-07-15T20:41:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/share-button/wordpress-social-share-buttons-119-reflected-cross-site-scripting 2024-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/podlove-podcasting-plugin-for-wordpress/podlove-podcast-publisher-409-reflected-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/saveo/saveo-112-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/w3-total-cache-0973-server-side-request-forgery 2019-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gift-message-for-woocommerce/gift-message-for-woocommerce-178-cross-site-request-forgery 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-elementor/essential-addons-for-elementor-pro-548-unauthenticated-server-side-request-forgery 2023-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sayfa-sayac/sayfa-saya-26-unauthenticated-php-object-injection 2023-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/platform/platform-4-114-cross-site-request-forgery 2016-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/winston-ai-wp/winston-ai-003-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-settings-deletion 2026-03-06T11:14:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feather-login-page/feather-login-page-113-cross-site-request-forgery 2023-10-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-listings/auto-listings-265-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/audiomack/audiomack-148-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-grid-gallery/video-gallery-vimeo-and-youtube-gallery-117-authenticated-contributor-stored-cross-site-scripting 2025-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dino-game/dino-game-embed-google-chrome-dinosaur-game-in-wordpress-110-authenticated-contributor-stored-cross-site-scripting 2024-11-20T13:37:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3323-reflected-cross-site-scripting-via-user_ids-parameter 2025-09-18T16:25:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salient-core/salient-core-202-reflected-cross-site-scripting 2023-11-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-smtp/post-smtp-mailer-256-cross-site-request-forgery-to-arbitrary-log-deletion 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-memberships-pro/paid-memberships-pro-298-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-fields-to-checkout-page-woocommerce/custom-woocommerce-checkout-fields-editor-134-cross-site-request-forgery 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mobile-login-woocommerce/otp-login-woocommerce-gravity-forms-22-authentication-bypass-to-privilege-escalation 2023-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-mobile-friendly-image-gallery-1830-authenticated-admin-stored-cross-site-scripting 2024-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-editor/wp-editor-1292-cross-site-request-forgery-to-remote-code-execution-via-plugin-and-theme-file-editor 2026-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2021-cross-site-scripting 2018-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventkoi-lite/event-koi-lite-13131-missing-authorization-to-unauthenticated-sensitive-information-exposure-via-rest-api-endpoints 2026-06-17T16:08:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/vw-automobile-lite/vw-automobile-lite-212-missing-authorization 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-ultra-pro/booking-ultra-pro-116-missing-authorization-via-save_fields_settings 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/categorify/categorify-1074-cross-site-request-forgery-via-categorifyajaxclearcategory 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ppc-fraud-detctor/ppc-tracker-wordpress-20-stored-cross-site-scripting-via-ip 2022-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/optin/wowoptin-next-gen-popup-maker-1429-unauthenticated-server-side-request-forgery-via-link-parameter-in-rest-api 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementskit-lite/elementskit-elementor-addons-307-authenticated-contributor-stored-cross-site-scripting-via-countdown-widget 2024-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/houzez/houzez-416-authenticated-subscriber-php-object-injection-via-saved-search 2025-11-26T00:01:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-permalink-translator/wp-permalink-translator-176-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-management-xtended/admin-management-xtended-240-missing-authorization-checks 2015-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/new-image-gallery/image-gallery-lightbox-gallery-responsive-photo-gallery-masonry-gallery-145-missing-authorization 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mylinksdump/mylinksdump-12-sql-injection 2010-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/opentracker-analytics/opentracker-analytics-13-reflected-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/animated-number-counters/animated-number-counters-21-authenticated-editor-local-file-inclusion 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/catablog/catablog-163-reflected-cross-site-scripting 2012-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bft-autoresponder/arigato-autoresponder-and-newsletter-271-authenticated-admin-stored-cross-site-scripting 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/captcha-code-authentication/captcha-code-29-captcha-bypass 2023-11-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/live-weather-station/weather-station-3811-cross-site-request-forgery 2023-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cm-map-locations/cm-map-locations-208-reflected-cross-site-scripting 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpextended/the-ultimate-wordpress-toolkit-wp-extended-308-insecure-direct-object-reference 2024-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailmunch/mailmunch-grow-your-email-list-318-reflected-cross-site-scripting 2024-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-social-login/woocommerce-social-login-263-unauthenticated-php-object-injection 2024-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-googlebot-visit/simple-googlebot-visit-124-missing-authorization-to-settings-update 2023-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/delete-all-comments/delete-all-comments-20-arbitrary-file-upload 2016-12-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modeltheme-addons-for-wpbakery/modeltheme-addons-for-wpbakery-and-elementor-156-authenticated-contributor-php-object-injection 2026-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-site-verify/simple-site-verify-107-authenticated-administrator-stored-cross-site-scripting 2023-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mail-masta/mail-masta-10-sql-injection-via-subscriber_email-parameter 2017-03-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-tables/ninja-tables-easiest-data-table-builder-5012-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-08-26T18:30:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/frictionless/frictionless-0023-authenticated-contributor-stored-cross-site-scripting 2025-01-30T14:11:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-manager/contact-form-manager-143-cross-site-request-forgery 2017-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/steel/steel-130-authenticated-contributor-stored-cross-site-scripting-via-btn-shortcode 2024-11-15T15:00:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ahathat/ahathat-16-reflected-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagemagick-engine/imagemagick-engine-175-cross-site-request-forgery-to-remote-command-execution 2022-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-data-filter-and-taxonomy-filter/wordpress-meta-data-and-taxonomies-filter-mdtf-133-authenticated-subscriber-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cbxwpbookmark/cbx-bookmark-favorite-201-missing-authorization 2025-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/linkz-ai/linkzai-118-missing-authorization-to-authenticated-subscriber-plugin-settings-update-via-ajax 2024-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-contact-form-3433-cross-site-request-forgery-to-oauth-service-disconnection 2021-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mybookprogress/mybookprogress-by-stormhill-media-108-authenticated-contributor-stored-cross-site-scripting-via-book-parameter 2025-01-16T18:23:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/background-control/background-control-105-cross-site-request-forgery-to-arbitrary-file-deletion 2025-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-mercadopago/mercado-pago-payments-for-woocommerce-660-cross-site-request-forgery 2023-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-agenda/wp-agenda-20-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-faq-with-expanding-text/easy-faq-with-expanding-text-32831-authenticated-admin-stored-cross-site-scripting 2022-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/filr-protection/filr-secure-document-library-124-authenticated-editor-stored-cross-site-scripting 2024-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ciyashop/ciyashop-4180-unauthenticated-php-object-injection 2025-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/directorist/directorist-730-sensitive-information-disclosure 2022-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gd-rating-system/gd-rating-system-36-authenticated-contributor-local-file-inclusion 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot/ai-chatbot-for-wordpress-710-authenticated-admin-stored-cross-site-scripting 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-donation-plugin-and-fundraising-platform-3192-unauthenticated-php-object-injection 2025-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress-docs/buddypress-docs-223-reflected-cross-site-scripting 2024-10-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/igumbi-online-booking/igumbi-online-booking-140-authenticated-contributor-stored-cross-site-scripting 2025-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dazzle/dazzle-100-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/whmpress/whmpress-62-revision-9-authenticated-contributor-local-file-inclusion 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/soccer-live-scores/soccer-live-scores-105-cross-site-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arforms/arforms-64-authenticated-subscriber-sql-injection 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unusedcss/rapidload-power-up-for-autoptimize-171-cross-site-request-forgery-via-clear_page_cache 2023-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unusedcss/rapidload-power-up-for-autoptimize-171-missing-authorization-in-ajax_deactivate 2023-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-support-plus-responsive-ticket-system/wp-support-plus-responsive-ticket-system-40-javascript-injection 2014-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addons-for-elementor/livemesh-addons-for-elementor-671-contributor-stored-cross-site-scripting 2021-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpseo-local/yoast-seo-local-148-reflected-cross-site-scripting 2023-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arforms/arforms-premium-wordpress-form-builder-640-reflected-cross-site-scripting 2024-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/rehub-theme/rehub-1961-authenticated-subscriber-sql-injection 2024-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-login/custom-login-410-missing-authorization 2023-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sevenstars/seven-stars-144-reflected-cross-site-scripting 2025-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bit-form/contact-form-by-bit-form-2175-unauthenticated-sensitive-information-exposure 2025-07-01T17:24:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cm-answers/cm-answers-319-authenticated-administrator-stored-cross-site-scripting 2023-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-maps/wp-google-maps-71043-reflected-cross-site-scripting 2019-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/search-logger/search-logger-09-authenticated-administrator-sql-injection 2022-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hub2word/easy-embed-for-hubspot-forms-ctas-links-files-add-hubspot-to-wp-search-results-110-missing-authorization-to-arbitrary-options-update 2022-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-app-maker/wp-app-maker-10164-reflected-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/greenify/greenify-22-unauthenticated-local-file-inclusion 2025-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-572-authenticated-subscriber-insecure-direct-object-reference 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customer-reviews-woocommerce/customer-reviews-for-woocommerce-5381-cross-site-request-forgery-via-manual-review-reminders 2023-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dzs-wootable/woocommerce-shop-page-builder-2277-missing-authorization 2025-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/activity-link-preview-for-buddypress/wbcom-designs-activity-link-preview-for-buddypress-144-unauthenticated-server-side-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comments-secretary/-132-reflected-cross-site-scripting-via-_serverphp_self 2025-12-11T15:08:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contest-gallery/contest-gallery-1915-authenticated-author-sql-injection-via-cg_id 2022-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fancy-box/fancybox-101-reflected-cross-site-scripting 2025-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcf7-redirect/redirection-for-contact-form-7-327-unauthenticated-arbitrary-file-copy-via-move_file_to_upload 2025-12-20T18:43:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-video-robot/wordpress-video-robot-the-ultimate-video-importer-1200-unauthenticated-sql-injection 2024-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sheet2site/sheet2site-1018-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rocket/rocket-3194-authenticated-author-stored-cross-site-scripting 2025-10-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tourfic/tourfic-2118-authenticated-contributor-stored-cross-site-scripting 2024-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/survey-maker/survey-maker-best-wordpress-survey-plugin-155-reflected-cross-site-scripting 2021-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/druco/druco-152-reflected-cross-site-scripting 2025-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hester-core/hester-core-118-authenticated-author-stored-cross-site-scripting 2026-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-prune-posts/auto-prune-posts-200-authenticated-admin-stored-cross-site-scripting 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-logo-carousel/simple-logo-carousel-193-authenticated-contributor-stored-cross-site-scripting-via-id-parameter 2025-06-16T21:35:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-sentinel/wordpress-sentinel-100-cross-site-request-forgery 2011-12-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/prevent-file-access/prevent-files-folders-access-251-authenticated-administrator-arbitrary-file-upload-in-mo_media_restrict_page 2023-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-download-monitor/simple-download-monitor-388-sql-injection 2020-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gutentools/gutentools-113-authenticated-contributor-stored-cross-site-scripting-via-post-slider-block-attributes 2026-04-21T20:38:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-map/custom-map-11-cross-site-scripting 2017-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-malware-protection/malware-scanner-472-authenticated-administrator-sql-injection 2024-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-exporter/wp-ultimate-exporter-11-reflected-cross-site-scripting 2016-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailmunch/mailmunch-grow-your-email-list-316-authenticated-contributor-stored-cross-site-scripting 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ticket/customer-service-software-support-ticket-system-5120-authenticated-administrator-stored-cross-site-scripting 2023-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/securimage-wp-fixed/securimage-wp-fixed-354-reflected-cross-site-scripting 2021-08-11T14:40:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/people-lists/people-lists-1310-missing-authorization 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-subtitle-for-woocommerce/product-subtitle-for-woocommerce-139-authenticated-contributor-stored-cross-site-scripting-via-htmltag-parameter 2025-05-30T18:05:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gt3-photo-video-gallery/photo-gallery-27726-reflected-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stopbadbots/wp-block-and-stop-bad-bots-692-sql-injection 2022-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usc-e-shop/welcart-e-commerce-283-missing-authorization 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sudoku-shortcode/sudoku-shortcode-100-authenticated-contributor-stored-cross-site-scripting 2026-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-post-carousel/multi-post-carousel-by-category-14-authenticated-contributor-stored-cross-site-scripting-via-slides-shortcode-attribute 2026-03-20T15:20:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/biometric-login-for-woocommerce/biometric-login-for-woocommerce-103-unauthenticated-privilege-escalation 2023-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-add-ons/responsive-plus-starter-templates-advanced-features-and-customizer-settings-for-responsive-theme-314-authenticated-contributor-blind-server-side-request-forgery-via-remote_request 2025-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/campaign-url-builder/campaign-url-builder-181-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41038-missing-authorization-to-authenticated-contributor-arbitrary-content-deletion-and-arbitrary-title-update 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/college-publisher-import/college-publisher-import-01-arbitrary-file-upload 2021-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/astra-widgets/astra-widgets-1216-authenticated-editor-stored-cross-site-scripting 2025-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpmastertoolkit/wpmastertoolkit-2140-missing-authorization 2026-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bold-page-builder/bold-page-builder-568-authenticated-contributor-stored-cross-site-scripting-via-bt_bb_button-shortcode 2026-05-13T18:18:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-spell-check/wp-spell-check-92-reflected-cross-site-scripting 2021-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/news-announcement-scroll/news-announcement-scroll-900-authenticated-contributor-sql-injection-via-shortcode 2024-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/democracy-poll/democracy-poll-603-missing-authorization 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wppageflip/a-page-flip-book-30-directory-traversal 2012-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/gat/gat-116-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/demo-importer-plus/demo-importer-plus-209-authenticated-author-blind-xml-external-entity-injection-via-svg-file-upload 2026-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-seopress/seopress-772-authenticated-contributor-open-redirect 2024-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-to-chat/form-to-chat-app-125-authenticated-contributor-stored-cross-site-scripting 2026-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-filter-posts/post-grid-master-3412-missing-authorization-to-unauthenticated-local-php-file-inclusion 2025-01-08T22:10:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/siteground-email-marketing/siteground-email-marketing-175-missing-authorization 2026-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-814-unauthenticated-sql-injection 2023-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/indieweb/indieweb-405-authenticated-author-stored-cross-site-scripting-via-telephone-parameter 2026-01-08T17:50:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uipress-lite/uipress-lite-3508-missing-authorization-to-authenticated-subscriber-stored-cross-site-scripting 2025-11-20T19:18:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-emoticon-rating/wp-emoticon-rating-101-cross-site-request-forgery-to-reflected-cross-site-scripting-via-emo_settings-parameter 2026-06-08T15:06:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/grandcarrental/grand-car-rental-limousine-html-template-37-unauthenticated-stored-cross-site-scripting 2026-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobsearch/wp-jobsearch-173-stored-cross-site-scripting 2021-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-content-shortcode/custom-content-shortcode-401-authenticated-arbitrary-file-access-local-file-inclusion 2022-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nex-forms-express-wp-form-builder/nex-forms-ultimate-forms-plugin-for-wordpress-919-missing-authorization-to-unauthenticated-arbitrary-form-entry-modification-via-nf_set_entry_update_id 2026-03-14T13:14:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-seo-pack/all-in-one-seo-4101-authenticated-code-injection 2021-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feather-login-page/feather-login-page-107-111-missing-authorization-to-authentication-bypass-and-privilege-escalation 2023-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cta/wordpress-calls-to-action-251-cross-site-scripting 2015-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comment-form-wp/comment-form-wp-8211-customize-default-comment-form-200-authenticated-administrator-stored-cross-site-scripting 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementinvader-addons-for-elementor/elementinvader-addons-for-elementor-127-authenticated-contributor-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dynamically-display-posts/dynamically-display-posts-11-unauthenticated-sql-injection 2025-10-14T19:17:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/colibri-page-builder/colibri-page-builder-10272-authenticated-contributor-stored-cross-site-scripting-via-colibri_breadcrumb_element-shortcode 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-to-csv/post-to-csv-by-bestwebsoft-131-reflected-cross-site-scripting 2017-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-mobile-sitemap/google-xml-sitemap-for-mobile-161-cross-site-request-forgery-via-mobile_sitemap_generate 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yaysmtp/yaysmtp-simple-wp-smtp-mail-221-authenticated-admin-stored-cross-site-scripting 2022-07-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/conversador/conversador-261-reflected-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/actionwear-products-sync/actionwear-products-sync-3113-authenticated-subscriber-sql-injection 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/read-more-without-refresh/read-more-without-refresh-31-authenticated-administrator-stored-cross-site-scripting 2020-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mw-wp-form/mw-wp-form-501-unauthenticated-arbitrary-file-upload 2023-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/falcon/falcon-wordpress-optimizations-tweaks-283-missing-authorization 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-commerce-min-weight/woo-commerce-minimum-weight-301-cross-site-request-forgery-via-settings-update-form 2026-05-11T19:07:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blogger-importer/blogger-importer-05-cross-site-request-forgery 2013-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/float-gateway/float-payment-gateway-119-improper-authorization-to-unauthenticated-order-status-manipulation 2026-01-13T17:33:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-seo/wp-meta-seo-452-authenticated-subscriber-sql-injection 2023-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wplms/wplms-4970-missing-authorization 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/limit-attempts/limit-attempts-by-bestwebsoft-129-reflected-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/save-as-pdf-by-pdfcrowd/save-as-pdf-plugin-by-pdfcrowd-440-unauthenticated-php-object-injection 2025-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-category-image-with-grid-and-slider/post-category-image-with-grid-and-slider-147-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/5star/5-star-10-cross-site-request-forgery-to-arbitrary-file-upload 2014-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/groundhogg/groundhogg-3735-authenticated-author-arbitrary-file-upload-via-gh_big_file_upload-function 2025-01-13T20:19:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sangar-slider-lite/sangar-slider-132-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-file-list/simple-file-list-427-arbitrary-file-deletion 2020-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hms-testimonials/hms-testimonials-2011-cross-site-scripting 2013-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woolentor-addons/shoplentor-woocommerce-builder-for-elementor-gutenberg-338-authenticated-contributor-stored-cross-site-scripting-via-product-grid-blockuniqid-block-attribute 2026-05-26T16:17:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-by-supsystic/contact-form-by-supsystic-1729-cross-site-request-forgery-to-stored-cross-site-scripting-via-saveascopy-ajax-action 2025-04-15T14:00:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pmpro-courses/paid-memberships-pro-courses-for-membership-add-on-123-missing-authorization-to-authenticated-subscriber-course-modifications 2023-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foobox-image-lightbox-premium/lightbox-modal-popup-wordpress-plugin-foobox-free-and-premium-2727-authenticated-admin-stored-cross-site-scripting 2024-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-meta-shortcodes/user-meta-shortcodes-05-improper-access-control 2021-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premmerce-redirect-manager/premmerce-redirect-manager-109-authenticated-administrator-stored-cross-site-scripting 2023-03-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/developer-loggers-for-simple-history/developer-loggers-for-simple-history-05-authenticated-admin-local-file-inclusion 2025-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/listify/listify-325-cross-site-request-forgery 2025-10-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirect-redirection/redirect-redirection-113-missing-authorization-in-loadsettings-function 2023-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-last-youtube-video/auto-last-youtube-video-107-cross-site-request-forgery 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp_rokbox/wordpress-rokbox-213-cross-site-scripting 2012-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/disable-comments-wpz/disable-comments-wpzest-151-authenticated-administrator-sql-injection 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-post-after-image-upload/auto-post-after-image-upload-16-missing-authorization 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mobile-detector/wp-mobile-detector-32-stored-cross-site-scripting 2015-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cookie-law-info/gdpr-cookie-consent-compliance-notice-182-authenticated-stored-cross-site-scripting-and-authorization-bypass 2020-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/launcher/launcher-coming-soon-maintenance-mode-1011-authenticated-administrator-stored-cross-site-scripting 2022-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/VirtualAssistant/wp-virtual-assistant-30-missing-authorization 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2022-cross-site-request-forgery 2024-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/vw-education-lite/vw-education-lite-220-missing-authorization 2026-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/linkid/linkid-012-missing-authorization-to-unauthenticated-sensitive-information-exposure 2025-01-08T22:07:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-1387-cross-site-request-forgery-via-add_to_wishlist 2024-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/disable-admin-notices/disable-admin-notices-hide-dashboard-notifications-142-cross-site-request-forgery-to-plugin-settings-update 2026-02-24T20:56:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/goodlayers-blocks/goodlayers-blocks-101-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-2251-authenticated-author-stored-cross-site-scripting 2023-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inline-tweets/inline-tweets-20-unauthenticated-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/random-posts-mp3-player-sharebutton/random-posts-mp3-player-sharebutton-141-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-advanced-search/wp-advanced-search-3393-authenticated-admin-arbitrary-file-upload 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/allada-tshirt-designer-for-woocommerce/allada-t-shirt-designer-for-woocommerce-11-missing-authorization 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-upload/wordpress-file-upload-242-cross-site-request-forgery 2014-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-4157-authenticated-subscriber-sql-injection 2024-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jobhunt-notifications/jobhunt-job-alerts-36-missing-authorization-to-unauthenticated-arbitrary-content-deletion 2025-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gamipress/gamipress-721-unauthenticated-arbitrary-shortcode-execution-via-gamipress_do_shortcode-function 2025-01-21T22:51:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdiscuz/wpdiscuz-763-insecure-direct-object-reference-to-comment-rating-increasedecrease 2023-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-and-date-remover/wp-meta-and-date-remover-236-missing-authorization 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geeky-bot/geekybot-generate-ai-content-without-prompt-chatbot-and-lead-generation-118-unauthenticated-stored-cross-site-scripting 2026-01-13T17:20:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wisly/wisly-100-insecure-direct-object-reference-to-unauthenticated-wishlist-manipulation 2025-11-10T14:57:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/3d-flipbook-dflip-lite/dearflip-pdf-flipbook-3d-flipbook-pdf-embed-pdf-viewer-2429-missing-authorization 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/helloasso/helloasso-1110-missing-authorization 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/expand-maker/read-more-accordion-3551-missing-authorization 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slide-anything/slide-anything-responsive-content-html-slider-and-carousel-2346-authenticated-admin-stored-cross-site-scripting 2022-07-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kahuna/kahuna-170-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-round-robin-lead-distribution/contact-form-7-round-robin-lead-distribution-121-authenticated-administrator-sql-injection 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/js-o3-lite/js-o3-lite-1582-reflected-cross-site-scripting 2025-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/best-wp-google-map/best-wp-google-map-21-authenticated-contributor-stored-cross-site-scripting-via-latitude-shortcode-attribute 2026-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-post/postx-gutenberg-blocks-for-post-grid-249-unauthorized-access-controls 2021-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/wordpress-download-manager-2794-stored-cross-site-scripting 2015-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-metrics/social-metrics-22-authenticated-administrator-stored-cross-site-scripting 2023-10-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-submission-dom-tracking/submission-dom-tracking-for-contact-form-7-20-authenticated-administrator-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-qsm-1035-authenticated-contributor-sql-injection-via-merged_question-parameter 2026-03-23T10:09:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/viewmedica/viewmedica-9-1418-authenticated-contributor-stored-cross-site-scripting 2025-01-14T16:50:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/caddy/caddy-197-cross-site-request-forgery 2023-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fv-wordpress-flowplayer/fv-flowplayer-video-player-6033-stored-cross-site-scripting 2015-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-create-native-android-ios-apps-on-the-cloud-4175-missing-authorization-to-authenticated-subscriber-posts-creation 2025-05-26T11:27:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-551-missing-authorization-to-user-import 2023-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-download-mirror-counter/download-mirror-counter-11-authenticated-contributor-sql-injection 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yop-poll/yop-poll-573-reflected-cross-site-scripting 2015-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot/ai-chatbot-447-missing-authorization-on-openai_settings_option_callback 2023-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slicewp/slicewp-1118-reflected-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedpress/embedpress-382-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-maker/quiz-maker-67064-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jquery-lightbox/wp-jquery-lightbox-154-authenticated-contributor-stored-cross-site-scripting-via-title-attribute 2024-06-06T15:00:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/step-by-step/step-by-step-045-authenticated-contributor-stored-cross-site-scripting 2024-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mlm/wp-mlm-40-unauthenticated-arbitrary-file-upload 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lh-add-media-from-url/lh-add-media-from-url-123-reflected-cross-site-scripting 2024-08-20T17:25:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/greenshift-animation-and-page-builder-blocks/greenshift-animation-and-page-builder-blocks-488-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2022-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-search-pro/ajax-search-pro-4187-cross-site-request-forgery-to-cross-site-scripting 2020-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/knr-author-list-widget/knr-author-list-widget-311-reflected-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-video-gallery/all-in-one-video-gallery-352-missing-authorization 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gmace/gmace-152-authenticatedadmin-directory-traversal 2023-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-contacts-manager/wp-contacts-manager-224-unauthenticated-sql-injection 2022-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-post-grid/the-post-grid-shortcode-gutenberg-blocks-and-elementor-addon-for-post-grid-504-cross-site-request-forgery-in-rttpg_spare_me 2023-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-clone-by-wp-academy/clone-245-missing-authorization 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-custom-fields/advanced-custom-fields-638-secure-custom-fields-6362-authenticated-admin-stored-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/donation-button/donation-button-400-authenticated-contributor-stored-cross-site-scripting 2022-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-express-checkout/wp-express-checkout-228-authenticated-admin-stored-cross-site-scripting-via-pec_couponcode 2023-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpack-addon-for-beaver-builder/powerpack-lite-for-beaver-builder-1303-authenticated-editor-local-file-inclusion 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rss-in-page/rss-in-page-291-authenticated-contributor-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-paypal-payments/quick-paypal-payments-5725-authenticated-contributor-cross-site-scripting 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-safe-search/wp-safe-search-07-cross-site-scripting 2010-12-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rss-manager/rss-manager-006-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-todo/wp-to-do-130-authenticated-admin-stored-cross-site-scripting-via-task-comments 2024-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easycart/wp-easycart-548-cross-site-request-forgery-via-process_bulk_delete_product 2023-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kbucket/kbucket-your-curated-content-in-wordpress-414-reflected-cross-site-scripting 2024-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-blackcheck/wp-blackcheck-272-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/umich-oidc-login/umich-oidc-login-120-authenticated-contributor-stored-cross-site-scripting 2025-02-18T19:26:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stopbadbots/wp-block-and-stop-bad-bots-crawlers-and-spiders-and-anti-spam-protection-plugin-stopbadbots-660-authenticated-sql-injection 2021-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/workreap/workreap-263-insecure-direct-objection-reference-to-private-message-disclosure 2022-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-filterable-portfolio/awesome-filterable-portfolio-197-unauthenticated-stored-cross-site-scripting 2022-09-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iframe/iframe-30-reflected-cross-site-scripting 2015-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/backup-backup/backup-migration-108-139-remote-file-inclusion-via-content-dir 2023-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-price-history/wc-price-history-for-omnibus-213-missing-authorization 2024-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/gutenberg-blocks-by-kadence-blocks-page-builder-features-3231-authenticated-contributor-dom-based-stored-cross-site-scripting-via-countup-widget 2024-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagerecycle-pdf-image-compression/imagerecycle-pdf-image-compression-3113-cross-site-request-forgery-to-settings-update-in-disableoptimization 2024-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/captivatesync-trade/captivate-sync-303-unauthenticated-php-object-injection 2025-05-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/truebooker-appointment-booking/truebooker-110-missing-authorization 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpecounter/wp-views-counter-203-authenticated-contributor-stored-cross-site-scripting 2025-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3246-contributor-cross-site-scripting 2022-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-customers-order-history/woocommerce-customers-order-history-522-missing-authorization 2024-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ocean-extra/ocean-extra-228-authenticated-contributor-stored-cross-site-scripting-via-flickr-widget 2024-06-10T20:23:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lifterlms/lifterlms-wordpress-plugin-33714-arbitrary-file-write 2020-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kb-support/kb-support-customer-support-ticket-helpdesk-plugin-knowledge-base-plugin-174-unauthenticated-sensitive-information-exposure-through-unprotected-directory 2025-04-04T13:14:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/storely/storely-18-authenticated-contributor-stored-cross-site-scripting 2025-01-30T00:54:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-paypal-payments/quick-paypal-payments-5725-unauthenticated-stored-cross-site-scripting 2023-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/appointment-hour-booking/appointment-hour-booking-1372-csv-injection 2022-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/joli-table-of-contents/joli-table-of-contents-139-cross-site-request-forgery 2023-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bwl-advanced-faq-manager/bwl-advanced-faq-manager-214-missing-authorization-to-authenticated-subscriber-limited-arbitrary-options-update 2025-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modern-events-calendar-lite/modern-events-calendar-lite-5164-authenticated-stored-cross-site-scripting 2021-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wu-rating/wu-rating-10-12319-cross-site-scripting 2014-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/realty-portal-agent/realty-portal-agent-039-missing-authorization-to-authenticated-subscriber-privilege-escalation-via-rp_user_profile-function 2025-07-22T14:03:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/minimog/minimogwp-the-high-converting-ecommerce-wordpress-theme-370-unauthenticated-local-php-file-inclusion 2025-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-calendar-booking-plugin-for-appointments-and-events-527-cross-site-request-forgery-in-booking-form-settings-update-to-stored-cross-site-scripting 2026-03-10T11:29:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementskit-lite/elementskit-elementor-addons-lite-306-authenticated-contributor-stored-cross-site-scripting 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-html-mail/wp-html-mail-291-html-injection 2019-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-shortcodes/awesome-shortcodes-172-reflected-cross-site-scripting 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/himer/himer-210-cross-site-request-forgery-to-poll-voting 2024-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real-wysiwyg/real-wysiwyg-002-reflected-cross-site-scripting 2021-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gs-books-showcase/wordpress-book-plugin-for-displaying-books-in-grid-flip-slider-popup-layout-and-more-131-authenticated-contributor-stored-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-fancybox/advanced-fancybox-111-cross-site-request-forgery-to-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jobwp/jobwp-job-board-job-listing-career-page-and-recruitment-plugin-239-unauthenticated-sql-injection 2025-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theme-tuner/theme-tuner-08-remote-file-inclusion 2012-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-119-stored-cross-site-scripting 2020-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mapsvg/mapsvg-874-authenticated-contributor-arbitrary-file-upload 2025-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sticky-buttons/sticky-buttons-322-authenticated-admin-stored-cross-site-scripting 2024-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pretty-google-calendar/pretty-google-calendar-200-missing-authorization-to-unauthenticated-google-api-key-exposure 2025-12-19T15:06:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coreactivity/coreactivity-201-ip-spoofing 2024-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-custom-product-addons/product-addons-for-woocommerce-product-options-with-custom-fields-310-authenticated-shop-manager-code-injection-via-conditional-logic-operator-parameter 2026-02-17T18:40:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xpro-theme-builder/xpro-theme-builder-129-missing-authorization 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-maps/wp-go-maps-formerly-wp-google-maps-9028-reflected-cross-site-scripting 2024-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popcashnet-code-integration-tool/popcash-code-integration-tool-11-reflected-cross-site-scripting 2017-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforo/wpforo-forum-165-cross-site-scripting-via-s-parameter 2020-05-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-seopress/seopress-761-information-exposure 2024-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/map-my-locations/map-my-locations-11-authenticated-contributor-stored-cross-site-scripting 2025-07-17T16:20:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dx-sources/dx-sources-201-cross-site-request-forgery-to-settings-update 2026-05-04T14:06:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fabrica-reusable-block-instances/fabrica-synced-pattern-instances-108-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broadstreet/broadstreet-1531-authenticated-subscriber-information-disclosure 2026-05-12T15:29:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpextended/the-ultimate-wordpress-toolkit-wp-extended-3011-missing-authorization-to-authenticated-subscriber-remote-code-execution 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userpro/userpro-511-authentication-bypass-to-administrator 2023-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/manage-user-columns/manage-user-columns-105-cross-site-request-forgery 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geodirectory/geodirectory-2328-authenticatedadministrator-sql-injection 2023-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premmerce-redirect-manager/premmerce-redirect-manager-1011-authenticated-administrator-stored-cross-site-scripting 2023-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-339-authenticated-administrator-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zotpress/zotpress-613-sql-injection 2016-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latex2html/latex2html-255-reflected-cross-site-scripting 2024-12-20T20:38:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buy-one-click-woocommerce/buy-one-click-woocommerce-229-missing-authorization-to-authenticated-subscriber-settings-import 2024-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-data-filter-and-taxonomy-filter/wordpress-meta-data-and-taxonomies-filter-mdtf-1332-unauthenticated-arbitrary-shortcode-execution 2024-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/3d-presentation/3d-presentation-10-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-staging/wp-staging-wordpress-backup-plugin-free-312-and-pro-512-sensitive-information-exposure 2023-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-1359-insufficient-access-control-to-template-conditions-modification 2023-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/calendar-event/event-calendar-146-missing-authorization-to-event-modification 2022-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aimogen-pro/aimogen-pro-275-unauthenticated-privilege-escalation-via-arbitrary-function-call 2026-03-19T15:13:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cibeles-ai/cibeles-ai-1108-unauthenticated-arbitrary-file-upload 2025-11-25T09:39:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vi-include-post-by/vi-include-post-by-04200706-authenticated-contributor-stored-cross-site-scripting-via-class_container-shortcode-attribute 2026-04-14T19:45:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thinkit-wp-contact-form/thinkit-wp-contact-form-03-cross-site-request-forgery 2013-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/albumreviewer/album-reviewer-202-unauthenticated-stored-cross-site-scripting 2025-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-access-areas/access-areas-1519-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-symposium/wp-symposium-1411-arbitrary-file-upload 2014-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b2bking-wholesale-for-woocommerce/b2bking-4600-missing-authorization-to-authenticatedsubscriber-price-modification 2023-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lingotek-translation/ray-enterprise-translation-170-unauthenticated-local-file-inclusion 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/proofreading/proofreading-1211-reflected-cross-site-scripting 2025-01-16T18:27:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wps-limit-login/wps-limit-login-1461-cross-site-request-forgery 2019-07-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duplicator-pro/duplicator-157-and-duplicator-pro-45142-unauthenticated-sensitive-information-exposure 2023-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/legal-pages/legal-pages-137-missing-authorization-on-deletelegaltemplate 2023-09-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/infocob-crm-forms/infocob-crm-forms-240-authenticated-editor-arbitrary-file-download 2025-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-woocommerce-quickbooks/integration-for-woocommerce-and-quickbooks-131-cross-site-request-forgery 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/architecturer/architecturer-395-reflected-cross-site-scripting 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdirectorykit/wp-directory-kit-129-reflected-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-kingcomposer/premium-addons-for-kingcomposer-111-unauthenticated-local-file-inclusion 2025-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscribe-sidebar/subscribe-sidebar-plugin-by-blubrry-131-reflected-cross-site-scripting 2020-08-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sw_ajax_woocommerce_search/sw-ajax-woocommerce-search-126-reflected-cross-site-scripting 2020-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/knowledgebase/knowledge-base-231-authenticated-administrator-stored-cross-site-scripting-via-plugin-slug 2025-07-17T11:39:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stars-testimonials-with-slider-and-masonry-grid/stars-testimonials-331-authenticated-contributor-stored-cross-site-scripting-via-stars_testimonials-shortcode 2024-09-30T19:04:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/deans-fckeditor-with-pwwangs-code-plugin-for-wordpress/deans-fckeditor-100-arbitrary-file-upload 2012-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletters-lite/newsletter-lite-492-authenticated-admin-command-injection 2023-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/categorized-gallery/categorized-gallery-plugin-20-authenticated-contributor-sql-injection 2025-02-18T19:22:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seriously-simple-podcasting/seriously-simple-podcasting-2190-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2022-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-store-locator/ajax-store-locator-12-arbitrary-file-download 2014-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/podlove-podcasting-plugin-for-wordpress/podlove-podcast-publisher-4014-cross-site-request-forgery 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-side-data-storage-for-contact-form-7/admin-side-data-storage-for-contact-form-7-111-cross-site-request-forgery 2024-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-top-bar/custom-top-bar-202-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-generator-for-wp/pdf-generator-for-wordpress-111-reflected-cross-site-scripting 2023-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/filebird/filebird-6421-authenticated-author-insecure-direct-object-reference 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/magical-addons-for-elementor/magical-addons-for-elementor-136-authenticated-contributor-stored-cross-site-scripting 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-woocommerce-csv-loader/ultimate-woocommerce-csv-importer-20-reflected-cross-site-scripting 2022-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/header-footer-code-manager/header-footer-code-manager-1116-reflected-cross-site-scripting 2022-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-topbar/wp-topbar-304-cross-site-scripting 2013-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce/woocommerce-2210-cross-site-scripting 2015-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/app-builder/app-builder-create-native-android-ios-apps-on-the-flight-433-unauthenticated-limited-sql-injection-via-app-builder-search 2024-08-20T17:24:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-specific-content/user-specific-content-106-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/armember/armember-premium-592-missing-authorization 2023-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ari-cf7-connector/contact-form-7-connector-122-cross-site-request-forgery-to-reflected-cross-site-scripting 2024-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uber-grid/wordpress-portfolio-builder-portfolio-gallery-117-authenticated-contributor-stored-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/classic/classic-15-cross-site-scripting 2007-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/typing-text/typing-text-127-authenticated-contributor-stored-cross-site-scripting 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/graphina-elementor-charts-and-graphs/graphina-311-unauthenticated-local-file-inclusion 2025-07-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-3164-authenticated-contributor-stored-cross-site-scripting-via-get_inline_svg 2023-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/joomsport-sports-league-results-management/joomsport-5617-reflected-cross-site-scripting-via-page 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/folder-gallery/folder-gallery-174-authenticated-contributor-stored-cross-site-scripting 2024-12-05T19:50:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-analytify/analytify-543-missing-authorization 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-by-10web/seo-by-10web-129-reflected-cross-site-scripting 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cosmosfarm-share-buttons/-by-19-authenticated-contributor-stored-cross-site-scripting 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-email-capture/wordpress-email-marketing-plugin-wp-email-capture-310-information-exposure-via-wp_email_capture_options_process 2023-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lock-your-updates/lock-your-updates-11-reflected-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/DA10/dating-1120-cross-site-request-forgery 2025-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/zoxpress/zoxpress-the-all-in-one-wordpress-news-theme-2120-missing-authorization-to-authenticated-subscriber-arbitrary-options-update 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailchimp-top-bar/mc4wp-mailchimp-top-bar-160-reflected-cross-site-scripting 2024-10-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themeisle-companion/orbit-fox-by-themeisle-21030-authenticated-contributor-stored-cross-site-scripting-via-form-widget-addr2_width-attribute 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sureforms/sureforms-drag-and-drop-form-builder-for-wordpress-173-unauthenticated-arbitrary-file-deletion-triggered-via-administrator-submission-deletion 2025-07-08T17:20:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/snapshot-backup/snapshot-backup-211-cross-site-request-forgery-to-stored-cross-site-scripting 2024-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/malware-finder/malware-finder-11-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/team-members/team-members-535-authenticated-contributor-stored-cross-site-scripting 2025-09-26T13:33:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-checkout-field-editor-pro/checkout-field-editor-for-woocommerce-pro-362-unauthenticated-arbitrary-file-deletion 2024-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revampcrm-woocommerce/revamp-crm-for-woocommerce-112-reflected-cross-site-scripting 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-radio/wp-radio-worldwide-online-radio-stations-directory-for-wordpress-319-missing-authorization-via-multiple-ajax-actions 2024-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/favorites/favorites-234-authenticated-admin-stored-cross-site-scripting 2025-03-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/theron-lite/theron-lite-20-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-06-27T20:13:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mini-course-generator/mini-course-generator-embed-mini-courses-and-interactive-content-105-authenticated-contributor-stored-cross-site-scripting 2025-02-20T14:52:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-imagezoom/wp-imagezoom-110-reflected-cross-site-scripting 2024-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-a-complete-recruitment-system-for-company-or-job-board-website-225-authenticated-subscriber-insecure-direct-object-reference 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3293-authenticated-contributor-stored-cross-site-scripting-via-wpdm_modal_login_form-shortcode 2024-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcode-content-ratio/wpcode-content-ratio-20-reflected-cross-site-scripting 2025-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/directorist/directorist-754-authenticated-subscriber-insecure-direct-object-reference-to-arbitrary-post-deletion-in-listing_task 2023-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-testimonials/easy-testimonials-352-authenticated-stored-cross-site-scripting 2020-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ghactivity/ghactivity-200-alpha-authenticated-contributor-stored-cross-site-scripting 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rocket-wp-mobile/mobile-plugin-133-reflected-cross-site-scripting 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexible-cookies/flexible-cookies-118-cross-site-request-forgery 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hostel/hostel-1151-authenticated-administrator-stored-cross-site-scripting-via-manage-bookings 2023-05-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gravity-forms-pdf-extended/gravity-pdf-630-reflected-cross-site-scripting 2022-06-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ecommerce-product-catalog/ecommerce-product-catalog-3326-sensitive-information-exposure-via-csv-files 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3270-insufficient-authorization-to-information-disclosure 2023-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themedy-toolbox/themedy-toolbox-1016-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jm-twitter-cards/jm-twitter-cards-14-information-exposure-via-meta-description 2024-03-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-flot/wp-flot-022-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-11T14:31:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/goodlayers-core/goodlayers-core-217-authenticated-contributor-privilege-escalation 2025-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bft-autoresponder/arigato-autoresponder-and-newsletter-2518-sql-injection 2018-09-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cmp-coming-soon-maintenance/cmp-coming-soon-maintenance-plugin-4018-unauthenticated-arbitrary-css-update 2022-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-207-authenticated-contributor-sql-injection-via-filter_search-parameter 2026-05-13T14:22:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-chessboard/embed-chessboard-30700-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dokan-lite/dokan-3712-authenticated-vendor-sql-injection 2023-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popping-content-light/popping-content-light-24-reflected-cross-site-scripting 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/catch-breadcrumb/catch-breadcrumb-154-reflected-cross-site-scripting 2020-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-autosearch/wp-autocomplete-search-104-unauthenticated-sql-injection 2022-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration-using-contact-form-7/user-registration-using-contact-form-7-25-authenticated-subscriber-information-exposure 2026-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-cafe/wpcafe-food-menu-woocommerce-food-ordering-food-delivery-pickup-and-restaurant-reservation-214-cross-site-scripting 2022-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/free-product-table-for-woocommerce/free-woocommerce-product-table-view-178-missing-authorization 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-free-widgets-addons-templates-15121-reflected-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hydra-booking/hydra-booking-all-in-one-appointment-booking-system-appointment-scheduling-booking-calendar-woocommerce-bookings-1127-missing-payment-verification-to-unauthenticated-payment-bypass 2025-11-10T22:39:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41031-authenticated-contributor-stored-cross-site-scripting-via-fancy-text-widget 2024-05-30T17:20:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-load-more/simple-load-more-10-reflected-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paypal-brasil-para-woocommerce/paypal-brasil-para-woocommerce-142-cross-site-request-forgery 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-social-bookmarking-light/wp-social-bookmarking-light-1710-cross-site-scripting 2015-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qyrr-code/qyrr-simply-and-modern-qr-code-creation-07-cross-site-scripting 2021-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/review-wave-google-places-reviews/review-wave-google-places-reviews-147-cross-site-request-forgery 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-youtube-videos-as-wp-post/import-youtube-videos-as-wp-posts-21-missing-authorization 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-blog-card/simple-blog-card-237-authenticated-contributor-server-side-request-forgery 2026-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fade-in-text-news/wp-fade-in-text-news-120-authenticated-subscriber-sql-injection-via-shortcode 2023-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/octrace-support/wordpress-helpdesk-support-ticket-system-plugin-octrace-support-127-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wm-jqmath/wm-jqmath-13-authenticated-contributor-stored-cross-site-scripting-via-style-shortcode-attribute 2026-04-14T19:46:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-forms/wordpress-contact-forms-by-cimatti-154-unauthenticated-stored-cross-site-scripting 2023-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/daisycon/daisycon-prijsvergelijkers-484-authenticated-contributor-sql-injection 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yellow-pencil-visual-theme-customizer/visual-css-style-editor-720-unauthenticated-arbitrary-options-update 2019-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/linkz-ai/linkzai-118-missing-authorization-to-unauthenticated-plugin-settings-update 2024-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oneclick-whatsapp-order/oneclick-chat-to-order-109-missing-authorization-to-authenticated-editor-plugin-settings-update 2026-02-18T16:05:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flowfact-wp-connector/flowfact-wp-connector-218-reflected-cross-site-scripting 2023-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-store-locator/wp-store-locator-22261-authenticated-contributor-stored-cross-site-scripting-via-wpsl_address-post-meta 2026-04-22T14:42:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-membership/simple-membership-453-unauthenticated-open-redirect 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wechat-subscribers-lite/wechat-subscribers-lite-166-reflected-cross-site-scripting 2024-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-112-missing-authorization-in-deletecssandjscachetoolbar 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nexa-blocks/nexa-blocks-111-unauthenticated-blind-server-side-request-forgery-via-demo_json_file-parameter 2026-05-19T12:03:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/echo-knowledge-base/echo-knowledge-base-documentation-faqs-ai-chat-ai-search-160110-missing-authorization 2026-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2110-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-20T14:20:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/support-chat/click-to-chat-wp-support-all-in-one-floating-widget-233-authenticated-contributor-stored-cross-site-scripting-via-wpsaio_snapchat-shortcode 2024-10-17T19:22:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/charity-addon-for-elementor/charity-addon-for-elementor-132-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gotham-block-extra-light/gotham-block-extra-light-150-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2026-01-13T17:17:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/companion-auto-update/companion-auto-update-392-authenticated-administrator-stored-cross-site-scripting-via-update_delay_days-parameter 2025-07-14T20:39:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter/newsletter-326-reflected-cross-site-scripting 2013-05-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcomplete/wpcomplete-2954-authenticated-subscriber-stored-cross-site-scripting 2026-05-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-activity-log/user-activity-log-164-unauthenticated-sql-injection 2023-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/folders/folders-30-and-folders-pro-302-directory-traversal-via-handle_folders_file_upload 2024-06-13T15:33:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-digital-downloads/easy-digital-downloads-257-php-object-injection 2016-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wphotfiles/hot-files-file-sharing-and-download-manager-plugin-100-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accessally/accessally-356-information-exposure 2021-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-copysafe-web/copysafe-web-protection-315-reflected-cross-site-scripting 2024-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-maintenance-mode-site-under-construction/wp-maintenance-mode-site-under-construction-182-cross-site-request-forgery-to-arbitrary-plugin-installationactivation 2021-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-edit/wp-edit-404-authenticated-administrator-stored-cross-site-scripting 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-donation-plugin-and-fundraising-platform-3221-authenticated-subscriber-sensitive-information-exposure 2025-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pliska/pliska-035-authenticated-contributor-stored-cross-site-scripting-via-author-display-name 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/basepress-migration-tools/basepress-migration-tools-100-authenticated-subscriber-arbitrary-file-upload 2024-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/agp-font-awesome-collection/agp-font-awesome-collection-324-reflected-cross-site-scripting 2023-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/optinmonster/popup-builder-by-optinmonster-wordpress-popups-for-optins-email-newsletters-and-lead-generation-2161-authenticated-contributor-stored-cross-site-scripting 2024-05-24T16:30:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-search/better-search-421-authenticated-author-stored-cross-site-scripting 2025-11-22T13:00:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rate-my-post/rate-my-post-wp-rating-system-334-cross-site-request-forgery 2022-09-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-search/better-search-330-unauthenticated-stored-cross-site-scripting 2024-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/agile-store-locator/store-locator-wordpress-148-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2022-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-for-elementor-forms/pdf-for-elementor-forms-drag-and-drop-template-builder-620-authenticated-contributor-stored-cross-site-scripting 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geo-mashup/geo-mashup-1104-cross-site-scripting 2018-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-membership/micropayments-324-reflected-cross-site-scripting 2025-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpbrutalai/wp-brutal-ai-200-cross-site-request-forgery-to-sql-injection 2023-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-by-rank-math-pro/rank-math-seo-pro-3035-reflected-cross-site-scripting 2023-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-hover-effects/image-hover-effects-54-authenticated-administrator-stored-cross-site-scripting 2022-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/groundhogg/groundhogg-2711-authenticated-administrator-sql-injection 2023-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-snow-effect/snow-effect-1115-missing-authorization 2025-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-table/easy-table-152-authenticated-stored-cross-site-scripting-via-easy-table-test-area-parameter 2015-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usc-e-shop/welcart-e-commerce-21116-authenticated-editor-php-object-injection 2025-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/machic-core/machic-core-126-reflected-cross-site-scripting 2023-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-vertical-timeline/simple-vertical-timeline-01-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-csv-importer/wp-ultimate-csv-importer-798-authenticated-author-php-file-creation-to-remote-code-execution 2023-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modern-events-calendar-lite/modern-events-calendar-lite-5165-authenticated-sql-injection 2021-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-youtube-live/wp-youtube-live-182-admin-stored-cross-site-scripting 2022-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-contact-form-33211-sql-injection 2019-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/click-to-tweet/click-to-tweet-2014-reflected-cross-site-scripting 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tripadvisor-shortcode/tripadvisor-shortcode-22-authenticated-administrator-stored-cross-site-scripting 2025-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wavesurfer-wp/wavesurfer-wp-283-authenticated-contributor-stored-cross-site-scripting-via-src-shortcode-attribute 2026-02-05T18:34:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-security-and-firewall/all-in-one-security-aios-security-and-firewall-525-reflected-cross-site-scripting 2024-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weight-based-shipping-for-woocommerce/woocommerce-weight-based-shipping-541-cross-site-request-forgery-leading-to-plugin-settings-changes 2023-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/option-tree/option-tree-272-object-injection-bypass 2019-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/activitytime/wp-sessions-time-monitoring-full-automatic-108-unauthenticated-sql-injection 2023-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/timetics/timetics-1046-incorrect-authorization-to-authenticated-timetics-customer-user-creation 2026-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/colormix/colormix-all-versions-multiple-vulnerabilities 2013-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advance-menu-manager/advanced-menu-manager-306-authenticated-subscriber-menu-creationdeletion 2021-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-forms/contact-forms-by-cimatti-154-reflected-cross-site-scripting-via-form-field-id-edit-fid-id-name-type-description-parameters 2023-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duplicator/duplicator-wordpress-migration-plugin-147-unauthenticated-backup-download 2022-07-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oopspam-anti-spam/oopspam-anti-spam-spam-protection-for-wordpress-forms-comments-no-captcha-1253-unauthenticated-ip-header-spoofing 2025-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wishsuite/wishsuite-134-authenticated-administrator-stored-cross-site-scripting 2023-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-upload/wordpress-file-upload-42412-unuathenticated-remote-code-execution 2025-01-07T18:43:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/easybook/cththemes-citybook-theme-234-townhub-theme-106-easybook-theme-122-cross-site-scripting 2019-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/raygun4wp/raygun4wp-182-cross-site-scripting 2017-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-digital-downloads/easy-digital-downloads-2102-cross-site-request-forgery 2021-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/onelogin-saml-sso/onelogin-saml-sso-242-use-of-vulnerable-component 2016-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-access-manager/advanced-access-manager-282-arbitrary-file-overwrite 2014-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-events-calendar-bookings-and-tickets-343-missing-authorization-to-authenticated-subscriber-arbitrary-post-deletion 2024-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flickr-gallery/flickr-gallery-152-unauthenticated-php-object-injection 2017-10-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/piotnetforms/piotnet-forms-1030-authenticated-editor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-real-estate/essential-real-estate-520-unauthenticated-local-file-inclusion 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rest-api-to-miniprogram/rest-api-to-miniprogram-471-unauthenticated-arbitrary-user-email-update-and-privilege-escalation-via-account-takeover 2024-09-24T12:22:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/disable-comments/disable-comments-remove-comments-stop-spam-multi-site-support-104-cross-site-request-forgery 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wassup/wassup-real-time-analytics-1945-unauthenticated-stored-cross-site-scripting-via-ip 2023-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clariti/clariti-121-missing-authorization 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thumbnail-for-excerpts/thumbnail-for-excerpts-21-cross-site-request-forgery 2022-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acf-better-search/acf-better-search-330-cross-site-request-forgery 2019-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/marketing-optimizer/marketing-optimizer-20200925-cross-site-request-forgery-to-stored-cross-site-scripting 2024-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-image-manipulator/simple-image-manipulator-10-remote-file-download 2015-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cyber-new-slider/cyber-slider-11-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/childhope/childhope-118-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/appointment-hour-booking/appointment-hour-booking-1315-admin-stored-cross-site-scripting 2021-09-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/full-site-editing/wordpresscom-editing-toolkit-378784-authenticated-contributor-stored-cross-site-scripting 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-event-solution/eventin-405-authenticated-author-stored-cross-site-scripting 2024-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-seo-pack/all-in-one-seo-4131-4152-authenticated-sql-injection 2021-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jupiterx-core/jupiter-theme-6101-and-jupiterx-core-plugin-207-authenticated-privilege-escalation 2022-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blockspare/blockspare-324-authenticated-contributor-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobsearch/jobsearch-259-unauthenticated-php-object-injection 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/icegram/icegram-1918-cross-site-request-forgery 2016-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/newscrunch/newscrunch-184-authenticated-subscriber-arbitrary-file-upload 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gd-security-headers/gd-security-headers-17-authenticated-admin-sql-injection 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/enfold/enfold-609-authenticated-subscriber-server-side-request-forgery-via-attachment_id 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-602-authenticated-contributor-stored-cross-site-scripting-via-use-of-the_meta-function 2022-08-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-field-template/custom-field-template-258-cross-site-request-forgery-via-plugin-options-update 2023-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ratemyagent-official/ratemyagent-official-140-cross-site-request-forgery-to-api-key-update 2025-02-27T16:15:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-advanced-shipment-tracking/advanced-shipment-tracking-for-woocommerce-352-cross-site-request-forgery-via-paginate_shipping_provider_list-and-filter_shipping_provider_list 2023-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gdpr-compliance/gdpr-compliance-125-authenticated-subscriber-information-exposure 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ip-blacklist-cloud/ip-blacklist-cloud-343-directory-traversal 2015-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpml/wpml-461-cross-site-scripting 2023-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/allegiant/allegiant-127-authenticated-contributor-stored-cross-site-scripting 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/streamweasels-kick-integration/streamweasels-kick-integration-114-authenticated-contributor-stored-cross-site-scripting 2025-07-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bwp-google-xml-sitemaps/better-wordpress-google-xml-sitemaps-141-unauthenticated-stored-cross-site-scripting 2022-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-hotel-booking/wp-hotel-booking-200-missing-authorization-to-settings-update 2022-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dokan-lite/dokan-ai-powered-woocommerce-multivendor-marketplace-solution-build-your-own-amazon-ebay-etsy-424-missing-authorization 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ace-post-type-builder/ace-post-type-builder-19-missing-authorization-to-authenticated-subscriber-arbitrary-custom-taxonomy-deletion-via-taxonomy-parameter 2025-11-24T19:07:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/twwc-protein/tww-protein-calculator-1024-authenticated-administrator-stored-cross-site-scripting-via-header-setting 2025-12-11T14:33:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popular-posts-by-webline/popular-posts-by-webline-111-authenticated-contributor-stored-cross-site-scripting 2025-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-videos/video-gallery-241-authenticated-administrator-stored-cross-site-scripting 2024-12-05T14:36:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-maintenance-mode/lightstart-maintenance-mode-coming-soon-and-landing-page-builder-268-missing-authorization 2024-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-autokeyword/wp-autokeyword-10-reflected-cross-site-scripting 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirect-redirection/redirect-redirection-113-missing-authorization-in-addredirectrule-function 2023-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forumwp/forumwp-forum-discussion-board-plugin-202-insecure-direct-object-reference-to-authenticated-subscriber-privilege-escalation-via-account-takeover 2024-09-06T01:21:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-manager/user-registration-202-authenticated-stored-cross-site-scripting 2021-09-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-map-pro-lite/image-map-pro-drag-and-drop-builder-for-interactive-images-lite-100-missing-authorization-to-stored-cross-site-scripting 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-for-ultimate-member/video-photo-gallery-for-ultimate-member-111-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wanium/wanium-198-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sweet-energy-efficiency/sweet-energy-efficiency-108-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stencies/stencies-058-reflected-cross-site-scripting 2025-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-mirror/content-mirror-12-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobsearch/jobsearch-254-missing-authorization 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpextended/the-ultimate-wordpress-toolkit-wp-extended-3014-reflected-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/scape/scape-1513-unauthenticated-php-object-injection 2025-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-woo-labels/advanced-woo-labels-236-authenticated-admin-remote-code-execution 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addressbook/addressbook-113-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quickswish/quickswish-109-cross-site-request-forgery-to-arbitrary-plugin-activation 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sms/wp-sms-messaging-sms-notification-for-wordpress-woocommerce-gravityforms-etc-549-reflected-cross-site-scripting 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coming-soon-page/coming-soon-and-maintenance-mode-352-authenticated-stored-cross-site-scripting 2021-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nmedia-user-file-uploader/frontend-file-manager-plugin-225-authenticated-editor-directory-traversal 2023-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/recipe-card-blocks-by-wpzoom/recipe-card-blocks-for-gutenberg-elementor-331-missing-authorization 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kids-online-store/kids-online-store-089-authenticated-subscriber-arbitrary-file-upload 2026-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-exporter/woocommerce-store-exporter-175-reflected-cross-site-scripting 2014-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/transfinanz/transfinanz-100-reflected-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-search-lite/ajax-search-lite-311-remote-code-execution 2014-06-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-sub-pages/list-subpages-106-authenticated-contributor-stored-cross-site-scripting-via-title-parameter 2025-08-28T15:44:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-contact-form-the-drag-and-drop-form-builder-for-wordpress-286-reflected-cross-site-scripting 2014-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cz-loan-management/cz-loan-management-11-unauthenticated-sql-injection 2024-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/greenwallet-gateway/woocommerce-green-wallet-gateway-101-reflected-cross-site-scripting 2022-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/intelligence/intelligence-140-unauthenticated-full-path-disclosure 2024-07-26T13:05:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/header-footer-elementor/elementor-header-footer-builder-1635-authenticated-contributor-stored-cross-site-scripting-via-site-title-widget 2024-06-12T17:22:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/2j-slideshow/slideshow-image-slider-by-2j-1354-reflected-cross-site-scripting 2022-05-04T07:18:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/designthemes-portfolio/designthemes-portfolio-13-reflected-cross-site-scripting 2026-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ewww-image-optimizer/ewww-image-optimizer-201-reflected-cross-site-scripting 2014-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-hotel-booking/hotel-booking-228-cross-site-request-forgery 2025-11-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zip-attachments/zip-attachments-15-directory-traversal 2015-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-and-rental-manager-for-woocommerce/booking-and-rental-manager-for-bike-car-resort-appointment-dress-equipment-271-missing-authorization 2026-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slideshow-gallery/slideshow-gallery-165-cross-site-scripting-via-method 2017-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscription-with-secure-captcha/easy-email-subscription-13-unauthenticated-stored-cross-site-scripting 2025-11-11T21:45:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vcos/vcos-140-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-addons/woocommerce-product-add-ons-613-cross-site-request-forgery 2023-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-357-unprotected-rest-api-to-email-injection 2021-09-22T15:21:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/team-display/team-builder-13-reflected-cross-site-scripting 2025-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-search-for-woocommerce/fibosearch-1170-authenticated-admin-stored-cross-site-scripting 2022-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amen/amen-331-authenticated-admin-stored-cross-site-scripting 2024-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modal-window/modal-window-614-cross-site-request-forgery-to-settings-ipdate 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-addon-for-elementor/events-addon-for-elementor-220-authenticated-contributor-stored-cross-site-scripting 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shiftcontroller/shiftcontroller-employee-shift-scheduling-4925-reflected-cross-site-scripting-via-query-string 2023-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oliver-pos/oliver-pos-a-woocommerce-point-of-sale-pos-2421-missing-authorization 2024-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-attachments/wp-attachments-505-authenticated-administrator-stored-cross-site-scripting 2022-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/use-any-font/use-any-font-6308-cross-site-request-forgery 2024-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sunshine-photo-cart/sunshine-photo-cart-362-unauthenticated-information-exposure 2026-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/nanocare/nanocare-122-missing-authorization 2026-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qzzr-shortcode/qzzr-shortcode-plugin-101-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-10-30T14:01:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addonskit-for-elementor/directorist-addonskit-for-elementor-116-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feed-them-social/feed-them-social-169-reflected-cross-site-scripting 2015-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-2-factor-authentication/minioranges-google-authenticator-611-missing-authorization 2025-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce/woocommerce-902-unauthenticated-html-injection 2024-10-14T17:07:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.4/wordpress-core-44-brute-force-password-recovery-tokens 2015-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliate-toolkit-starter/affiliate-toolkit-wp-affiliate-plugin-with-amazon-370-authenticated-contributor-stored-cross-site-scripting 2025-01-23T21:34:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirection/redirection-228-reflected-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gsheetconnector-caldera-forms/caldera-forms-google-sheets-connector-13-cross-site-request-forgery 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sneeit-framework/sneeit-framework-83-unauthenticated-remote-code-execution-in-sneeit_articles_pagination_callback 2025-11-24T14:03:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vikbooking/vikbooking-hotel-booking-engine-pms-1512-cross-site-request-forgery-in-exec_admin_widget-function 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/navigation-tree-elementor/navigation-tree-elementor-101-authenticated-subscriber-sql-injection 2025-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-facebook-events/import-social-events-185-authenticated-contributor-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yikes-inc-easy-mailchimp-extender/easy-forms-for-mailchimp-688-reflected-cross-site-scripting 2023-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-draft-list/draft-list-262-authenticated-contributor-stored-cross-site-scripting-via-display_name-parameter 2026-03-18T18:13:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sumome/sumo-134-cross-site-request-forgery 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/armember/armember-premium-731-unauthenticated-sql-injection-via-order-parameter 2026-06-02T05:30:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-import-pro/wp-all-import-pro-497-cross-site-request-forgery-to-imported-content-deletion 2025-02-07T03:06:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foobox-image-lightbox/lightbox-modal-popup-wordpress-plugin-foobox-2734-authenticated-author-stored-cross-site-scripting 2025-07-07T16:14:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unify/unify-349-missing-authorization-to-unauthenticated-option-deletion-via-unify_plugin_downgrade-parameter 2026-01-06T19:46:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/gutenberg-blocks-by-kadence-blocks-page-builder-features-3225-authenticated-contributor-stored-cross-site-scripting-via-testimonial-widget 2024-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/school-management/school-management-system-for-wordpress-9300-authenticated-student-account-takeover-and-privilege-escalation 2025-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-testimonials-showcase/simple-testimonials-showcase-116-cross-site-request-forgery 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-upload/wordpress-file-upload-4240-cross-site-request-forgery 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aspose-importer-exporter/aspose-importer-exporter-discontinued-30-arbitrary-file-download 2015-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-cross-site-scripting-via-shortcodes 2017-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/almera/almera-responsive-portfolio-site-template-2015-05-15-sensitive-information-disclosure 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reloadly-topup-widget/reloadly-201-cross-site-request-forgery 2025-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdeepl/deepl-pro-api-translation-2411-cross-site-request-forgery-via-wpdeepl_prune_logs 2023-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hummingbird-performance/hummingbird-331-admin-stored-cross-site-scripting 2022-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/credit-tracker/credit-tracker-1117-authenticated-contributor-stored-cross-site-scripting 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-downloader/media-downloader-0475-reflected-cross-site-scripting 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-map-plugin/wp-maps-491-unauthenticated-sql-injection-via-location_id-parameter 2026-03-10T17:22:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-244-missing-authorization 2026-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mybooktable/mybooktable-bookstore-340-cross-site-request-forgery 2024-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/book-press/bookpress-for-book-authors-127-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-social-share-buttons/easy-social-share-buttons-145-reflected-cross-site-scripting 2024-10-09T13:32:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-pdf-viewer/embed-pdf-viewer-244-authenticated-contributor-stored-cross-site-scripting-via-height-and-width-parameters 2024-10-08T18:54:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-elementor-addons/happy-addons-for-elementor-3103-authenticated-contributor-stored-cross-site-scripting-via-author-meta-widget 2024-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/planmyday/plan-my-day-1113-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-catalogue/simple-catalogue-102-reflected-cross-site-scripting 2025-02-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-fancybox/firelight-lightbox-2316-authenticated-contributor-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/houzez-crm/houzez-crm-147-missing-authorization 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/falang/falang-multilanguage-for-wordpress-1349-authenticated-administrator-stored-cross-site-scripting 2024-05-10T08:52:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/avirato-calendar/avirato-hotels-online-booking-engine-505-authenticated-subscriber-sql-injection 2023-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/envo-extra/envo-extra-1911-authenticated-contributor-stored-cross-site-scripting 2025-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html5-lyrics-karaoke-player/html5-lyrics-karaoke-player-24-reflected-cross-site-scripting 2024-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliate-toolkit-starter/affiliate-toolkit-385-authenticated-editor-remote-code-execution 2026-05-26T17:32:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bws-pinterest/bestwebsofts-pinterest-104-reflected-cross-site-scripting 2017-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-history/simple-history-581-authenticated-administrator-sensitive-information-exposure-via-detective-mode 2025-06-05T21:58:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extended-post-status/extended-post-status-1019-missing-authorization-via-wp_insert_post_data 2023-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-email/contact-form-email-1341-captcha-bypass 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gravityforms/gravity-forms-29211-unauthenticated-arbitrary-file-upload-via-legacy-chunked-upload 2025-11-17T14:26:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-tradingview/wp-tradingview-17-authenticated-contributor-stored-cross-site-scripting 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ip2location-country-blocker/ip2location-country-blocker-2388-missing-authorization-to-unauthenticated-information-exposure-via-admin_init-function 2025-02-21T19:56:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/allow-html-in-category-descriptions/allow-html-in-category-descriptions-124-authenticated-administrator-stored-cross-site-scripting-via-category-descriptions 2026-02-13T18:18:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eg-attachments/eg-attachments-213-reflected-cross-site-scripting-via-paged 2023-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/plainview-protect-passwords/plainview-protect-passwords-14-reflected-cross-site-scripting 2023-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-embedder/pdf-embedder-464-authenticated-contributor-stored-cross-site-scripting 2024-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/use-memcached/use-memcached-105-cross-site-request-forgery 2023-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/portfolio-gallery/portfolio-gallery-210-reflected-cross-site-scripting 2016-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordlift/wordlift-3371-authenticated-administrator-stored-cross-site-scripting 2022-08-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/code-quality-control-tool/code-quality-control-tool-21-unauthenticated-information-exposure-via-log-files 2025-10-10T20:31:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formidable/formidable-form-builder-556-cross-site-request-forgery 2023-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/404-redirection-manager/404-seo-redirection-13-cross-site-request-forgery 2021-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hide-categories-or-products-on-shop-page/hide-categories-or-products-on-shop-page-107-cross-site-request-forgery-to-settings-update 2025-12-04T16:29:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webemailprotector/email-address-security-by-webemailprotector-336-authenticated-subscriber-stored-cross-site-scripting 2025-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-broken-links-checker-extension/mainwp-broken-link-checker-40-missing-authorization-to-arbitrary-plugin-activation 2023-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bit-assist/bit-assist-152-authenticated-subscriber-sql-injection-via-id-parameter 2025-02-13T22:13:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stock-exporter-for-woocommerce/stock-exporter-for-woocommerce-110-reflected-cross-site-scripting 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-ultra-pro/booking-ultra-pro-118-stored-cross-site-scripting 2022-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/are-you-robot-recaptcha/are-you-robot-google-recaptcha-for-wordpress-22-reflected-cross-site-scripting 2025-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/artplacer-widget/artplacer-widget-22292-authenticated-contributor-sql-injection 2025-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-background/custom-background-32267929-arbitrary-file-upload 2014-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kama-clic-counter/kama-click-counter-403-authenticated-contributor-stored-cross-site-scripting 2025-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sitemap-page/wp-sitemap-page-166-admin-stored-cross-site-scripting 2021-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-checkout-getnet/plugin-oficial-getnet-para-woocommerce-173-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/podcast-subscribe-buttons/podcast-subscribe-buttons-142-stored-cross-site-scripting 2021-09-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulk-me-now/bulk-me-now-20-authenticated-contributor-stored-cross-site-scripting 2025-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluentforms-pdf/pdf-generator-for-fluent-forms-117-cross-site-scripting 2024-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paypal-donation-shortcode/paypal-donation-shortcode-01-authenticated-contributor-stored-cross-site-scripting 2025-11-10T14:54:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-pagseguro-payments/wp-pagseguro-payments-10-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-3131-missing-authorization-to-settings-update 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/facebook-fan-page-widget/fan-page-widget-by-themencode-20-authenticated-admin-stored-cross-site-scripting 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jalbum-bridge/jalbum-bridge-2018-authenticated-contributor-stored-cross-site-scripting 2025-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/smash/smash-17-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-better-messages/better-messages-live-chat-for-wordpress-buddypress-peepso-ultimate-member-buddyboss-274-unauthenticated-limited-server-side-request-forgery-in-nice_links 2025-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/teachpress/teachpress-909-cross-site-request-forgery-to-import-delete 2025-03-24T18:00:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xpro-elementor-addons/140-widgets-best-addons-for-elementor-free-143-authenticated-admin-cross-site-scripting 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kento-wp-stats/kento-wordpress-stats-11-reflected-cross-site-scripting 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/linkedin-auto-publish/wp-to-linkedin-auto-publish-198-reflected-cross-site-scripting-via-postmessage 2025-12-12T15:28:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/borderless/borderless-widgets-elements-templates-and-toolkit-for-elementor-gutenberg-153-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets 2024-05-14T10:06:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quillforms/quill-forms-330-missing-authorization 2023-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedpress/embedpress-4014-authenticated-contributor-stored-cross-site-scripting 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aco-product-labels-for-woocommerce/product-labels-for-woocommerce-sale-badges-1510-authenticated-admin-sql-injection 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gamipress/gamipress-685-cross-site-request-forgery 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/socialsnap/social-snap-135-missing-authorization 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ba-book-everything/ba-book-everything-1620-cross-site-request-forgery-to-email-address-updateaccount-takeover 2024-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wizit-gateway-for-woocommerce/wizit-gateway-for-woocommerce-129-missing-authentication-to-unauthenticated-arbitrary-order-cancellation 2026-01-23T19:23:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-tickets/my-tickets-210-missing-authorization 2025-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/et-core-plugin/xstore-core-538-authenticated-subscriber-limited-arbitrary-file-download 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-and-page-builder/post-and-page-builder-by-boldgrid-visual-drag-and-drop-editor-1278-authenticated-contributor-server-side-request-forgery 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ciyashop/ciyashop-multipurpose-woocommerce-theme-4190-unauthenticated-php-object-injection 2025-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sticky-side-buttons/wp-sticky-side-buttons-21-cross-site-request-forgery 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cost-of-goods-for-woocommerce/cost-of-goods-for-woocommerce-370-authenticated-contributor-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/circle-image-slider-with-lightbox/team-circle-image-slider-with-lightbox-10-cross-site-request-forgery 2024-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ibtana-visual-editor/ibtana-wordpress-website-builder-1257-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2026-03-30T16:30:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flagged-content/flagged-content-102-reflected-cross-site-scripting 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-5952-authenticated-subscriber-full-path-disclosure 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/css-javascript-toolbox/css-javascript-toolbox-1203-authenticated-subscriber-local-file-inclusion 2025-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/transposh-translation-filter-for-wordpress/transposh-wordpress-translation-1091-cross-site-request-forgery 2022-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/crafti/crafti-handmade-store-wordpress-theme-112-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/teachpress/teachpress-9012-cross-site-request-forgery 2026-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailin/newsletter-smtp-email-marketing-and-subscribe-forms-by-sendinblue-3160-reflected-cross-site-scripting-via-lang 2023-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cardealerpress/cardealerpress-68250500-authenticated-contributor-stored-cross-site-scripting-via-saleclass-parameter 2025-05-06T13:29:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/honeypot-for-wp-comment/honeypot-for-wp-comment-223-directory-traversal-to-unauthenticated-arbitrary-file-deletion 2024-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/get-bookings-wp/getbookingswp-appointments-bookings-plugin-basic-version-1127-authenticated-subscriber-privilege-escalation-via-account-takeover 2025-02-17T15:46:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-membership-515-unauthenticated-missing-authorization-to-admin-approval-bypass-via-action-parameter 2026-05-13T19:52:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/nexos/nexos-real-estate-wordpress-theme-17-sql-injection 2020-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-datepicker/wp-datepicker-214-reflected-cross-site-scripting 2024-12-23T20:08:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zlick-paywall/zlick-paywall-222-cross-site-request-forgery 2021-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.4/wordpress-core-541-private-post-disclosure 2020-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exclusive-addons-for-elementor/exclusive-addons-elementor-269-authenticated-contributor-stored-cross-site-scripting 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-1323-reflected-cross-site-scripting-via-date 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easy-booking/wp-booking-244-authenticated-stored-cross-site-scripting 2024-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/directorypress/directorypress-business-directory-and-classified-ad-listing-3626-missing-authorization 2025-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trustmate-io-integration-for-woocommerce/trustmateio-integration-for-woocommerce-1812-authenticated-subscriber-arbitrary-settings-update 2022-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-gateway-eway/woocommerce-eway-gateway-350-insecure-direct-object-reference 2023-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/court-reservation/court-reservation-1108-reflected-cross-site-scripting 2026-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliate-for-woocommerce/affiliate-for-woocommerce-premium-470-authenticated-insecure-direct-object-reference 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/last-viewed-posts/last-viewed-posts-by-wpbeginner-100-unauthenticated-php-object-injection 2024-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/absolute-privacy/absolute-privacy-205-authentication-bypass 2011-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-travel/wp-travel-1013-authenticated-author-sql-injection 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/splash-header/splash-header-1208-stored-cross-site-scripting 2021-07-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arforms/arforms-713-unauthenticated-stored-cross-site-scripting-via-value-parameter 2026-06-23T13:57:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/portfolio-slideshow-pro/portfolio-slideshow-pro-30-sql-injection 2013-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/live-shopping-video-streams/live-shopping-shoppable-videos-for-woocommerce-220-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pdf-vouchers/woocommerce-pdf-vouchers-493-authentication-bypass-to-voucher-vendor 2024-07-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-like-button/wp-like-button-160-missing-authorization 2019-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mambo-joomla-importer/mambo-importer-10-authenticated-administrator-php-object-injection 2025-02-21T15:00:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learning-management-system/masteriyo-lms-217-unauthenticated-authorization-bypass-to-arbitrary-order-completion-via-stripe-webhook-endpoint 2026-04-07T17:55:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woolentor-addons/shoplentor-woocommerce-builder-for-elementor-gutenberg-10-modules-all-in-one-solution-formerly-woolentor-281-authenticated-contributor-stored-cross-site-scripting 2024-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cartflows/cartflows-223-missing-authorization 2026-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sms/wp-sms-634-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-registration-form-builder-with-submission-manager/registrationmagic-5300-cross-site-request-forgery 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/page-builder-pagelayer-drag-and-drop-website-builder-200-reflected-cross-site-scripting-via-login_url-parameter 2025-05-23T15:53:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-banners/custom-banners-21-cross-site-scripting 2014-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pz-linkcard/pz-linkcard-252-cross-site-request-forgery-via-page_cacheman 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-326-authenticated-contributor-stored-cross-site-scripting-via-mla_tag_cloud-and-mla_term_list-shortcodes 2025-07-15T20:30:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-fortnox-integration/woocommerce-fortnox-integration-456-authenticated-subscriber-stored-cross-site-scripting 2025-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gdeslon-affiliate-shop/gdeslon-affiliate-shop-155-open-redirect 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-manager/event-manager-703-reflected-cross-site-scripting-via-calendar_header-parameter 2025-07-09T09:58:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-734-authenticated-contributor-stored-cross-site-scripting 2022-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-1328-authenticated-admin-sql-injection 2022-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-manager/popup-manager-166-unauthenticated-stored-cross-site-scripting 2022-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reglevel/reglevel-121-authenticated-administrator-stored-cross-site-scripting 2024-07-17T14:02:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/platformly/platformly-official-113-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pie-register/pie-register-2014-2015-sql-injection 2015-05-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broadstreet/broadstreet-1521-authenticated-subscriber-stored-cross-site-scripting 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/support-ticket/support-ticket-19-unauthenticated-privilege-escalation 2025-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-manager/contact-manager-864-unauthenticated-arbitrary-double-file-extension-upload 2025-02-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/punnel-landing-page-builder/punnel-131-missing-authorization-to-authenticated-subscriber-settings-update-via-punnel_save_config-ajax-action 2026-03-20T15:09:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-elearning-and-online-course-solution-394-authenticated-subscriber-insecure-direct-object-reference 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-affiliate-platform/wp-affiliate-platform-638-reflected-cross-site-scripting 2014-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-button-for-elementor/download-button-for-elementor-121-authenticated-contributor-stored-cross-site-scripting 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wh-testimonials/wh-testimonials-300-unauthenticated-stored-cross-site-scripting 2023-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-post-type-list-shortcode/custom-post-type-list-shortcode-144-authenticated-contributor-stored-cross-site-scripting 2023-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/review-schema/wordpress-review-structure-data-schema-plugin-review-schema-2114-missing-authorization-to-arbitrary-review-update 2024-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accordion-slider/accordion-slider-1913-authenticated-contributor-stored-cross-site-scripting 2025-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wa11y/wa11y-the-web-accessibility-toolbox-103-authenticated-administrator-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-132-reflected-cross-site-scripting-via-pointsf 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/logo-manager-for-enamad/logo-manager-for-enamad-070-cross-site-request-forgery-to-stored-cross-site-scripting 2024-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-contact-form7-email-spam-blocker/wp-contact-form7-email-spam-blocker-100-reflected-cross-site-scripting 2025-01-24T18:41:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/document/document-block-upload-embed-docs-110-missing-authorization 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mpdf/wp-mpdf-391-authenticated-contributor-stored-cross-site-scripting 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-export-pro/export-any-wordpress-data-to-xmlcsv-141-wp-all-export-pro-186-cross-site-request-forgery-to-remote-code-execution 2023-11-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-security-and-firewall/all-in-one-wp-security-firewall-390-sql-injection 2015-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bwd-elementor-addons/bwd-elementor-addons-4320-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-link-directory/simple-link-directory-845-unauthenticated-arbitrary-shortcode-execution 2024-12-12T19:48:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/featured-image-from-url/featured-image-from-url-fifu-531-authenticated-contributor-server-side-request-forgery-via-fifu_input_url 2026-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-upload-files-during-checkout/easy-upload-files-during-checkout-300-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/logdash-activity-log/logdash-activity-log-113-unauthenticated-sql-injection 2023-10-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-20-cross-site-scripting 2018-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdiscuz/comments-wpdiscuz-7624-authentication-bypass-via-wordpresscom-oauth-provider 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/plugins-on-steroids/eazy-plugin-manager-430-missing-authorization 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-tickets-with-ticket-scanner/event-tickets-with-ticket-scanner-231-reflected-cross-site-scripting 2024-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-advanced-search/wordpress-wp-advanced-search-333-unauthenticated-database-export 2020-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/indoor-plants/indoor-plants-127-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/browser-sniff/browser-sniff-23-cross-site-request-forgery-to-stored-cross-site-scripting 2025-09-19T18:22:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-all-currencies/all-currencies-for-woocommerce-244-authenticated-contributor-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/flashlight/flashlight-284-cross-site-scripting 2012-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comment-extra-field/comment-extra-fields-17-reflected-cross-site-scripting 2013-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alt-monitoring/alt-monitoring-103-cross-site-request-forgery-to-stored-cross-site-scripting 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-svg-images/wp-svg-images-33-authenticated-author-stored-cross-site-scripting-via-svg 2021-06-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sell-media-file/sell-media-file-with-stripe-106-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-topbar/wp-topbar-536-authenticated-administrator-sql-injection 2023-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-iframe/advanced-iframe-20219-reflected-cross-site-scripting 2022-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lbg-audio8-html5-radio_ads/shout-353-reflected-cross-site-scripting 2025-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/replace-default-words/replace-default-words-13-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/lettuce/lettuce-117-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/button-generation/button-generator-easily-button-builder-238-cross-site-request-forgery 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cwd-stealth-links/cwd-stealth-links-13-unauthenticated-sql-injection 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/delicious-recipes/wp-delicious-191-missing-authorization 2025-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-engine/ai-engine-the-chatbot-ai-framework-mcp-for-wordpress-349-authenticated-editor-privilege-escalation 2026-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smdp-affiliate-platform/affiliate-platform-148-reflected-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpschoolpress/school-management-system-wpschoolpress-2217-authenticated-teacher-sql-injection 2025-03-14T14:22:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accept-stripe-payments-using-contact-form-7/accept-stripe-payments-using-contact-form-7-30-unauthenticated-information-exposure 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/docollipics-faustball-de/tabellen-von-faustballcom-204-authenticated-administrator-stored-cross-site-scripting 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ari-cf7-connector/contact-form-7-connector-122-cross-site-request-forgery 2024-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-content-generation/wp-wand-unlimited-content-generation-using-ai-for-openai-claude-openrouter-and-deepseek-1307-missing-authorization 2026-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ptoffice-sign-ups/pt-sign-ups-104-unauthenticated-stored-cross-site-scripting 2024-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/interactive-uk-regional-map/interactive-uk-regional-map-20-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amount-left-free-shipping-woocommerce/free-shipping-bar-amount-left-for-free-shipping-for-woocommerce-246-authenticated-contributor-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/builder-style-manager/ithemes-builder-style-manager-077-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-hotjar/wp-hotjar-003-authenticated-administrator-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-alert/login-alert-021-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcodes-ultimate-pro/shortcodes-ultimate-pro-714-authenticated-contributor-stored-cross-site-scripting 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bizcalendar-web/bizcalendar-web-11025-reflected-cross-site-scripting-via-tab 2024-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/s3bubble-amazon-s3-audio-streaming/s3bubble-cloud-video-with-adverts-and-analytics-48-arbitrary-file-download 2015-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-facebook-likebox/easy-social-feed-social-photos-gallery-post-feed-like-box-654-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-polls/wp-polls-2772-unauthenticated-sql-injection-to-stored-cross-site-scripting 2025-01-21T14:08:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gdpr-cookie-compliance/gdpr-cookie-compliance-4158-authenticated-admin-stored-cross-site-scripting 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/4ecps-webforms/4ecps-web-forms-0218-unauthenticated-arbitrary-file-upload 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-calendar-and-notification/booking-calendar-and-notification-403-authentication-bypass 2025-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/carousel-ck/carousel-ck-110-authenticated-admin-cross-site-scripting 2022-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-block-control/responsive-block-control-130-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ltl-freight-quotes-estes-edition/ltl-freight-quotes-estes-edition-337-unauthenticated-sql-injection 2025-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-programmmanager/wp-pmanager-12-cross-site-request-forgery-to-category-deletion 2025-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/invite-anyone/invite-anyone-1318-php-object-injection 2017-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bbp-core/bbp-core-141-missing-authorization 2025-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sb-woocommerce-infinite-scroll/woocommerce-infinite-scroll-162-authenticated-subscriber-php-object-injection 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/traveler-layout-essential-for-elementor/traveler-layout-essential-for-elementor-14-unauthenticated-server-side-request-forgery 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rss-feed-widget/rss-feed-widget-299-authenticated-contributor-stored-cross-site-scripting-via-rfw-youtube-videos-shortcode 2024-10-17T21:09:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/th-shop-mania/th-shop-mania-149-authenticated-subscriber-arbitrary-plugin-installationactivation 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-maker/form-maker-by-10web-11543-authenticated-adminsitrator-sql-injection-via-groupids-parameter 2026-06-17T16:13:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ecwid-shopping-cart/ecwid-shopping-cart-706-missing-authorization 2026-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagopar-woocommerce-gateway/pagopar-8211-woocommerce-gateway-271-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/push-notification-mobile-and-web-app/push-notification-for-mobile-and-web-app-203-missing-authorization 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluent-support/fluent-support-180-authenticated-subscriber-sql-injection 2024-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/poll-wp/ts-poll-best-poll-plugin-for-wordpress-134-missing-authorization 2020-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js-support-ticket/js-help-desk-best-help-desk-support-plugin-205-cross-site-request-forgery 2018-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/nirvana/nirvana-26-unauthenticated-local-file-inclusion 2026-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/so-widgets-bundle/siteorigin-widgets-bundle-1600-authenticated-contributor-stored-cross-site-scripting-via-siteorigin_widget-shortcode 2024-05-21T19:57:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-112-cross-site-request-forgery-via-deletecachetoolbar 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-custom-post-template/wp-custom-post-template-10-cross-site-request-forgery 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-wordpress-page-builder-294-missing-authorization-to-authenticated-contributor-global-preset-modification 2025-12-01T18:42:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tickera-event-ticketing-system/tickera-3562-missing-authorization 2026-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-flash-embed/easy-flash-embed-10-authenticated-contributor-stored-cross-site-scripting 2025-09-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dsgnwrks-twitter-importer/dsgnwrks-twitter-importer-114-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/boxberry/-boxberry-232-missing-authorization 2025-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bravada/bravada-112-authenticated-contributor-stored-cross-site-scripting 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-role-editor/user-role-editor-424-authenticated-privilege-escalation 2016-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-logo-showcase/logo-slider-and-showcase-1336-settings-update 2021-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/cww-portfolio/cww-portfolio-131-unauthenticated-local-file-inclusion 2025-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/neon/neon-bootstrap-admin-theme-20-cross-site-scripting 2019-12-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/classic-addons-wpbakery-page-builder-addons/classic-addons-wpbakery-page-builder-35-authenticated-contributor-stored-cross-site-scripting 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yop-poll/yop-poll-634-author-stored-cross-site-scripting 2022-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/plezi/plezi-103-unauthenticated-stored-cross-site-scripting 2022-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bluet-keywords-tooltip-generator/tooltipy-51-cross-site-request-forgery 2018-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/css3-rotating-words/dynamic-word-spinner-css3-animated-rotation-56-cross-site-request-forgery 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/web-to-sugarcrm-lead/web-to-sugarcrm-lead-100-cross-site-request-forgery-to-custom-field-deletion 2025-12-20T14:22:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-addons-for-beaver-builder-lite/ultimate-addons-for-beaver-builder-lite-154-missing-authorization 2023-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-401-cross-site-request-forgery-to-authentication-takeover 2014-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nifty-backups/nifty-backups-108-reflected-cross-site-scripting 2025-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enhanced-e-commerce-for-woocommerce-store/conversiosio-691-reflected-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gsheetconnector-forminator/gsheetconnector-for-forminator-forms-1012-reflected-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/majestic-support/majestic-support-107-authenticated-contributor-local-file-inclusion 2025-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulletproof-security/bulletproof-security-511-sql-injection 2014-10-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-1578-stored-cross-site-scripting-via-uploaded-svg 2021-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/erp/wp-erp-1128-authenticated-accounting-manager-sql-injection 2024-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meks-flexible-shortcodes/meks-flexible-shortcodes-134-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tockify-events-calendar/tockify-events-calendar-2213-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-gallery-with-slideshow/image-gallery-with-slideshow-plugin-152-stored-cross-site-scripting 2017-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/surbma-font-awesome/surbma-font-awesome-30-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pro-mime-types/pro-mime-types-107-cross-site-request-forgery 2023-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/indeed-membership-pro/indeed-membership-pro-127-reflected-cross-site-scripting 2024-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-skins/contact-form-7-skins-250-reflected-cross-site-scripting 2022-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpvivid-backuprestore/migration-backup-staging-wpvivid-0974-authenticated-admin-phar-deserialization 2022-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/laposta-signup-basic/laposta-signup-basic-141-missing-authorization 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/print-google-cloud-print-gcp-woocommerce/bizprint-454-cross-site-request-forgery-to-cross-site-scripting-via-processphp 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booknetic/booknetic-485-missing-authorization 2026-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/web-directory-free/web-directory-free-173-reflected-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yandex-pinger/yandex-site-search-pinger-15-authenticated-administrator-stored-cross-site-scripting 2025-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xpro-elementor-addons/xpro-elementor-addons-1410-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-maps/google-maps-9047-unauthenticated-stored-cross-site-scripting 2025-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-mobile-friendly-image-gallery-1838-authenticated-editor-stored-cross-site-scripting 2025-12-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-addon-for-elementor/events-addon-for-elementor-212-missing-authorization 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simply-schedule-appointments/simply-schedule-appointments-16927-authenticated-contributor-sql-injection 2026-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integrate-dynamics-365-crm/integrate-dynamics-365-crm-109-missing-authorization 2025-10-03T14:18:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/freshchat/freshchat-234-cross-site-request-forgery 2025-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-submitted-posts/user-submitted-posts-20230901-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-09-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/emarksheet/online-marksheet-creator-emarksheet-543-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-vertical-image-slider/wordpress-vertical-image-slider-plugin-12-cross-site-request-forgery 2015-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widget-control-powered-by-everyblock/widget-control-powered-by-everyblock-101-reflected-cross-site-scripting 2014-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broken-link-manager/broken-link-manager-050-sql-injection 2015-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/readme-creator/readme-creator-10-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accessibility-widget/accessibility-widget-22-authenticated-contributor-stored-cross-site-scripting 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/out-of-stock-badge/out-of-stock-badge-131-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulletin-announcements/announcement-notification-banner-bulletin-370-cross-site-request-forgery 2023-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mm-breaking-news/mm-breaking-news-079-reflected-cross-site-scripting 2024-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sms/sms-6912-authenticated-administrator-sql-injection 2025-06-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cars-seller-auto-classifieds-script/car-seller-auto-classifieds-script-210-unauthenticated-sql-injection 2021-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/antihacker/disable-json-api-login-lockdown-xmlrpc-pingback-stop-user-enumeration-anti-hacker-scan-452-missing-authorization-to-authenticated-subscriber-table-truncation 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobsearch/jobsearch-wp-job-board-152-reflected-cross-site-scripting 2020-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/motor/motor-cars-parts-service-equipments-and-accessories-woocommerce-store-310-local-file-inclusion 2021-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/streamtube-core/streamtube-core-478-unauthenticated-arbitrary-user-password-change 2025-11-29T12:14:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-paypal-payments/quick-paypal-payments-5725-missing-authorization 2023-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mind3dom-ryebread-widgets/mind3dom-ryebread-widgets-10-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-review/wp-ultimate-review-225-unauthenticated-insecure-direct-object-reference 2024-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wallet-system-for-woocommerce/wallet-system-for-woocommerce-259-cross-site-request-forgery 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mapster-wp-maps/mapster-wp-maps-150-incorrect-authorization-to-authenticated-contributor-arbitrary-options-update 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vertical-scroll-slideshow-gallery-v2/vertical-scroll-slideshow-gallery-v2-91-authenticated-contributor-sql-injection 2025-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sms-alert/sms-alert-order-notifications-woocommerce-378-reflected-cross-site-scripting 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/eldon/eldon-artist-portfolio-wordpress-theme-141-unauthenticated-php-object-injection 2026-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/iloveit/i-love-it-24-multiple-vulnerabilities 2013-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress/buddypress-1131-authenticated-contributor-stored-cross-site-scripting 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpextended/the-ultimate-wordpress-toolkit-wp-extended-247-unauthenticated-stored-cross-site-scripting 2024-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fastdup/fastdup-217-sensitive-information-exposure-via-log-file 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/word-replacer/word-replacer-04-authenticated-administrator-stored-cross-site-scripting-via-replacement-parameter 2026-06-01T19:45:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcode-factory/shortcode-factory-27-local-file-inclusion 2019-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-download-counter/simple-download-counter-222-authenticated-administrator-arbitrary-file-read-via-path-traversal 2025-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instant-css/instant-css-114-missing-authorization-via-ajax-actions 2023-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-and-swipe-slider/responsive-and-swipe-slider-102-authenticated-editor-stored-cross-site-scripting-via-shortcode 2025-12-19T15:07:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Newspaper/tagdiv-composer-35-unauthorized-account-access-and-privilege-escalation 2022-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broadstreet/broadstreet-1512-authenticated-contributor-stored-cross-site-scripting 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hl-twitter/hl-twitter-2014118-cross-site-request-forgery-to-twitter-account-unlink 2024-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/getcontentfromurl/getcontentfromurl-10-authenticated-contributor-server-side-request-forgery-via-url-shortcode-attribute 2026-01-13T17:19:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/invoicing/payment-forms-buy-now-buttons-and-invoicing-system-getpaid-2849-unauthenticated-information-exposure 2026-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js-support-ticket/js-help-desk-ai-powered-support-ticketing-system-282-unauthenticated-sql-injection-via-js-support-ticket-token-tkstatus-cookie 2026-03-03T20:36:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cost-calculator-builder/cost-calculator-builder-369-missing-authorization-to-unauthenticated-payment-status-bypass 2026-01-15T20:25:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-themer/beaver-themer-149-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ays-popup-box/popup-box-607-cross-site-request-forgery 2025-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/takeout/takeout-130-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dtabs/dtabs-14-reflected-cross-site-scripting 2022-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultraaddons-elementor-lite/ultraaddons-elementor-lite-200-authenticated-author-stored-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/x-addons-elementor/x-addons-for-elementor-1023-authenticated-contributor-stored-cross-site-scripting 2026-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-addon/ppom-for-woocommerce-183-authenticated-stored-cross-site-scripting 2019-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/piotnet-addons-for-elementor/piotnet-addons-for-elementor-2431-authenticated-contributor-stored-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ahmeti-wp-guzel-sozler/ahmeti-wp-gzel-szler-40-cross-site-request-forgery 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/website-article-monetization-by-magenet/website-article-monetization-by-magenet-1011-unauthenticated-stored-cross-site-scripting 2024-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-share-vod/video-share-vod-turnkey-video-site-builder-script-2630-authenticated-contributor-stored-cross-site-scripting 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bws-latest-posts/latest-posts-by-bestwebsoft-03-reflected-cross-site-scripting 2017-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-lottie-player/lottie-player-118-authenticated-author-stored-cross-site-scripting-via-file-upload 2025-04-23T19:57:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duplicator/duplicator-0510-arbitrary-backup-creation-and-download 2015-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-currency-switcher/woocommerce-currency-switcher-137-reflected-cross-site-scripting 2021-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/corner-ad/corner-ad-1053-reflected-cross-site-scripting 2022-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eyewear-prescription-form/eyewear-prescription-form-601-missing-authorization-to-unauthenticated-arbitrary-woocommerce-category-deletion 2025-12-12T16:04:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-export/export-any-wordpress-data-to-xmlcsv-134-authenticated-sql-injection 2022-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-custom-admin/simple-custom-admin-12-reflected-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fastbots-ai-chatbots/fastbots-1012-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2026-05-11T20:37:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/area53/area53-105-arbitrary-file-upload 2013-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masy-gallery/masy-gallery-17-authenticated-contributor-stored-cross-site-scripting 2025-01-24T18:54:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-time-capsule/backup-and-staging-by-wp-time-capsule-12115-authentication-bypass 2020-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weekly-class/events-schedule-wordpress-events-calendar-272-authenticated-subscriber-sql-injection 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/crony/crony-cronjob-manager-047-cross-site-request-forgery-to-stored-cross-site-scripting 2015-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-gallery-exporter/wordpress-gallery-exporter-13-authenticated-administrator-arbitrary-file-download 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jobwp/jobwp-239-cross-site-request-forgery 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/launchpad-by-obox/launchpad-coming-soon-maintenance-mode-plugin-1013-authenticated-administrator-cross-site-scripting 2023-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multiplayer-plugin/multiplayer-games-37-reflected-cross-site-scripting 2021-08-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/protected-posts-logout-button/protected-posts-logout-button-145-missing-authorization-on-pplb_options_save 2023-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/save-life/save-life-1213-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/online-accessibility/accessibility-suite-by-ability-inc-420-authenticated-subscriber-sql-injection-via-scan_id-parameter 2026-04-15T16:46:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ssv-events/ssv-events-327-unauthenticated-local-file-inclusion 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-load-more/ajax-load-more-7602-unauthenticated-sensitive-information-exposure 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flash-album-gallery/album-and-image-gallery-with-lightbox-flagallery-photo-portfolio-059-sql-injection 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yikes-inc-easy-mailchimp-extender/easy-forms-for-mailchimp-30-506-cross-site-scripting 2014-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-wp-optimizer/easy-wp-optimizer-110-missing-authorization 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-paytm-pay/paytm-donation-plugin-132-authenticated-admin-sql-injection 2021-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-banner/simple-banner-2103-authenticated-admin-stored-cross-site-scripting 2021-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/client-portal/client-portal-private-user-pages-and-login-118-cross-site-request-forgery-via-cp_create_private_pages_for_all_users-function 2023-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jupiterx-core/jupiterx-core-338-unauthenticated-privilege-escalation 2023-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpblast/wp-blast-seo-performance-booster-186-cross-site-request-forgery-to-cache-clearing 2025-09-09T17:58:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/septera/septera-151-authenticated-contributor-stored-cross-site-scripting 2024-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profit-products-tables-for-woocommerce/active-products-tables-for-woocommerce-use-constructor-to-create-tables-1063-reflected-cross-site-scripting 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-analytify/analytify-google-analytics-dashboard-for-wordpress-422-authorization-bypass 2022-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-post-widget/content-blocks-custom-post-widget-330-authenticated-contributor-stored-cross-site-scripting 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-configurator/login-configurator-21-reflected-cross-site-scripting 2023-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lws-cleaner/lws-cleaner-230-cross-site-request-forgery 2023-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpmandrill/wpmandrill-133-missing-authorization-via-getajaxstats 2023-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/constant-contact-forms/constant-contact-forms-202-missing-authorization-via-constant_contact_privacy_ajax_handler 2023-06-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/basic-google-maps-placemarks/basic-google-maps-placemarks-1107-missing-authorization-to-unauthenticated-default-map-coordinate-update 2026-04-15T16:47:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-users-from-csv-with-meta/import-and-export-users-and-customers-11402-cross-site-request-forgery 2019-03-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/occupancyplan/occupancyplan-1030-cross-site-request-forgery-to-sql-injection 2025-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flickr-rss/flickrrss-531-cross-site-scripting-via-flickrrss_tags 2018-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/professional-contact-form/professional-contact-form-100-cross-site-request-forgery-to-test-email-sending 2025-09-26T18:37:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-compress-image-optimizer/compress-66028-missing-authorization 2026-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bookly-responsive-appointment-booking-tool/online-scheduling-and-appointment-booking-system-bookly-272-unauthenticated-stored-cross-site-scripting-via-bookly-customer-full-name-cookie 2026-06-12T22:03:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cozy-addons/cozy-blocks-216-authenticated-contributor-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-thank-you-page-nextmove-lite/nextmove-lite-2181-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforms-lite/wpforms-easy-form-builder-for-wordpress-contact-forms-payment-forms-surveys-more-1987-unauthenticated-sensitive-information-exposure 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gift-certificate-creator/gift-certificate-creator-10-stored-cross-site-scripting 2017-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-contact-form-3633-authenticated-admin-stored-cross-site-scripting 2023-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contest-gallery-pro/contest-gallery-pro-2901-unauthenticated-privilege-escalation 2026-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kingler/kingler-17-unauthenticated-php-object-injection 2026-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/Lead-Octopus-Power/lead-octopus-power-111-sql-injection 2014-07-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/pagelayer-179-authenticatedadministrator-stored-cross-site-scripting-via-headerfooter-code 2024-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formidable/formidable-forms-628-unauthenticated-payment-amount-manipulation-via-item_meta-parameter 2026-03-12T19:24:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/registrations-for-the-events-calendar/registrations-for-the-events-calendar-275-unauthenticated-sql-injection 2021-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/recommend-a-friend/recommend-to-a-friend-222-cross-site-scripting 2013-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/siteseo/siteseo-seo-simplified-127-authenticated-contributor-stored-cross-site-scripting-via-broken-regex-expression 2025-08-26T10:21:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beacon-for-helpscout/beacon-for-help-scout-130-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/schema-shortcode/schema-shortcode-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2026-03-20T15:18:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/php-shell/php-shell-all-versions-backdoor 2008-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xcloner-backup-and-restore/backup-restore-and-migrate-wordpress-sites-with-the-xcloner-plugin-311-remote-code-execution 2014-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sticky-banner/sticky-banner-120-authenticated-administrator-stored-cross-site-scripting 2024-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dropdown-and-scrollable-text/dropdown-and-scrollable-text-20-cross-site-scripting 2022-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/snipe-nginx-cache/cache-sniper-for-nginx-1042-missing-authorization 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-addons/master-addons-2072-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets 2025-03-03T20:06:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-551-authenticated-agent-privilege-escalation-to-administrator-via-idor-in-osorderscontrollercreate_or_update-unauthenticated-customer-cabinet-password-reset 2026-06-15T20:57:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cloudflare/cloudflare-1321-cross-site-scripting 2016-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-table/table-of-content-1531-cross-site-request-forgery 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/generate-security-txt/generate-securitytxt-1012-missing-authorization-to-authenticated-subscriber-securitytxt-deletion-via-delete_securitytxt-ajax-action 2026-06-23T16:40:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stafflist/stafflist-323-cross-site-request-forgery-to-reflected-cross-site-scripting 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wd-instagram-feed/wd-instagram-feed-130-cross-site-scripting 2018-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/text-to-speech-tts/text-to-speech-tts-by-mementor-198-use-of-hardcoded-password-to-unauthenticated-remote-database-access 2026-04-03T22:10:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ownid-passwordless-login/ownid-passwordless-login-134-authentication-bypass 2025-10-14T19:34:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/no-external-links/wp-no-external-links-102-authenticated-administrator-stored-cross-site-scritping 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/new-user-approve/new-user-approve-24-reflected-cross-site-scripting 2022-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-1081-unauthenticated-open-redirect 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stock-ticker/stock-ticker-3234-authenticated-contributor-stored-cross-site-scritping 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-donation-plugin-and-fundraising-platform-3163-unauthenticated-php-object-injection-to-remote-code-execution 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/betheme/betheme-2662-missing-authorization-check-on-core-functionality 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/optimizepress/optimizepress-16-arbitrary-file-upload 2013-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3234-sensitive-information-disclosure 2022-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mz-mindbody-api/mz-mindbody-api-282-cross-site-request-forgery 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blog-designer-for-elementor/blog-designer-for-elementor-post-slider-post-carousel-post-grid-117-cross-site-request-forgery 2025-09-10T18:55:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sms/wp-sms-65-authenticated-admin-sql-injection-to-reflected-cross-site-scripting 2024-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/countdown_with_background/countdown-with-image-or-video-background-15-authenticated-contributor-sql-injection 2025-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-tickets/my-tickets-accessible-event-ticketing-211-missing-authorization 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-gdpr-compliance/gdpr-ccpa-compliance-cookie-consent-banner-270-missing-authorization-to-settings-update-and-stored-cross-site-scripting 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stock-sync-for-woocommerce/stock-sync-for-woocommerce-232-missing-authorization 2023-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventin-pro/wordpress-event-manager-event-calendar-and-booking-plugin-4024-authenticated-subscriber-stored-cross-site-scripting 2025-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sales-report-for-woocommerce/berocket-plugins-various-versions-missing-authorization 2022-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-testimonials-showcase/simple-testimonials-showcase-116-authenticated-editor-stored-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/propertyhive/propertyhive-209-missing-authorization 2024-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cartflows/cartflows-11111-insecure-direct-object-reference-to-arbitrary-post-deletion 2023-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-804-unauthenticated-iframe-injection-via-paragraph-and-short-answer 2022-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vnpay-for-woocommerce/vnpay-for-woocommerce-100-reflected-cross-site-scripting 2025-10-23T19:56:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vdz-google-analytics/vdz-google-analytics-or-google-tag-manager-gtm-155-stored-cross-site-scripting 2021-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acme-fix-images/acme-fix-images-100-missing-authorization-via-acme_fix_images_ajax_callback 2023-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-products-filter/husky-products-filter-for-woocommerce-formerly-woof-1342-unauthenticated-sql-injection-via-search-terms 2023-11-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/host-webfonts-local/omgf-453-unauthenticated-path-traversal-in-rest-api 2021-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-lead-capture/lead-capturing-pages-25-authenticated-subscriber-sql-injection 2026-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stop-spammer-registrations-plugin/stop-spammers-classic-20263-unauthenticated-stored-cross-site-scripting 2026-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-visual-sitemap/wp-visual-sitemap-102-authenticated-contributor-stored-cross-site-scripting 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fs-poster/fs-poster-658-reflected-cross-site-scripting 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/theissue/the-issue-1611-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/freetobook-responsive-widget/freetobook-responsive-widget-11-cross-site-request-forgery 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bpcustomerio/buddypress-customerio-analytics-integration-116-cross-site-request-forgery 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpeventplus/wordpress-events-calendar-registration-tickets-260-unauthenticated-php-object-injection 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blockart-blocks/blockart-blocks-gutenberg-blocks-page-builder-blocks-wordpress-block-plugin-sections-template-library-2213-authenticated-contributor-stored-cross-site-scripting-via-timestamp-attribute 2025-12-01T11:37:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kama-clic-counter/kama-click-counter-404-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/conveythis-translate/conveythis-2704-missing-authorization 2026-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/currency-switcher/wpcs-1203-unauthenticated-arbitrary-shortcode-execution 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-form/adfo-custom-data-in-admin-dashboard-191-authenticated-admin-php-object-injection 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sitetweet-tweets-user-behaviors-on-your-site-on-twitter/sitetweet-02-cross-site-request-forgery-to-stored-cross-site-scripting 2024-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mailing-group/mailing-group-listserv-209-reflected-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/opt-in-hound/easy-wordpress-subscribe-optin-hound-143-reflected-cross-site-scripting-via-add_query_arg-parameter 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-by-supsystic/photo-gallery-by-supsystic-188-cross-site-request-forgery 2016-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp-customize-login-page/mp-customize-login-page-10-cross-site-request-forgery-to-settings-update 2026-06-23T16:37:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-product-vendors/yith-woocommerce-multi-vendor-380-reflected-cross-site-scripting 2021-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shorten-url/short-url-168-cross-site-request-forgery-via-configuration_page 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-iframe/advanced-iframe-20245-unauthenticated-settings-update 2025-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dreamgrow-scroll-triggered-box/scroll-triggered-box-23-authenticated-editor-stored-cross-site-scripting 2024-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/newsmash/newsmash-1034-cross-site-request-forgery-to-notice-dismissal 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-contact-form/quick-contact-form-8031-cross-site-request-forgery-to-sensitive-information-disclosure 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-content-pipelines/ai-content-pipelines-16-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2025-04-04T13:14:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-upload-files/woocommerce-upload-files-843-unauthenticated-arbitrary-file-upload 2024-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-114-authenticatedadministrator-blind-server-side-request-forgery-via-check_url 2023-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blocksy-companion/blocksy-companion-2031-authenticated-contributor-stored-cross-site-scripting 2024-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/classiera/classiera-4034-unauthenticated-sql-injection 2025-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-home-page-menu/wp-home-page-menu-31-authenticated-admin-stored-cross-site-scripting 2022-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-upload-files-anywhere/upload-files-anywhere-28-unauthenticated-arbitrary-file-deletion 2026-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-library/link-library-766-reflected-cross-site-scripting 2024-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-custom-fields/advanced-custom-fields-6210-authenticated-contributor-arbitrary-custom-field-access 2024-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-multi-step-checkout/multi-step-checkout-for-woocommerce-233-authenticated-administrator-stored-cross-site-scripting 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pre-orders/woocommerce-pre-orders-190-unauthenticated-cross-site-scripting 2023-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fantastic-content-protector-free/fantastic-content-protector-free-26-missing-authorization-via-update_setting_fantastic_content_protector 2023-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/squaretype/squaretype-modern-blog-wordpress-theme-304-authorization-bypass 2021-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wt-woocommerce-wishlist/wishlist-for-woocommerce-212-authenticated-administrator-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/minhnhut-link-gateway/minhnhut-link-gateway-361-authenticated-admin-stored-cross-site-scripting-via-plugin-settings 2026-05-26T20:48:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pie-register/pie-register-basic-3834-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-installation 2024-07-08T19:39:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ays-popup-box/popup-box-best-wordpress-popup-plugin-378-authenticated-admin-stored-cross-site-scripting 2023-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-bulk-product-editing/yith-plugins-by-yithemes-various-versions-missing-authorization 2022-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-admin-bar-improved/wordpress-admin-bar-improved-335-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/logo-slider-wp/logo-slider-490-authenticated-author-stored-cross-site-scripting-via-logo-slider-shortcode 2026-03-20T15:20:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js_composer/wpbakery-page-builder-for-wordpress-formerly-visual-composer-473-multiple-cross-site-scripting-issues 2015-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multiple-shipping-address-woocommerce/multiple-shipping-address-woocommerce-20-unauthenticated-sql-injection 2022-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dc-woocommerce-multi-vendor/multivendorx-the-ultimate-woocommerce-multivendor-marketplace-solution-424-cross-site-request-forgery-to-vendor-updates 2024-10-23T19:21:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/democracy-poll/democracy-poll-536-cross-site-request-forgery 2017-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-171020-authenticated-contributor-stored-cross-site-scripting 2025-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/external-rss-reader/silencesoft-rss-reader-06-unauthenticated-server-side-request-forgery 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/full-frame/full-frame-272-authenticated-author-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blog-filter/blog-filter-153-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/joomsport-sports-league-results-management/joomsport-530-missing-authorization 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pdf-invoices-packing-slips/woocommerce-pdf-invoices-packing-slips-2145-cross-site-scripting 2022-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themeisle-companion/orbit-fox-by-themeisle-2102-authenticated-contributor-stored-cross-site-scripting 2021-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mayosis-core/mayosis-core-541-unauthenticated-arbitrary-file-read 2025-04-24T20:29:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-bank/gallery-bank-wordpress-photo-gallery-plugin-3070-reflected-cross-site-scripting 2014-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-better-emails/wp-better-emails-04-authenticated-administrator-stored-cross-site-scripting 2023-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-manager/wp-job-manager-1312-php-object-injection-via-phar-deserialization 2019-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/database-backup/database-backup-and-check-tables-automated-with-scheduler-2024-232-authenticated-admin-arbitrary-file-read 2024-12-23T21:07:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-prayer/wp-prayer-196-authenticatedadmin-stored-cross-site-scripting 2023-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusion/fusion-163-authenticated-contributor-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/astra-addon/astra-pro-431-authenticatedcontributor-remote-code-execution-via-metabox 2023-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fast-search-powered-by-solr/sunny-search-102-authenticated-administrator-stored-cross-site-scripting-via-settings 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/webstack/webstack-12024-unauthenticated-arbitrary-file-upload 2026-04-14T14:52:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uicore-elements/uicore-elements-1313-authenticated-contributor-stored-cross-site-scripting 2026-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-frontend/wp-user-frontend-3525-sql-injection-reflected-cross-site-scripting 2021-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/f4-improvements/f4-improvements-190-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-11-20T13:40:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bricks/bricks-196-unauthenticated-remote-code-execution 2024-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-accessibility-helper/wp-accessibility-helper-wah-0624-missing-authorization-via-ajax-action 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/orderable/orderable-1200-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-installation 2026-02-18T15:44:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-prime-slider-lite/prime-slider-addons-for-elementor-3132-missing-authorization 2024-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gtranslate/translate-wordpress-with-gtranslate-2810-open-redirect 2017-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter-popup/newsletter-popup-12-unauthenticated-stored-cross-site-scripting 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dofollow-case-by-case/dofollow-case-by-case-351-cross-site-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pie-register-social-site/pie-register-social-sites-login-add-on-177-authentication-bypass 2024-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formidable/formidable-forms-672-cross-site-request-forgery-to-stored-cross-site-scripting 2024-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-pdf-invoice-builder/woocommerce-pdf-invoice-builder-12150-missing-authorization 2025-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-after-email/download-after-email-219-missing-authorization 2026-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-4131-unauthenticated-arbitrary-shortcode-execution 2026-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-social-login/wordpress-social-login-304-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fat-services-booking/fat-services-booking-56-unauthenticated-sql-injection 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quotes-collection/quotes-collection-252-authenticated-admin-sql-injection 2021-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-admin-notification-center/hide-admin-notices-admin-notification-center-232-cross-site-request-forgery 2023-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smtp-sendgrid/smtp-for-sendgrid-yaysmtp-14-unauthenticated-stored-cross-site-scripting-via-email-logs 2025-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/smartmag-responsive-retina-wordpress-magazine/smartmag-1010-unauthenticated-sensitive-information-exposure-via-log-files 2024-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/preload-current-images/preload-current-images-13-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-11-10T14:59:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluent-smtp/fluentsmtp-200-authenticated-admin-stored-cross-site-scripting 2021-07-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iws-geo-form-fields/iws-geo-form-fields-10-unauthenticated-sql-injection 2022-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wayne-audio-player/wayne-audio-player-10-cross-site-request-forgery-to-privilege-escalation 2024-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpzoom-elementor-addons/wpzoom-addons-for-elementor-starter-templates-widgets-132-unauthenticated-protected-post-exposure-via-ajax_post_grid_load_more 2026-02-10T21:12:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/safe-ai-malware-protection-for-wp/safe-ai-malware-protection-for-wp-1020-missing-authorization 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dexs-pm-system/dexs-pm-system-101-authenticated-subscriber-stored-cross-site-scripting 2013-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/private-content/private-content-8115-authenticated-subscriber-sql-injection 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fancy-roller-scroller/fancy-roller-scroller-140-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatwee/chat-by-chatwee-213-cross-site-request-forgery-to-settings-update 2025-09-29T15:21:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/swipe-hq-checkout-for-eshop/eshop-swipe-plugin-370-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-login-customizer/wp-login-customizer-10-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hiweb-migration-simple/hiweb-migration-simple-2001-reflected-cross-site-scripting 2023-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-forms-anti-spam/maspik-256-cross-site-request-forgery 2025-09-09T17:27:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-wordpress-directory-listing-theme-261-sensitive-information-disclosure 2020-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/range-slider-addon-for-gravity-forms/range-slider-addon-for-gravity-forms-116-unauthenticated-stored-cross-site-scripting 2025-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acknowledgify/acknowledgify-113-missing-authorization 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliate-toolkit-starter/affiliate-toolkit-342-unauthenticated-server-side-request-forgery 2023-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cooked/cooked-recipe-management-17154-authenticated-contributor-html-injection 2024-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-upload/wordpress-file-upload-wordpress-file-upload-pro-4162-authenticated-contributor-path-traversal 2022-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-load-more/ajax-load-more-7312-authenticated-contributor-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brave-popup-builder/brave-083-missing-authorization 2025-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/first-order-discount-woocommerce/first-order-discount-woocommerce-121-cross-site-request-forgery 2023-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ameliabooking/amelia-1238-missing-authorization 2026-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-list/page-list-56-authenticated-contributor-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comment-link-remove/comment-link-remove-and-other-comment-tools-214-arbitrary-comment-deletion-via-cross-site-request-forgery 2021-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youmax-channel-embeds-for-youtube-businesses/youtube-video-grid-youmax-19-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/etsy-importer/etsy-importer-142-authenticated-contributor-stored-cross-site-scripting 2025-01-24T18:41:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ali2woo-lite/ali2woo-lite-336-authenticated-subscriber-stored-cross-site-scripting 2024-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-rechnungsverwaltung/pdf-rechnungsverwaltung-001-unauthenticated-local-file-inclusion 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-multi-store-locator/wp-multi-store-locator-249-authenticated-contributor-stored-cross-site-scripting 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/restaurante/restaurante-307-reflected-cross-site-scripting 2025-08-10T02:02:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kangu/kangu-para-woocommerce-2210-reflected-cross-site-scripting 2023-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/music-pack-for-elementor/musicians-pack-for-elementor-1841-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ave-core/ave-core-291-missing-authorization 2026-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/top-25-social-icons/download-top-25-social-icons-31-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-share-vod/video-share-vod-turnkey-video-site-builder-script-276-cross-site-request-forgery-to-command-injection 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache-premium/wp-fastest-cache-premium-174-missing-authorization-to-authenticated-subscriber-blind-server-side-request-forgery 2025-12-11T19:17:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modern-events-calendar-lite/modern-events-calendar-lite-5164-authenticated-arbitrary-file-upload-leading-to-remote-code-execution 2021-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/portable-phpmyadmin/portable-phpmyadmin-141-information-disclosure 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/checkout-for-paypal/checkout-for-paypal-1013-authenticated-contributor-stored-cross-site-scripting 2022-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-2-factor-authentication/minioranges-google-authenticator-561-missing-authorization-to-plugin-settings-change 2022-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/metronet-tag-manager/metronet-tag-manager-129-cross-site-request-forgery 2018-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simplepress/simplepress-forum-61011-reflected-cross-site-scripting 2025-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ps-phpcaptcha/ps-phpcaptcha-110-authenticated-denial-of-service 2019-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vgw-metis/vg-wort-metis-200-missing-authorization-to-authenticated-subscriber-limited-settings-update 2025-06-25T14:05:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zephyr-project-manager/zephyr-project-manager-33101-authenticated-subscriber-limited-privilege-escalation 2024-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-contact-slider/wp-contact-slider-247-authenticated-administrator-stored-cross-site-scripting 2022-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/payment-gateway-pix-for-givewp/payment-gateway-pix-for-givewp-223-missing-authorization 2026-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shopkeeper-extender/shopkeeper-extender-36-authenticated-contributor-stored-cross-site-scripting 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multiple-domain/multiple-domain-102-cross-site-scripting 2020-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leaky-paywall/leaky-paywall-4208-missing-authorization-to-price-manipulation 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-any-document/embed-any-document-embed-pdf-word-powerpoint-and-excel-files-275-authenticated-contributor-blind-server-side-request-forgery-via-embeddoc-shortcode 2025-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clean-login/clean-login-1145-authenticated-contributor-local-file-inclusion 2024-08-29T21:08:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-store-locator/store-locator-22260-authenticated-contributor-php-object-injection 2025-07-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hrm/wp-human-resource-management-plugin-226-authorization-bypass 2019-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/osmapper/osmapper-215-unauthenticated-arbitrary-post-deletion 2022-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/intelly-related-posts/inline-related-posts-360-reflected-cross-site-scripting 2024-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-abstracts-manuscripts-manager/wp-abstracts-262-authenticated-administrator-stored-cross-site-scripting 2023-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sign-up-sheets/sign-up-sheets-2212-reflected-cross-site-scripting 2024-08-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-customer-for-woocommerce/add-customer-for-woocommerce-17-authenticated-administrator-stored-cross-site-scripting 2024-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-bannerize-pro/wp-bannerize-pro-190-authenticated-editor-stored-cross-site-scripting 2024-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wovax-idx/wovax-idx-122-missing-authorization-to-privilege-escalation 2024-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/font/font-75-path-traversal 2015-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/floating-player/floating-video-player-10-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/giga-messenger-bots/giga-messenger-express-231-reflected-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/active-directory-integration/active-directory-integration-118-authenticated-admin-sql-injection 2017-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/moneytheme/moneytheme-all-versions-arbitrary-file-upload 2013-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-monitor/download-monitor-519-authenticated-author-arbitrary-file-download 2026-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-3012-authenticated-sql-injection 2018-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/barcode-scanner-with-inventory-order-manager-151-unauthenticated-sql-injection-via-usertoken 2024-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-by-rank-math/rank-math-seo-10402-privilege-escalation-via-unprotected-rest-api-endpoint 2020-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-meta/user-meta-user-profile-builder-and-user-management-plugin-243-path-traversal 2022-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-seo-pack/all-in-one-seo-pack-4871-authenticated-contributor-sensitive-information-exposure 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-conferencing-with-zoom-api/video-conferencing-with-zoom-421-sensitive-information-exposure 2023-07-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addonify-quick-view/addonify-204-missing-authorization 2025-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-postratings/wp-postratings-189-race-condition 2022-08-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gs-facebook-comments/wp-social-comments-173-missing-authorization-via-wpfc_allow_comments 2024-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/small-package-quotes-fedex-edition/small-package-quotes-for-customers-of-fedex-431-unauthenticated-sql-injection 2025-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-db/contact-form-to-db-by-bestwebsoft-170-authenticated-contributor-sql-injection-via-cntctfrmtdb_department 2023-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-membership-430-authenticated-admin-sql-injection 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fast-user-switching/fast-user-switching-1410-cross-site-request-forgery 2025-12-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/show-all-comments-in-one-page/show-all-comments-700-reflected-cross-site-scripting 2022-12-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-data-table/responsive-data-table-13-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bws-testimonials/testimonials-by-bestwebsoft-018-reflected-cross-site-scripting 2017-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rabbit-loader/rabbitloader-website-speed-optimization-for-improving-core-web-vital-metrics-with-cache-image-optimization-and-more-2210-reflected-cross-site-scripting 2024-10-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/final-tiles-grid-gallery-lite/image-photo-gallery-final-tiles-grid-352-contributor-stored-cross-site-scripting 2022-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-affiliate-links/wp-affiliate-links-011-reflected-cross-site-scripting 2023-06-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sendfox/wp-sendfox-131-unauthenticated-information-disclosure 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extra-options-favicons/extra-options-favicons-110-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.8 beta 2/wordpress-core-58-beta-stored-cross-site-scripting-in-custom-html-block 2021-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-gtin-ean-upc-isbn-for-woocommerce/product-gtin-ean-upc-isbn-for-woocommerce-111-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/strong-testimonials/strong-testimonials-2512-authorization-bypass 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/capa/capa-protect-0582-cross-site-request-forgery-to-settings-update 2022-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/et-core-plugin/xstore-core-538-unauthenticated-php-object-injection 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hc-custom-wp-admin-url/hc-custom-wp-admin-url-14-missing-authorization-to-login-url-change 2022-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/toast-stick-anything/sticky-anything-215-unauthenticated-stored-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yaysmtp/yaysmtp-simple-wp-smtp-mail-22-stored-cross-site-scripting 2022-07-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/header-enhancement/catchthemes-plugins-various-versions-missing-authorization 2021-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpadverts/wpadverts-223-authenticated-contributor-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-data-filter-and-taxonomy-filter/mdtf-meta-data-and-taxonomies-filter-1333-unauthenticated-arbitrary-shortcode-execution 2024-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nofollow-links/nofollow-links-1010-cross-site-scripting 2016-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/robo-gallery/robo-gallery-plugin-3211-cross-site-request-forgery 2023-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddyforms/post-registration-and-profile-form-builder-frontend-editor-buddyforms-easy-wordpress-forms-269-cross-site-scripting 2022-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bricks/bricks-1101-authenticated-bricks-page-builder-access-stored-cross-site-scripting 2024-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-1524-authenticated-local-file-inclusion 2019-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-trackback-disabler/simple-trackback-disabler-14-cross-site-request-forgery 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2111-reflected-cross-site-scripting-via-filter-parameters 2026-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-job-board/simple-job-board-2123-authenticated-editor-php-object-injection 2024-08-23T18:53:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-reviews-shortcode/builder-for-woocommerce-reviews-shortcodes-reviewshort-1015-missing-authorization 2024-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bft-autoresponder/arigato-autoresponder-and-newsletter-2518-cross-site-scripting 2018-09-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/locatoraid/locatoraid-store-locator-3950-unauthenticated-php-object-injection 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-meta/socialninja-02-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-audit-exporter/content-audit-exporter-11-unauthenticated-sensitive-information-exposure 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/eco-nature/eco-nature-environment-ecology-wordpress-theme-204-missing-authorization-to-authenticated-subscriber-limited-options-update 2025-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ecommerce-product-catalog/ecommerce-product-catalog-for-wordpress-3325-cross-site-request-forgery 2023-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-travel-blocks/wp-travel-gutenberg-blocks-392-authenticated-contributor-stored-cross-site-scripting 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/captcha-bank/wordpress-captcha-plugin-by-captcha-bank-4036-reflected-cross-site-scripting 2024-10-03T13:32:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ocean-extra/ocean-extra-248-authenticated-contributor-stored-cross-site-scripting 2025-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-42682-authenticated-contributor-local-file-inclusion 2024-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gnupress/gnupress-029-reflected-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-addons-for-elementor-171056-authenticated-author-stored-cross-site-scripting-via-image-caption-field 2026-04-23T16:35:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comment-reply-email/comment-reply-email-103-authenticated-administrator-stored-cross-site-scripting 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/display-admin-page-on-frontend/wp-frontend-admin-1227-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/limit-bio/limit-bio-10-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-tables/product-table-by-wbw-201-unauthenticated-remote-code-execution 2024-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-video/gallery-video-gallery-and-youtube-gallery-1701-stored-cross-site-scripting 2016-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-polls-by-opinionstage/poll-survey-quiz-maker-plugin-by-opinion-stage-1990-incorrect-authorization-to-authenticated-contributor-plugin-settings-update 2025-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/handyman-services/handyman-14-unauthenticated-php-object-injection 2026-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leadlovers-forms/leadlovers-forms-102-missing-authorization 2026-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smartcrawl-seo/simple-social-media-share-buttons-382-unauthenticated-password-protected-post-disclosure 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-1309-reflected-cross-site-scripting 2021-08-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jazz-popups/jazz-popups-187-reflected-cross-site-scripting-via-wpjazzpopup_switchonoff 2023-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smooth-gallery-replacement/smooth-gallery-replacement-10-cross-site-request-forgery-to-stored-cross-site-scripting 2024-10-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-student-result/student-result-or-employee-database-163-authentication-bypass 2017-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smartcrawl-seo/smartcrawl-3143-missing-authorization 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spoki/spoki-chat-buttons-and-woocommerce-notifications-21515-authenticated-contributor-stored-cross-site-scripting 2024-12-19T18:08:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brizy/brizy-page-builder-10114-missing-authorization-to-settings-update 2020-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insert-php-code-snippet/insert-php-code-snippet-143-missing-authorization 2025-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dc-woocommerce-multi-vendor/multivendorx-4223-missing-authorization 2025-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementinvader-addons-for-elementor/elementinvader-addons-for-elementor-128-authenticated-contributor-stored-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-monster/event-management-tickets-booking-by-event-monster-plugin-106-cross-site-scripting 2019-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-block-editor-addons/responsive-blocks-206-authenticated-contributor-stored-cross-site-scripting 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/motopress-hotel-booking-lite/hotel-booking-lite-523-authenticated-hotel-worker-remote-code-execution 2025-11-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/startklar-elmentor-forms-extwidgets/startklar-elementor-addons-1715-unauthenticated-path-traversal-to-arbitrary-directory-deletion 2024-06-05T15:40:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcodes-ultimate/wordpress-shortcodes-plugin-shortcodes-ultimate-493-cross-site-scripting 2015-05-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/additional-order-filters-for-woocommerce/additional-order-filters-for-woocommerce-111-reflected-cross-site-scripting 2023-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-to-google-my-business/post-to-google-my-business-3114-cross-site-request-forgery-to-dismiss-notification 2023-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2027-multiple-cross-site-scripting-vulnerabilities 2018-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zephyr-project-manager/zephyr-project-manager-3242-unauthenticated-sql-injection 2022-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dropdown-category-list/category-dropdown-list-10-reflected-cross-site-scripting-via-_serverphp_self 2025-12-11T14:32:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weaver-themes-shortcode-compatibility/weaver-themes-shortcode-compatibility-104-authenticated-contributor-stored-cross-site-scripting 2025-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-best-elementor-addon-templates-widgets-kits-woocommerce-builders-609-authenticated-contributor-sensitive-information-exposure 2024-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2112-authenticated-contributor-sensitive-information-exposure-to-account-takeover-via-shortcode-template-tag 2026-03-27T09:48:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rometheme-for-elementor/rtmkit-165-authenticated-contributor-arbitrary-file-upload 2025-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bandsintown/bandsintown-events-131-authenticated-contributor-stored-cross-site-scripting 2025-02-19T21:09:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-1383-shortcode-injection 2017-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-prayer/wp-prayer-209-cross-site-request-forgery-to-email-settings-update 2024-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-submitted-posts/user-submitted-posts-20230902-unauthenticated-arbitrary-file-upload 2023-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/voltax-video-player/voltax-video-player-165-authenticated-contributor-stored-cross-site-scripting-via-id-parameter 2025-07-23T20:38:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-map/free-google-maps-101-authenticated-subscriber-stored-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forms-for-campaign-monitor/campaign-monitor-for-wordpress-2815-unauthenticated-full-path-disclosure 2024-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wsecure/wsecure-lite-24-remote-code-execution 2016-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-support-plus-responsive-ticket-system/support-plus-responsive-ticket-system-41-full-path-disclosure 2014-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-5012-authentication-bypass 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-payments/dreamfox-media-payment-gateway-per-product-for-woocommerce-358-missing-authorization 2024-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/select-all-categories-and-taxonomies-change-checkbox-to-radio-buttons/select-all-categories-and-taxonomies-change-checkbox-to-radio-buttons-132-reflected-cross-site-scripting 2021-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cp-contact-form-with-paypal/cp-contact-form-with-paypal-116-sql-injection 2015-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-builder-add/landing-page-builder-1520-authenticated-editor-local-file-inlcusion 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extensions-for-cf7/extensions-for-cf7-306-unauthenticated-stored-cross-site-scripting 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpvivid-backuprestore/wpvivid-0994-missing-authorization 2024-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gamipress/gamipress-the-1-gamification-plugin-to-reward-points-achievements-badges-ranks-in-wordpress-715-unauthenticated-arbitrary-shortcode-execution-via-gamipress_get_user_earnings 2024-11-18T22:31:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/togo/togo-travel-tour-booking-wordpress-theme-theme-104-missing-authorization 2025-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-anything-on-click/popup-anything-203-contributor-stored-cross-site-scripting 2021-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/web-directory-free/web-directory-free-178-reflected-cross-site-scripting 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-layouts/post-layouts-for-gutenberg-1210-authenticated-contributor-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stream-video-player/stream-video-player-141-cross-site-request-forgery 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pojo-accessibility/ally-402-missing-authorization 2026-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/just-tinymce-styles/just-tinymce-custom-styles-121-cross-site-request-forgery 2025-12-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gym-management/wpgym-6710-unauthenticated-arbitrary-file-upload 2024-11-22T19:12:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-112-missing-authorization-in-wpfc_clear_cache_of_allsites_callback 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/appointment-calendar/appointment-calendar-296-reflected-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js-support-ticket/js-help-desk-271-cross-site-request-forgery 2023-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-tables/ninja-tables-easy-data-table-builder-525-authenticated-contributor-information-exposure 2026-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/codelights-shortcodes-and-widgets/sidebar-widgets-by-codelights-14-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2022-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusedesk/fusedesk-67-authenticated-contributor-stored-cross-site-scripting-via-successredirect-parameter 2025-04-23T19:47:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bicycleshop/bicycleshop-15-authenticated-contributor-stored-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/classified-listing/classified-listing-500-authenticated-contributor-content-injection 2025-07-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leyka/leyka-3301-reflected-cross-site-scripting 2023-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-import/advanced-import-one-click-demo-import-for-wordpress-146-authenticated-author-server-side-request-forgery-via-demo_file-parameter 2026-06-18T15:57:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-bannerize/wp-bannerize-200-402-authenticated-sql-injection-via-id-parameter 2021-10-05T20:14:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/open-user-map/open-user-map-1416-authenticated-subscriber-arbitrary-file-download 2026-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-time-capsule/backup-and-staging-by-wp-time-capsule-12220-authentication-bypass-to-account-takeover 2024-07-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/magways/magways-121-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluentformpro/fluent-forms-pro-add-on-pack-6117-missing-authorization-to-unauthenticated-arbitrary-attachment-deletion 2026-03-04T14:34:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-import/import-any-xml-csv-or-excel-file-to-wordpress-393-authenticated-admin-limited-unsafe-file-upload 2025-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/idonate/idonate-200-219-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-user-deletion-via-admin_post_donor_delete-function 2025-11-06T15:39:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-video-player-with-analytics/advanced-video-player-with-analytics-1-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addon-elements-for-elementor-page-builder/elementor-addon-elements-11212-authenticated-contributor-stored-cross-site-scripting-via-content-switcher-widget 2024-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/charity-addon-for-elementor/charity-addon-for-elementor-130-authenticated-contributor-stored-cross-site-scripting 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-registration/simple-user-registration-67-authenticated-subscriber-privilege-escalation-via-profile_save_field 2026-01-27T21:50:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/co2ok-for-woocommerce/co2ok-carbon-offsetting-for-e-commerce-10921-cross-site-scripting 2022-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tickera-event-ticketing-system/tickera-3510-cross-site-request-forgery-to-ticket-post-status-change 2023-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gdreseller/gdreseller-16-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enable-svg-webp-ico-upload/enable-svg-webp-ico-upload-110-arbitrary-file-upload 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gap-hub-user-role/gap-hub-user-role-341-cross-site-request-forgery 2024-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tweet-old-post/revive-old-posts-social-media-auto-post-and-scheduling-plugin-800-authorization-bypass 2015-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ui-slider-filter-by-price/ui-slider-filter-by-price-11-cross-site-request-forgery 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/so-widgets-bundle/siteorigin-widgets-bundle-1685-authenticated-contributor-stored-cross-site-scripting-via-data-url-dom-element-attribute 2025-06-24T13:56:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/propovoice/propovoice-crm-1762-unauthenticated-stored-cross-site-scripting 2024-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integrate-contact-form-7-and-aweber/contact-form-7-aweber-extension-0142-missing-authorization 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sync-for-notion/wp-sync-for-notion-170-missing-authorization 2026-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-writer/content-writer-368-unauthenticated-information-exposure-via-log-file 2025-10-14T20:02:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qi-addons-for-elementor/qi-addons-for-elementor-164-authenticated-contributor-stored-cross-site-scripting 2023-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tumult-hype-animations/tumult-hype-animations-1912-authenticated-author-arbitrary-file-upload 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesomepress/awesomepress-10-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bread-butter/bread-butter-gate-content-capture-leads-collect-first-party-data-nurture-with-ai-agents-7111374-cross-site-request-forgery-to-arbitrary-file-upload 2025-12-04T16:31:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real-estate-listing-realtyna-wpl/realtyna-organic-idx-plugin-4144-reflected-cross-site-scripting 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-login-with-eve-online-google-facebook/oauth-single-sign-on-sso-oauth-client-6225-cross-site-scripting 2022-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weglot/translate-wordpress-and-go-multilingual-weglot-51-missing-authorization-to-unauthenticated-limited-transient-deletion 2025-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/searchterms-tagging-2/searchterms-tagging-2-1535-reflected-cross-site-scripting 2015-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geotagged-media/geotagged-media-030-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar-shortcode/the-events-calendar-shortcode-block-312-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-02-09T20:37:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hesabfa-accounting/hesabfa-accounting-224-unauthenticated-sensitive-information-exposure-via-log-file 2025-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-twitpic/wp-twitpic-10-authenticated-contributor-stored-cross-site-scripting 2025-11-26T14:19:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/string-locator/string-locator-242-authenticated-arbitrary-file-read 2022-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accordion-slider-lite/accordion-slider-lite-151-authenticated-contributor-stored-cross-site-scripting 2025-01-10T19:04:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-paypal-extension/accept-paypal-payments-using-contact-form-7-405-missing-authorization 2026-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/squirrly-seo/seo-plugin-by-squirrly-seo-12319-authenticated-contributor-sql-injection-via-url-parameter 2024-07-19T20:19:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-notify-lite/popup-builder-1132-authenticated-contributor-stored-cross-site-scripting 2024-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-filter-posts/post-grid-master-347-missing-authorization 2024-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sermonaudio-widgets/sermonaudio-widgets-193-authenticated-contributor-sql-injection 2024-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/grandrestaurant/grand-restaurant-wordpress-70-unauthenticated-php-object-injection 2025-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-column-tag-map/multi-column-tag-map-17033-authenticated-contributor-stored-cross-site-scripting-via-mctagmap-shortcode 2024-12-20T18:46:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletters-lite/newsletters-4618-cross-site-scripting-via-contentarea-parameter 2019-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/computer-repair-shop/repairbuddy-41132-missing-authorization-to-authenticated-subscriber-plugin-settings-modification-via-wc_rep_shop_settings_submission-ajax-action 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dpt-oauth-client/oauth-client-by-digitialpixies-110-authenticated-administrator-stored-cross-site-scripting 2022-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inlinkz-scripter/ez-inlinkz-linkup-018-authenticated-contributor-stored-cross-site-scripting 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/presto-player/the-ultimate-video-player-for-wordpress-by-presto-player-413-missing-authorization 2026-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/swagger/themeblvd-themesplugins-various-versions-missing-authorization-checks 2014-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/findgo/findgo-1357-cross-site-request-forgery 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/payment-gateway-stripe-and-woocommerce-integration/stripe-payment-plugin-for-woocommerce-359-reflected-cross-site-scripting 2021-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-281-authenticated-cross-site-scripting 2019-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-linked-images-to-gallery-v01/add-linked-images-to-gallery-14-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uncode-core/uncode-core-288-privilege-escalation 2023-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gwp-histats/gwp-histats-10-authenticated-contributor-stored-cross-site-scripting 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brizy/brizy-page-builder-2444-missing-authorization-to-authenticated-contributor-post-modification 2024-07-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-for-japan/japanized-for-woocommerce-254-reflected-cross-site-scripting 2023-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-483-sql-injection-due-to-double-prepare-approach 2017-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/javascript-logic/javascript-logic-01-cross-site-request-forgery-to-stored-cross-site-scripting 2024-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/allaccessible/accessibility-by-allaccessible-134-missing-authorization-to-authenticated-subscriber-arbitrary-option-update 2024-12-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/charitable/charitable-1817-missing-authorization-to-unauthorized-donation 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-control/user-control-210-sql-injection 2018-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anti-plagiarism/anti-plagiarism-360-reflected-cross-site-scripting 2016-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simply-schedule-appointments/appointment-booking-calendar-simply-schedule-appointments-booking-plugin-16742-authenticated-admin-remote-code-execution 2024-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adminquickbar/adminquickbar-193-cross-site-request-forgery-to-settings-update 2026-01-23T19:27:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gamipress-youtube-integration/gamipress-youtube-integration-107-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/single-sign-on-client/simple-single-sign-on-411-insecure-oauth-implementation-to-authentication-bypass 2022-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sendgrid-mailer/sendgrid-for-wordpress-14-missing-authorization-to-authenticated-subscriber-log-deletion 2024-10-17T15:43:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-request-a-quote/yith-woocommerce-request-a-quote-2460-missing-authorization 2026-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-activity-log/user-activity-log-165-unauthenticated-data-export-to-sensitive-information-disclosure 2023-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hash-form/hash-form-121-missing-authorization-to-authenticated-contributor-form-style-creation 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wps-hide-login/wps-hide-login-1911-hidden-login-page-location-disclosure 2024-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-download/wp-download-12-sql-injection 2008-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gb-gallery-slideshow/gb-gallery-slideshow-15-sql-injection 2014-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/soundy-audio-playlist/soundy-audio-playlist-46-cross-site-scripting 2018-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pta-volunteer-sign-up-sheets/volunteer-sign-up-sheets-554-authenticated-admin-stored-cross-site-scripting 2025-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visibility-logic-elementor/visibility-logic-for-elementor-234-cross-site-request-forgery-via-toggle_option 2023-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lbg-audio11-html5-shoutcast_history/clever-26-unauthenticated-arbitrary-file-download 2025-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alpine-photo-tile-for-pinterest/alpine-phototile-for-pinterest-131-authenticated-admin-stored-cross-site-scripting 2022-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gpt3-ai-content-generator/ai-power-complete-ai-pack-1896-authenticated-admin-php-object-injection-via-wpaicg_export_ai_forms 2025-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-2-factor-authentication/minioranges-google-authenticator-557-reflected-cross-site-scripting 2022-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-elementor-addons/happy-addons-for-elementor-3104-authenticated-contributor-stored-cross-site-scripting-via-calendy 2024-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/everest-news-pro/everest-news-pro-117-reflected-cross-site-scripting 2023-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/thecotton_v114/thecotton-114-arbitrary-file-upload 2014-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hostel/hostel-1151-authenticated-administrator-stored-cross-site-scripting 2023-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/planning-center-online-giving/planning-center-online-giving-100-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wptools/wp-tools-524-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meta-box-gallerymeta/meta-box-gallerymeta-301-authenticated-editor-stored-cross-site-scripting-via-image-caption 2026-01-23T20:03:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/complianz-gdpr/complianz-gdprccpa-cookie-consent-7442-authenticated-contributor-stored-cross-site-scripting-via-content-filter 2026-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-opening-hours/opening-hours-230-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redi-restaurant-reservation/redi-restaurant-reservation-240902-reflected-cross-site-scripting 2024-10-16T13:30:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fw-anker/fw-anker-126-authenticated-contributor-stored-cross-site-scripting 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/f70-lead-document-download/f70-lead-document-download-144-missing-authorization-to-unauthenticated-arbitrary-media-file-download 2025-12-19T15:02:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/azurecurve-toggle-showhide/azurecurve-toggle-showhide-213-authenticated-contributor-stored-cross-site-scripting 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.1/wordpress-core-621-authenticated-contributor-stored-cross-site-scripting-via-embed-discovery 2023-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/search-exclude/search-exclude-123-arbitrary-settings-change 2019-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/apocalypse-meow/apocalypse-meow-2113-2127-authentication-bypass 2017-12-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-thumbnail-generator/pdf-thumbnail-generator-14-cross-site-request-forgery 2025-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventon-lite/eventon-217-authenticated-admin-stored-cross-site-scripting 2023-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ameliabooking/amelia-1046-reflected-cross-site-scripting 2022-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/compact-wp-audio-player/compact-wp-audio-player-1913-authenticated-contributor-stored-cross-site-scripting-via-sc_embed_player-shortcode 2024-10-23T21:58:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/firedrum-email-marketing/firedrum-email-marketing-164-reflected-cross-site-scripting 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/rapyd-payments/rapyd-payment-extension-for-woocommerce-120-unauthenticated-php-object-injection 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-maker/popup-maker-165-reflected-cross-site-scripting 2017-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/drag-and-drop-multiple-file-upload-contact-form-7/drag-and-drop-multiple-file-upload-contact-form-7-1362-unauthenticated-stored-cross-site-scripting 2022-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simplified-content/simplified-content-101-reflected-cross-site-scripting 2016-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nmedia-user-file-uploader/frontend-file-manager-227-sensitive-information-exposure-via-user-uploads 2024-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-woo-labels/advanced-woo-labels-237-authenticated-contributor-remote-code-execution-via-callback-parameter 2026-02-24T19:54:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/savoy/savoy-308-unauthenticated-information-exposure 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meks-video-importer/meks-video-importer-1012-missing-authorization 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/currency-switcher/wpcs-wordpress-currency-switcher-professional-1204-unauthenticated-arbitrary-shortcode-execution 2025-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bg-orthodox-calendar/bg-orthodox-calendar-01310-cross-site-request-forgery-to-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-prime-slider-lite/prime-slider-addons-for-elementor-3131-authenticated-contributor-stored-cross-site-scripting-via-fiestar-widget 2024-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sourceplay-navermap/sourceplay-navermap-002-missing-authorization 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ql-cost-calculator/cost-calculator-74-authenticated-subscriber-stored-cross-site-scripting 2025-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-restrict/simple-restrict-127-unauthenticated-content-restriction-bypass-to-sensitive-information-exposure 2024-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-generator/contact-form-generator-creative-form-builder-for-wordpress-2186-cross-site-request-forgery 2015-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-login-styler/easy-login-styler-white-label-admin-login-page-for-wordpress-106-authenticated-administrator-stored-cross-site-scripting 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagemapper/imagemapper-126-cross-site-request-forgery-to-stored-cross-site-scripting-via-imgmap_save_area_title 2023-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/upmenu/upmenu-31-authenticated-contributor-stored-cross-site-scripting-via-upmenu-menu-shortcode-lang-attribute 2026-02-13T18:33:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-symposium/wp-symposium-154-sql-injection 2015-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-notes-for-woocommerce/product-notes-tab-private-admin-notes-for-woocommerce-310-authenticated-contributor-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stops-core-theme-and-plugin-updates/easy-updates-manager-9020-reflected-cross-site-scripting-via-paged-parameter 2026-05-27T18:13:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-last-modified-info/wp-last-modified-info-194-authenticated-contributor-remote-code-execution 2025-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/secure-copy-content-protection/secure-copy-content-protection-and-content-locking-266-sql-injection 2021-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-1314-unauthenticated-blind-sql-injection 2022-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pochipp/pochipp-1189-missing-authorization 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/recipe-card-blocks-by-wpzoom/recipe-card-blocks-for-gutenberg-elementor-348-incorrect-authorization 2025-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stageshow/stageshow-509-open-redirect 2015-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-content-copy-protection/wp-content-copy-protection-344-cross-site-request-forgery-to-setting-update 2022-02-16T08:04:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mtouch-quiz/mtouch-quiz-312-cross-site-request-forgery-to-cross-site-scripting 2015-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/relevanssi-live-ajax-search/relevanssi-live-ajax-search-24-unauthenticated-wp_query-argument-injection 2024-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-dashboard/ultimate-dashboard-3814-cross-site-request-forgery-to-module-activationdeactivation 2026-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulkpress/bulkpress-035-reflected-cross-site-scripting 2024-11-15T15:06:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-account-funds-premium/yith-woocommerce-account-funds-premium-1330-missing-authorization 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yet-another-stars-rating/yet-another-stars-rating-186-unauthenticated-php-object-injection 2019-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vc-autoresponder-addon/bakery-autoresponder-addon-106-unauthenticated-stored-cross-site-scripting 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gpx-viewer/gpx-viewer-2211-authenticated-editor-path-traversal 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/out-of-the-box/out-of-the-box-1202-reflected-cross-site-scripting 2021-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leyka/leyka-3319-unauthenticated-local-file-inclusion 2025-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latest-post-shortcode/latest-post-shortcode-1403-authenticated-contributor-stored-cross-site-scripting 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-calendar-for-google/events-calendar-for-google-210-authenticated-contributor-local-file-inclusion 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sitepress-multilingual-cms/wpml-363-unauthenticated-stored-cross-site-scripting 2018-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulk-edit-post-titles/bulk-edit-post-titles-500-missing-authorization 2023-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-control/content-control-the-ultimate-content-restriction-plugin-restrict-content-create-conditional-blocks-more-250-unauthenticated-content-restriction-bypass-to-sensitive-information-exposure 2025-03-04T21:25:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bus-ticket-booking-with-seat-reservation/bus-ticket-booking-with-seat-reservation-562-unauthenticated-php-object-injection 2026-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/source-shortcode/credits-shortcode-12-authenticated-contributor-stored-cross-site-scripting-via-link-shortcode-attribute 2026-05-11T19:02:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arconix-shortcodes/arconix-shortcodes-2119-authenticated-contributor-stored-cross-site-scripting 2025-12-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fastcgi-cache-purge-and-preload-nginx/nginx-cache-purge-preload-211-authenticated-administrator-remote-code-execution 2025-07-21T20:50:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kali-forms/contact-form-builder-with-drag-drop-for-wordpress-kali-forms-242-authenticated-contributor-stored-cross-site-scripting 2025-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qtranslate-to-wpml-export/qtranslate-x-cleanup-and-wpml-import-301-missing-authorization-via-clean_ajx 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/devs-accounting/devs-accounting-120-missing-authorization-to-unauthenticated-account-deletion-via-delete-account-rest-endpoint 2026-06-23T16:39:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-directory-traversal-via-customizer 2017-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-before-download/email-before-download-36-sql-injection 2017-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder/profile-builder-user-profile-user-registration-forms-390-sensitive-information-disclosure-via-shortcode 2023-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/countdown-wpdevart-extended/countdown-and-countup-woocommerce-sales-timers-157-cross-site-request-forgery-to-stored-cross-site-scripting 2021-09-27T13:41:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/breeze/breeze-wordpress-cache-plugin-202-unprotected-ajax-actions 2022-05-02T13:12:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/zota/zota-1314-authenticated-contributor-local-file-inclusion 2025-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-marketing-automations/multiple-plugins-by-funnelkit-various-versions-authenticated-contributor-sensitive-information-exposure-to-privilege-escalation-via-woofunnel-library 2025-08-18T18:57:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/6.5/wordpress-core-655-authenticated-contributor-stored-cross-site-scripting-via-html-api 2024-06-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hostel/hostel-1157-reflected-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/globalquran/globalquran-10-cross-site-request-forgery-to-settings-update 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weaverx-theme-support/weaver-xtreme-theme-support-64-authenticated-contributor-stored-cross-site-scripting-via-div-shortcode 2024-06-04T19:18:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-saint/post-saint-chatgpt-gpt4-dall-e-stable-diffusion-pexels-dezgo-ai-text-image-generator-131-missing-authorization-to-authenticated-subscriber-arbitrary-file-upload 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zoho-flow/zoho-flow-for-wordpress-280-authenticated-administrator-sql-injection 2024-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/photome/photome-5611-unauthenticated-php-object-injection 2026-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpc-grouped-product/wpc-grouped-product-for-woocommerce-442-missing-authorization 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/plationline/plationline-payments-700-missing-authorization 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/questionar-elementor/questionar-for-elementor-117-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cardoza-facebook-like-box/easy-social-like-box-popup-sidebar-widget-40-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-06-05T12:59:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exit-strategy/wordpress-exit-strategy-155-information-exposure 2013-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/atarim-visual-collaboration/atarim-393-reflected-cross-site-scripting 2023-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lbg_zoominoutslider/responsive-zoom-inout-slider-wordpress-plugin-545-reflected-cross-site-scripting 2026-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-modern-events-calendar-bookings-and-tickets-4047-unauthenticated-stored-cross-site-scripting 2024-10-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-204-authenticated-unrestricted-file-upload 2018-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-social-login/wordpress-social-login-304-authenticated-administrator-stored-cross-site-scripting 2023-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mshop-mysite/mshop-my-site-117-missing-authorization-via-update_settings 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-wordpress-page-builder-2941-missing-authorization-to-authenticated-subscriber-arbitrary-post-update 2025-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-1355-missing-authorization-to-subscriber-arbitrary-post-creation 2022-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qr-redirector/qr-redirector-161-stored-cross-site-scripting 2021-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mw-wp-form/mw-wp-form-511-unauthenticated-arbitrary-file-move-via-regenerate_upload_file_keys 2026-04-08T07:57:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/truebooker-appointment-booking/truebooker-116-missing-authorization 2026-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shiftcontroller/shiftcontroller-employee-shift-scheduling-4923-unauthenticated-stored-cross-site-scripting-via-hc-title 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-posts-order/custom-posts-order-44-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-seopress/seopress-on-site-seo-7521-authenticated-contributor-stored-cross-site-scripting 2024-05-23T17:02:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/charitable/charitable-donation-plugin-for-wordpress-fundraising-with-recurring-donations-more-1897-insufficient-verification-of-data-authenticity-to-unauthenticated-donation-status-forgery-via-stripe-webhook 2026-04-06T18:46:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-bulk-editor/bear-bulk-editor-and-products-manager-professional-for-woocommerce-by-pluginusnet-115-cross-site-request-forgery-to-product-data-modification 2026-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdiscuz/comments-wpdiscuz-70-704-unauthenticated-arbitrary-file-upload-leading-to-remote-code-execution 2021-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ical-availability/wp-ical-availability-103-cross-site-request-forgery 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforo/wpforo-forum-248-unauthenticated-sql-injection-via-get_members-function 2025-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hide_my_wp/hide-my-wp-6212-reflected-cross-site-scripting 2026-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/magic-conversation-for-gravity-forms/magic-conversation-for-gravity-forms-3097-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-04-07T19:53:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-to-header/add-to-header-10-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seriously-simple-podcasting/seriously-simple-podcasting-3130-unauthenticated-information-exposure 2025-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/currency-switcher/wpcs-wordpress-currency-switcher-professional-119-missing-authorization-to-arbitrary-custom-drop-down-currency-switcher-deletion 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/classified-listing-pro/classified-listing-pro-2020-reflected-cross-site-scripting 2022-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zeenshare/zeenshare-101-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-3355-authenticated-contributor-stored-cross-site-scripting 2026-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-maker/quiz-maker-67080-unauthenticated-sensitive-information-exposure 2025-11-18T15:41:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-polls/wp-polls-2756-ip-validation-bypass 2022-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/posts-table-filterable/tableon-wordpress-posts-table-filterable-103-unauthenticated-stored-cross-site-scripting 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/envira-gallery-lite/envira-gallery-for-wordpress-1123-authenticated-author-stored-cross-site-scripting-via-justified_gallery_theme-parameter-via-rest-api 2026-03-03T20:19:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/daily-inspiration-generator/daily-inspiration-generator-20-reflected-cross-site-scripting 2014-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rezgo/rezgo-online-booking-143-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/plainview-protect-passwords/plainview-protect-passwords-14-cross-site-request-forgery 2023-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3308-authenticated-author-path-traversal-to-limited-file-overwrite 2025-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/team-showcase-supreme/team-member-74-authenticated-editor-local-file-inclusion 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-classifieds-and-directory-pro/advanced-classifieds-directory-pro-300-missing-authorization-to-arbitrary-attachment-deletion 2024-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mappress-google-maps-for-wordpress/mappress-maps-for-wordpress-2538-authenticated-map-creationdeletion-to-stored-cross-site-scripting-remote-code-execution 2020-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/checkout-plugins-stripe-woo/stripe-payments-for-woocommerce-by-checkout-191-cross-site-request-forgery 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mpoperationlogs/mpoperationlogs-101-unauthenticated-stored-cross-site-scripting 2023-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/h5pxapikatchu/snordians-h5pxapikatchu-0414-missing-authorization 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/goracash/goracash-11-authenticated-administrator-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/donation-thermometer/donation-thermometer-212-authenticated-administrator-stored-cross-site-scripting 2022-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-1265-stored-cross-site-scripting 2019-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bridge-core/bridge-core-309-reflected-cross-site-scripting 2023-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/groundhogg/groundhogg-131113-sql-injection 2019-10-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.3/wordpress-core-542-open-redirect 2020-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/super-socializer/super-socializer-71354-cross-site-request-forgery 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/featured-posts-with-multiple-custom-groups-fpmcg/featured-posts-with-multiple-custom-groups-fpmcg-40-reflected-cross-site-scripting 2024-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/medma-matix/matix-popup-builder-100-unauthenticated-arbitrary-options-update 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/weaver-xtreme/weaver-xtreme-630-authenticated-contributor-stored-cross-site-scripting 2024-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lisfinity-core/lisfinity-core-lisfinity-core-plugin-used-for-pebas-lisfinity-wordpress-theme-150-unauthenticated-sql-injection 2026-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chameleon/chameleon-143-authenticated-administrator-stored-cross-site-scripting 2022-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theme-per-user/theme-per-user-101-unauthenticated-php-object-injection 2023-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bricksforge/bricksforge-2017-missing-authorization-to-unauthenticated-wordpress-settings-deletion 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/greenly/greenly-81-authenticated-contributor-local-file-inclusion 2026-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/narnoo-distributor/narnoo-distributor-251-path-traversal 2022-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-hotel-booking/wp-hotel-booking-216-missing-authorization-to-authenticated-subscriber-user-email-retrieval 2025-01-21T22:18:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broadstreet/broadstreet-ads-1517-reflected-cross-site-scripting 2025-05-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/upload-quota-per-user/upload-quota-per-user-13-authenticated-administrator-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-3272-reflected-cross-site-scripting 2020-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar/the-events-calendar-61511-6159-unauthenticated-sql-injection-via-s 2025-11-04T16:25:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot/chatbot-773-missing-authorization 2025-10-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-wp-smtp/easy-wp-smtp-149-authenticated-administrator-php-object-injection 2022-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/codepeople-post-map/google-maps-cp-1043-missing-authorization-to-authenticated-subscriber-feedback-form-submission 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-manager/booking-manager-sync-wp-booking-calendar-import-events-export-bookings-to-ics-calendar-2114-authenticated-contributor-booking-deletion 2025-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jquery-tagline-rotator/jquery-tagline-rotator-015-reflected-cross-site-scripting 2021-08-13T15:31:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/healsoul/healsoul-223-unauthenticated-local-file-inclusion 2025-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maxbuttons/wordpress-button-plugin-maxbuttons-976-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-courses/wp-courses-lms-online-courses-builder-elearning-courses-courses-solution-education-courses-3226-authenticated-subscriber-stored-cross-site-scripting 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-extra-fields/user-extra-fields-168-missing-authorization 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meeting-scheduler-by-vcita/online-booking-scheduling-calendar-for-wordpress-by-vcita-452-authenticated-subscriber-sensitive-information-exposure 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ip2location-redirection/ip2location-redirection-1333-missing-authorization-to-unauthenticated-settings-export 2025-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-pipes/wp-pipes-133-authenticated-admin-sql-injection 2022-12-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/armania/armania-148-unauthenticated-arbitrary-shortcode-execution 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-instagram/image-social-feed-plugin-176-authenticated-administrator-stored-cross-site-scripting 2023-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-dynamic-pricing-and-discounts/woocommerce-dynamic-pricing-and-discounts-241-stored-cross-site-scripting 2021-08-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-bootmodal-login/ajax-bootmodal-login-143-captcha-reuse 2018-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stonehenge-em-osm/events-manager-8211-openstreetmaps-421-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fv-wordpress-flowplayer/fv-flowplayer-video-player-7313727-unauthenticated-stored-cross-site-scripting 2019-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-elearning-and-online-course-solution-200-208-reflected-cross-site-scripting 2022-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-video-gallery/all-in-one-video-gallery-471-reflected-cross-site-scripting-via-vi-parameter 2026-03-03T20:24:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-1315-unauthenticated-stored-cross-site-scripting-via-browser 2022-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feedweb/feedweb-307-sql-injection 2014-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-private-content-plus/wp-private-content-plus-34-authenticatedadmin-stored-cross-site-scripting 2023-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clearout-email-validator/clearout-email-validator-320-authenticated-administrator-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulletproof-security/bulletproof-security-57-admin-stored-cross-site-scripting 2022-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bbpress-notify-nospam/bbpress-notify-2195-reflected-cross-site-scripting 2025-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/couponxxl/couponxxl-300-unauthenticated-privilege-escalation 2025-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simplelightbox/multiple-plugins-various-versions-authenticated-contributor-stored-dom-based-cross-site-scripting-via-simplelightbox-javascript-library 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-count-down-timer/wp-count-down-timer-101-authenticated-contributor-stored-cross-site-scripting 2025-11-10T15:08:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-page-duplicator/page-duplicator-011-missing-authorization-to-unauthenticated-postpage-duplication 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pure-wc-variations-swatches/pure-wc-variation-swatches-117-missing-authorization-to-unauthenticated-settings-update 2025-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/firestats/firestats-162-sql-injection 2009-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-2checkout-payment/2checkout-payment-gateway-for-woocommerce-62-missing-authorization-via-sniff_ins 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sheets-to-wp-table-live-sync/flextable-data-table-sync-with-google-sheets-3240-missing-authorization 2026-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easycart/wp-easycart-548-cross-site-request-forgery-via-process_delete_product 2023-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integrate-google-drive/integrate-google-drive-132-open-redirect-via-state 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-popup-builder/wp-popup-builder-138-unauthenticated-information-exposure 2025-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/job-portal/job-portal-001-authenticated-admin-stored-cross-site-scripting 2021-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpb-image-widget/wpb-image-widget-11-authenticated-contributor-stored-cross-site-scripting 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/back-button-widget/back-button-widget-163-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/devoluciones-packback/mimoos-12-authenticated-subscriber-sql-injection 2024-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wangguard/wangguard-180-unauthenticated-stored-cross-site-scripting 2017-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/skysa-text-ticker-app/skysa-text-ticker-app-14-cross-site-request-forgery-to-settings-modification-via-save-settings-form 2026-05-11T19:04:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/base64-encoderdecoder/base64-encoderdecoder-092-cross-site-request-forgery-to-setting-reset 2024-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enteraddons/enter-addons-227-authenticated-contributor-stored-cross-site-scripting-via-countdown-and-image-comparison-widgets 2025-12-12T19:38:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-dropbox-dropins/wp-dropbox-dropins-10-unauthenticated-arbitrary-file-upload 2024-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dethemekit-for-elementor/dethemekit-for-elementor-213-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets 2024-05-17T16:25:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-1204-stored-cross-site-scripting 2017-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-system/pinpoint-booking-system-29928-authenticated-admin-stored-cross-site-scripting 2023-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp3-music-player-by-sonaar/mp3-audio-player-for-music-radio-podcast-by-sonaar-51-authenticated-contributor-stored-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cm-pop-up-banners/cm-pop-up-banners-184-missing-authorization 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/animation-addons-for-elementor/animation-addons-for-elementor-245-authenticated-contributor-arbitrary-content-deletion 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/official-statcounter-plugin-for-wordpress/official-statcounter-plugin-210-authenticated-contributor-stored-cross-site-scripting-via-nickname 2026-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/Ultimate_VC_Addons/ultimate-addons-for-wpbakery-page-builder-3211-missing-authorization 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-seo/wp-meta-seo-446-admin-stored-cross-site-scripting-via-breadcrumbs 2022-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-voting/wp-voting-18-reflected-cross-site-scripting 2025-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userfeedback-lite/userfeedback-lite-1015-unauthenticated-stored-cross-site-scripting-via-name-parameter 2024-07-12T08:32:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coven-core/coven-core-13-unauthenticated-sql-injection 2026-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beyot-framework/smart-framework-multiple-plugins-authenticated-subscriber-arbitrary-file-upload 2025-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slider-bws/slider-by-bestwebsoft-110-authenticated-administrator-sql-injection 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-activity-log-pro/user-activity-log-pro-233-unauthenticated-stored-cross-site-scripting-via-user-agent-header 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-276-unauthenticated-sql-injection-via-rating_filter 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/activecampaign-subscription-forms/activecampaign-8116-authenticated-administrator-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/survey-maker/survey-maker-405-authenticated-administrator-stored-cross-site-scripting 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-poster/pdf-poster-display-pdf-files-with-custom-viewer-241-missing-authorization 2026-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gdpr-cookie-consent/wp-cookie-notice-for-gdpr-ccpa-eprivacy-consent-380-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gt3-photo-video-gallery/photo-gallery-gt3-image-gallery-gutenberg-block-gallery-27725-authenticated-contributor-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spiffy-calendar/spiffy-calendar-507-missing-authorization 2026-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iteras/iteras-182-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-04-23T19:20:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/travel-agency/travel-agency-155-missing-authorization 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blue-wrench-videos-widget/blue-wrench-video-widget-210-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uncanny-automator/uncanny-automator-414-cross-site-request-forgery-via-update_automator_connect 2023-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-championship/wp-championship-92-multiple-cross-site-request-forgery-vulnerabilities 2022-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/community-events/community-events-158-authenticated-administrator-sql-injection-via-ce_venue_name-csv-field 2026-03-06T11:49:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js_composer/wpbakery-page-builder-872-missing-authorization 2026-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/floating-social-bar/floating-social-bar-117-cross-site-scripting 2015-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-product-fields-for-woocommerce/advanced-product-fields-product-addons-for-woocommerce-1618-missing-authorization 2026-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/transposh-translation-filter-for-wordpress/transposh-wordpress-translation-1096-sensitive-information-disclosure 2022-07-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mwp-countdown/wow-countdowns-312-authenticated-admin-sql-injection 2022-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/listeo/listeo-directory-listings-with-booking-wordpress-theme-1611-cross-site-scripting 2021-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-4991-cross-site-request-forgery 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scrolling-anchors/easy-smooth-scroll-links-2231-authenticated-admin-stored-cross-site-scripting 2022-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-business-data/simple-business-data-101-authenticated-contributor-stored-cross-site-scripting 2025-10-21T20:20:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-video-player/easy-video-player-12210-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/projectopia-core/projectopia-5118-unauthenticated-privilege-escalation-via-account-takeover 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addon-elements-for-elementor-page-builder/elementor-addon-elements-1127-authenticated-administrator-stored-cross-site-scripting 2023-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/newsmatic/newsmatic-134-unauthenticated-information-exposure-via-newsmatic_filter_posts_load_tab_content 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/hestia/hestia-3210-missing-authorization 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-search-replace/better-search-replace-14-authenticated-administrator-sql-injection 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mapa-politico-spain/mapa-politico-espaa-370-stored-cross-site-scripting 2021-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-link-directory/simple-link-directory-560-php-object-injection 2018-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/word-replacer-ultra/word-replacer-pro-10-missing-authorization 2024-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/cars4rent/cars4rent-142-unauthenticated-php-object-injection 2025-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acf-extended/advanced-custom-fields-extended-0925-unauthenticated-privilege-escalation-via-validation-bypass-to-_acf_post_id-parameter 2026-05-28T10:09:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spider-elements/spider-elements-addons-for-elementor-163-missing-authorization 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/color-palette/color-palette-432-authenticated-contributor-stored-cross-site-scripting-via-hex-parameter 2025-06-12T13:10:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-post-scheduler/auto-post-scheduler-184-cross-site-request-forgery-to-stored-cross-site-scripting-via-aps_options_page 2026-03-30T16:31:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/makewebbetter-hubspot-for-woocommerce/mwb-hubspot-for-woocommerce-crm-abandoned-cart-email-marketing-marketing-automation-analytics-159-missing-authorization-to-authenticated-contributor-arbitrary-options-update 2025-01-30T00:42:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/strong-testimonials/strong-testimonials-3111-authenticated-contributor-stored-cross-site-scripting 2024-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-link-to-facebook/add-link-to-facebook-228-reflected-cross-site-scripting 2015-08-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-stats-manager/wp-visitor-statistics-real-time-traffic-55-sql-injection 2022-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-video-lightbox/wp-video-lightbox-194-reflected-cross-site-scripting 2022-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-addons-for-elementor/responsive-addons-for-elementor-201-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets 2025-09-10T18:49:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/circle-image-slider-with-lightbox/team-circle-image-slider-with-lightbox-104-authenticated-admin-sql-injection 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-blocks/wowstore-store-builder-product-blocks-for-woocommerce-443-unauthenticated-sql-injection-via-search-parameter 2026-03-16T11:29:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventer/eventer-wordpress-event-booking-manager-plugin-3992-authenticated-subscriber-sql-injection-via-reg_id 2025-03-06T19:34:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ehive-search/ehive-search-250-reflected-cross-site-scripting 2026-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/universal-google-adsense-and-ads-manager/universal-google-adsense-and-ads-manager-118-missing-authorization 2026-01-14T08:24:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2112-cross-site-scripting 2020-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vitepos-lite/vitepos-point-of-sale-pos-for-woocommerce-330-authenticated-subscriber-arbitrary-file-upload-to-remote-code-execution 2025-11-20T19:52:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/a4-barcode-generator/print-barcode-labels-for-your-woocommerce-productsorders-349-missing-authorization 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-donottrack/wp-donottrack-088-authenticated-admin-stored-cross-site-scripting 2021-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdpa-consent/pdpa-consent-for-thailand-111-authenticated-administrator-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-b2b-for-woocommerce/all-in-one-b2b-for-woocommerce-103-cross-site-request-forgery 2023-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wedevs-project-manager/wp-project-manager-2617-missing-authorization-to-authenticated-subscriber-limited-arbitrary-options-update 2025-02-14T20:28:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amocrm-webform/amocrm-webform-11-authenticated-contributor-stored-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/authentic/authentic-204-arbitrary-file-download 2014-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailchimp-for-wp/mc4wp-mailchimp-for-wordpress-487-cross-site-scripting 2022-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kk-youtube-video/kk-youtube-video-02-authenticated-contributor-stored-cross-site-scripting 2025-06-13T19:38:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enigma-chartjs/chartjs-20232-authenticatededitor-stored-cross-site-scripting-via-chart 2024-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sponsered-link/sponsered-link-40-reflected-cross-site-scripting 2025-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-calendly-integration/form-to-online-booking-10-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-memberships-pro/paid-memberships-pro-2128-authenticated-contributor-information-disclosure-via-shortcode 2024-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pie-calendar/pie-calendar-129-authenticated-contributor-stored-cross-site-scripting 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wedevs-project-manager/wp-project-manager-268-authenticated-subscriber-stored-cross-site-scripting 2023-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ws-form/ws-form-lite-and-pro-18176-stored-cross-site-scripting 2022-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hq60-fidelity-card/hq60-fidelity-card-18-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/designthemes-directory-addon/designthemes-directory-addon-18-missing-authorization 2026-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/creative-image-slider/creative-image-slider-responsive-slider-plugin-213-reflected-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bookly-responsive-appointment-booking-tool/bookly-203-staff-member-stored-cross-site-scripting 2021-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-22-sql-injection 2007-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-crowd/social-crowd-0961-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-video-gallery/all-video-gallery-11-sql-injection 2012-11-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seraphinite-discount-for-woocommerce/seraphinite-bulk-discounts-for-woocommerce-246-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-elements/jetelements-for-elementor-277-authenticated-contributor-stored-cross-site-scripting 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zalo-official-live-chat/zalo-official-live-chat-100-cross-site-request-forgery 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hebrewdates/hebrew-date-210-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pixproof/pixproof-201-missing-authorization 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-258-cross-site-scripting 2013-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hungred-post-thumbnail/hungred-post-thumbnail-219-arbitrary-file-upload 2012-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-jetpack/booster-for-woocommerce-548-reflected-cross-site-scripting-in-general-module 2021-12-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/faq-wd/10webfaq-1014-cross-site-scripting 2016-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geodirectory/geodirectory-2112-authenticated-admin-stored-cross-site-scripting 2021-09-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tf-woo-product-grid/tf-woo-product-grid-addon-for-elementor-101-unauthenticated-php-object-injection 2025-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visitors-traffic-real-time-statistics/visitor-traffic-real-time-statistics-84-unauthenticated-stored-cross-site-scripting 2026-04-03T22:10:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webling/webling-390-authenticated-subscriber-stored-cross-site-scripting-via-title-parameter 2026-04-09T12:32:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-171001-authenticated-contributor-dom-based-stored-cross-site-scripting-via-form-builder-widget 2024-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/order-status-rules-for-woocommerce/scheduled-amp-automatic-order-status-controller-for-woocommerce-371-open-redirect 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/css3_accordions/css3-accordions-for-wordpress-30-missing-authorization 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-membership/simple-membership-471-missing-authorization 2026-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexible-refund-and-return-order-for-woocommerce/flexible-refund-and-return-order-for-woocommerce-1038-missing-authorization-to-authenticated-subscriber-arbitrary-order-refund 2025-10-21T17:57:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sitekit/sitekit-19-authenticated-contributor-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amazon-product-in-a-post-plugin/amazon-product-in-a-post-plugin-353-sql-injection 2015-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-news/google-news-251-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-maps-integration/wp-google-maps-integration-12-reflected-cross-site-scripting-via-page-parameter 2026-05-11T19:06:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scss-library/scss-library-041-cross-site-request-forgery 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mobile-friendly-flickr-slideshow/responsive-flickr-slideshow-260-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-event-planner/simple-event-planner-plugin-154-cross-site-scripting 2022-03-23T10:38:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elink-embed-content/elink-embed-content-110-authenticated-contributor-insufficient-input-validation 2025-08-14T20:11:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yet-another-related-posts-plugin/yarpp-yet-another-related-posts-plugin-5302-authenticated-subscriber-sql-injection-via-shortcode 2023-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wallet-system-for-woocommerce/wallet-system-for-woocommerce-wallet-wallet-cashback-refunds-partial-payment-wallet-restriction-262-missing-authorization 2025-03-03T20:17:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-shipping-multiple-addresses/woocommerce-ship-to-multiple-addresses-385-cross-site-request-forgery 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-550-unauthenticated-account-takeover-via-weak-password-recovery-mechanism 2026-05-08T14:16:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/compact-wp-audio-player/compact-wp-audio-player-197-authenticated-contributor-stored-cross-site-scripting 2022-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rest-api-authentication/wordpress-rest-api-authentication-240-cross-site-request-forgery 2022-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/external-login/external-login-1112-authenticated-subscriber-sensitive-data-exposure-via-test-connection 2025-10-14T19:58:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/icegram/icegram-202-authenticated-stored-cross-site-scripting 2021-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userswp/userswp-1260-authenticated-subscriber-stored-cross-site-scripting-via-user-badge-link-substitution 2026-04-08T14:42:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all_in_one_carousel/all-in-one-slider-1220-reflected-cross-site-scripting 2014-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mihdan-public-post-preview/mihdan-public-post-preview-199-missing-authorization 2022-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-cleanup/image-cleanup-192-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-post-to-social-media-wp-to-social-champ/socialchamp-with-wordpress-135-cross-site-request-forgery-to-plugin-settings-update 2026-01-13T17:28:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revenue/wowrevenue-1213-missing-authorization 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visual-form-builder/visual-form-builder-305-csv-injection 2021-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/emailpress/emailpress-10-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-attachments/wp-attachments-5012-reflected-cross-site-scripting-via-attachment_id-parameter 2025-05-27T19:16:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordfence/wordfence-337-reflected-cross-site-scripting 2012-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-editormd/wp-editormd-the-perfect-wordpress-markdown-editor-1004-cross-site-scripting 2018-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/thegem-elementor/thegem-elementor-5105-authenticated-subscriber-stored-cross-site-scripting 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/6.3/wordpress-core-470-631-denial-of-service-via-cache-poisoning 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-smilies-se/custom-smilies-292-reflected-cross-site-scripting 2025-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-e-commerce-shopping-cart/simple-ecommerce-shopping-cart-plugin-sell-products-through-paypal-312-cross-site-request-forgery 2021-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leaky-paywall/leaky-paywall-4217-authenticated-contributor-stored-cross-site-scripting 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tabs-pro/tab-ultimate-18-authenticated-contributor-stored-cross-site-scripting 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/binary-mlm-plan/binary-mlm-plan-30-unauthenticated-sql-injection 2025-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ari-stream-quiz/ari-stream-quiz-wordpress-quizzes-builder-1226-reflected-cross-site-scripting 2022-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sassy-social-share/social-sharing-plugin-sassy-social-share-3358-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/altra-side-menu/altra-side-menu-20-authenticated-admin-sql-injection 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ymc-states-map/states-map-us-242-authenticated-contributor-stored-cross-site-scripting 2024-12-13T15:48:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-coupon-usage/woocommerce-affiliate-plugin-coupon-affiliates-41101-reflected-cross-site-scripting 2021-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ship-depot/shipdepot-for-woocommerce-1219-missing-authorization 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flo-forms/flo-forms-1040-authenticated-administrator-stored-cross-site-scripting 2023-06-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ht-mega-for-elementor/ht-mega-absolute-addons-for-elementor-252-missing-authorization-to-options-update 2024-05-20T19:51:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-13977-authenticated-contributor-stored-cross-site-scripting 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ameliabooking/appointment-and-event-booking-calendar-amelia-1047-arbitrary-file-upload 2022-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sync-posts/sync-posts-10-authenticated-subscriber-arbitrary-file-upload 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comment-engine-pro/comment-engine-pro-10-authenticated-editor-stored-cross-site-scripting 2021-10-07T10:22:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tax-rate-upload/tax-rate-upload-245-reflected-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tournament-bracket-generator/tournament-bracket-generator-100-authenticated-contributor-stored-cross-site-scripting-via-bracket-shortcode 2025-06-25T13:45:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-vcard-generator/contact-form-vcard-generator-24-missing-authorization-to-unauthenticated-sensitive-information-exposure-via-wp-gvc-cf-download-id-parameter 2026-01-08T21:36:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/grecko/grecko-517-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coblocks/page-builder-gutenberg-blocks-3116-authenticated-contributor-stored-cross-site-scripting-via-external-ical-feed-data 2026-04-17T14:48:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xserver-migrator/xserver-migrator-162-cross-site-request-forgery-to-arbitrary-file-upload 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/countdown-for-the-events-calendar/the-events-calendar-countdown-addon-149-authenticated-contributor-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-responsive-thumbnail-slider/thumbnail-carousel-slider-10-cross-site-request-forgery-to-mass-slider-deletion 2023-10-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-template-customizer-for-woo/email-template-customizer-for-woocommerce-1217-authenticated-shop-manager-stored-cross-site-scripting 2025-09-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/about-rentals/about-rentals-15-missing-authorization 2022-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/indeed-membership-pro/indeed-membership-pro-137-missing-authorization 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-shortcode-sidebars/custom-shortcode-sidebars-12-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elements-plus/elements-plus-2164-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets 2025-09-10T18:55:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/perfect-portal-widgets/perfect-portal-widgets-303-authenticated-contributor-stored-cross-site-scripting 2025-01-10T19:03:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qi-blocks/qi-blocks-129-authenticated-author-stored-cross-site-scripting 2024-06-05T20:11:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seraphinite-accelerator-ext/seraphinite-accelerator-premium-22113-cross-site-request-forgery-to-arbitrary-file-deletion 2024-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shorten-url/short-url-168-authenticated-subscriber-sql-injection 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bit-integrations/bit-integrations-287-unauthenticated-server-side-request-forgery-via-form-field-upload-mapping 2026-06-18T15:58:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usc-e-shop/welcart-e-commerce-2610-284-information-disclosure-via-arbitrary-file-read 2022-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qr-code-tag/qr-code-tag-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/church-management/wpchurch-270-reflected-cross-site-scripting 2025-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/currency-switcher/wpcs-wordpress-currency-switcher-professional-119-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fulltext-search/wp-fast-total-search-168232-missing-authorization 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/viral-loops-wp-integration/viral-loops-wp-integration-381-unauthenticated-sensitive-information-disclosure 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/camptix/camptix-event-ticketing-15-cross-site-scripting 2016-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-464-authenticated-contributor-privilege-escalation 2021-05-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-abstracts-manuscripts-manager/abstracts-274-unauthenticated-local-file-inclusion 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-dropshipping/woocommerce-dropshipping-premium-43-unauthenticated-sql-injection 2022-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mystickymenu/my-sticky-bar-266-cross-site-request-forgery-to-sensitive-information-exposure 2024-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bidorbuystoreintegrator/bidorbuy-store-integrator-2120-authenticated-admin-remote-code-execution 2025-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dwt-listing/dwt-directory-listing-wordpress-theme-334-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vite-coupon/vite-coupon-109-cross-site-request-forgery-to-remote-code-execution 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lana-downloads-manager/lana-downloads-manager-1100-authenticated-administrator-stored-cross-site-scripting 2025-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/open-social/wp-open-social-50-authenticated-administrator-stored-cross-site-scripting 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gslideshow/gslideshow-01-cross-site-request-forgery 2014-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/terms-descriptions/terms-descriptions-349-authenticated-administrator-stored-cross-site-scripting 2026-01-10T14:56:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/injection-guard/injection-guard-127-reflected-cross-site-scripting 2025-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bcs-bertline-book-importer/bcs-batchline-book-importer-157-arbitrary-product-importupdate 2021-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/menubar/menubar-582-cross-site-request-forgery-in-wpm-adminphp 2023-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wd-facebook-feed/10web-social-post-feed-129-reflected-cross-site-scripting 2024-10-24T18:29:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flog/flog-01-cross-site-scripting 2014-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordable/wordable-311-authentication-bypass 2020-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forminator/forminator-forms-contact-form-payment-form-custom-form-builder-1351-missing-authorization-to-authenticated-contributor-form-update-and-creation 2024-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/display-medium-posts/display-medium-posts-501-authenticated-contributor-stored-cross-site-scripting-via-display_medium_posts-shortcode 2024-10-03T13:32:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/strux/strux-19-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/split-test-for-elementor/split-test-for-elementor-169-cross-site-request-forgery 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-better-messages/better-messages-chat-rooms-group-chat-private-messages-ai-chat-bots-21416-unauthenticated-insecure-direct-object-reference 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/autoptimize/autoptimize-283-stored-cross-site-scripting 2021-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-with-salesforce/login-with-salesforce-102-authentication-bypass 2026-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/swape/swape-app-showcase-app-store-wordpress-theme-121-missing-authorization-to-arbitrary-options-update 2018-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-banner/simple-banner-303-authenticated-administrator-stored-cross-site-scripting 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-contact-form-288-stored-cross-site-scripting 2014-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-pug/hubbub-lite-1343-authenticated-admin-stored-cross-site-scripting 2025-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/which-template-file/which-template-file-500-unauthenticated-cross-site-scripting 2023-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedpress/embedpress-398-missing-authorization-via-handle_calendly_data 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ays-chatgpt-assistant/ai-chatbot-with-chatgpt-and-content-generator-by-ays-270-missing-authorization-to-unauthenticated-media-file-uploads 2025-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/microsoft-advertising-universal-event-tracking-uet/microsoft-advertising-universal-event-tracking-uet-103-authenticated-stored-cross-site-scripting 2022-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themehunk-megamenu-plus/easy-mega-menu-plugin-for-wordpress-themehunk-109-missing-authorization-to-authenticated-subscriber-settings-updates 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restropress/restropress-online-food-ordering-system-3121-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-engine/ai-engine-295-missing-authorization-to-unauthenticated-uploaded-files-disclosure-and-deletion 2025-09-03T07:55:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tumult-hype-animations/tumult-hype-animations-1915-authenticated-author-arbitrary-file-upload-via-hypeanimations_panel-function 2024-11-27T20:52:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pixelines-email-protector/pixelines-email-protector-138-authenticated-admin-stored-cross-site-scripting 2025-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/backuply/backuply-backup-restore-migrate-and-clone-127-authenticated-admin-directory-traversal 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/philantro/philantro-donations-and-donor-management-53-authenticated-contributor-stored-cross-site-scripting-via-donate-shortcode 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rara-one-click-demo-import/rara-one-click-demo-import-129-cross-site-request-forgery-to-arbitrary-file-upload 2022-04-21T13:36:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pizzahouse/pizza-house-140-unauthenticated-php-object-injection 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/speakout/speakout-email-petitions-21311-cross-site-scripting 2021-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-204-denial-of-service 2006-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youtube-showcase/video-gallery-403-authenticated-subscriber-arbitrary-function-call-via-path-parameter 2026-06-30T15:01:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cp-multi-view-calendar/cp-multi-view-events-calendar-1434-authenticated-subscriber-stored-cross-site-scripting 2026-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementskit-lite/elementskit-elementor-addons-305-authenticated-contributor-stored-cross-site-scripting-via-image-accordion-widget 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gigpress/gigpress-2310-reflected-cross-site-scripting 2015-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sala/sala-113-missing-authorization 2025-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wte-elementor-widgets/wp-travel-engine-elementor-widgets-create-travel-booking-website-using-wordpress-and-elementor-137-authenticated-contributor-local-file-inclusion 2024-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xo-liteslider/xo-slider-386-authenticated-contributor-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bib2html/bib2html-093-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aiomatic-automatic-ai-content-writer/aiomatic-automatic-ai-content-writer-205-unauthenticated-arbitrary-email-sending 2024-06-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/checkout-for-paypal/checkout-for-paypal-1046-missing-authorization 2026-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-create-native-android-ios-apps-on-the-cloud-4174-unauthenticated-limited-privilege-escalation 2025-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hyperlink-group-block/hyperlink-group-block-201-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-digital-downloads/easy-digital-downloads-simple-ecommerce-for-selling-digital-files-236-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accurate-form-data-real-time-form-validation/wp-accurate-form-data-12-cross-site-request-forgery-to-cross-site-scripting 2015-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/registrations-for-the-events-calendar/registrations-for-the-events-calendar-2132-authenticated-admin-stored-cross-site-scripting 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/besa/besa-2315-authenticated-contributor-local-file-inclusion 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-folder/media-folder-100-reflected-cross-site-scripting 2025-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/gable/gable-15-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/time-sheets/time-sheets-213-use-of-known-vulnerable-component 2025-12-04T17:30:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usc-e-shop/welcart-e-commerce-153-sql-injection 2015-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bu-slideshow/bu-slideshow-2310-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-addons-for-elementor-addons-and-templates-kit-for-elementor-171052-missing-authorization 2026-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/about-me-3000/about-me-3000-widget-226-authenticated-administrator-stored-cross-site-scripting 2023-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordfence/wordfence-523-multiple-protection-mechanism-bypasses 2014-09-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/terillion-reviews/terillion-reviews-12-stored-cross-site-scripting 2013-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woolementor/codesigner-woocommerce-builder-for-elementor-421-authenticated-author-stored-cross-site-scripting 2025-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formcraft-form-builder/formcraft-1210-missing-authorization 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulgarisation-for-woocommerce/bulgarisation-for-woocommerce-3014-missing-authorization 2024-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-timeline/post-timeline-239-reflected-cross-site-scripting 2024-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spider-contacts/spidercontacts-117-reflected-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buzzsprout-podcasting/buzzsprout-podcasting-184-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ziggeo/ziggeo-31-authenticated-contributor-stored-cross-site-scripting 2025-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/really-simple-ssl/really-simple-security-simple-and-performant-security-formerly-really-simple-ssl-9510-missing-authorization 2026-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress-media/rtmedia-for-wordpress-buddypress-and-bbpress-4614-missing-authorization-to-sensitive-information-exposure 2023-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themeisle-companion/orbit-fox-by-themeisle-21036-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-08-21T20:32:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-pagepost-redirect-plugin/quick-pagepost-redirect-523-authenticated-administrator-stored-cross-site-scripting-via-settings 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/realty/realty-by-bestwebsoft-115-authenticated-contributor-stored-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/optimole-wp/image-optimization-by-optimole-lazy-load-cdn-convert-webp-avif-31210-authenticated-author-stored-cross-site-scripting-via-svg-upload 2024-05-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-mobile-url-redirect/simple-mobile-url-redirect-172-cross-site-request-forgery-leading-to-mobile-redirect-updates 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-activity-log-pro/user-activity-log-pro-234-missing-authorization 2024-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meteor-slides/meteor-slides-157-authenticated-contributor-stored-cross-site-scripting 2025-01-06T16:22:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flickr-slideshow-wrapper/flickr-slideshow-wrapper-546-reflected-cross-site-scripting 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot/chatbot-478-cross-site-request-forgery-via-qc_wp_latest_update_check 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/news-kit-elementor-addons/news-kit-addons-for-elementor-142-missing-authorization 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/hiroshi/hiroshi-151-unauthenticated-php-object-injection 2026-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress-media/rtmedia-for-wordpress-buddypress-and-bbpress-42-arbitary-file-upload 2016-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ekommart/ekommart-431-authenticated-contributor-local-file-inclusion 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vertical-scroll-image-slideshow-gallery/vertical-scroll-image-slideshow-gallery-111-authenticated-contributor-stored-cross-site-scripting-via-width-parameter 2025-07-17T16:29:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-post-kit/ultimate-post-kit-addons-for-elementor-post-grid-post-carousel-post-slider-category-list-post-tabs-timeline-post-ticker-tag-cloud-3117-authenticated-contributor-stored-cross-site-scripting-via-social-count-static-widget 2024-06-27T19:59:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-post/event-post-597-authenticated-contributor-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/element-ready-lite/elementsready-addons-for-elementor-643-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-10-15T21:26:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ht-mega-for-elementor/ht-mega-absolute-addons-for-elementor-page-builder-155-contributor-stored-cross-site-scripting 2021-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/users-to-csv/users-to-csv-145-cross-site-request-forgery 2015-06-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-headline-rotator/simple-headline-rotator-10-cross-site-request-forgery-to-stored-cross-site-scripting 2024-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kattene/kattene-17-authenticated-contributor-stored-cross-site-scripting 2024-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themeisle-companion/orbit-fox-duplicate-page-menu-icons-svg-support-cookie-notice-custom-fonts-more-306-authenticated-administrator-stored-cross-site-scripting-via-menu-item-icon-parameter 2026-06-17T16:48:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cowidgets-elementor-addons/cowidgets-elementor-addons-112-authenticated-contributor-stored-cross-site-scripting-via-heading_tag-parameter 2024-06-03T17:08:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-file-renamer/media-file-renamer-auto-manual-rename-525-missing-authorization-checks 2012-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/design-import-export/design-importexport-22-authenticated-administrator-sql-injection-via-xml-file-import 2025-12-12T14:51:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder/popup-builder-create-highly-converting-mobile-friendly-marketing-popups-441-authenticated-contributor-stored-cross-site-scripting 2025-12-12T19:31:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-552-arbitrary-file-deletion 2020-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quform/quform-wordpress-form-builder-2200-unauthenticated-sensitive-information-exposure 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-social-widget/wp-social-widget-223-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iq-testimonials/iq-testimonials-227-unauthenticated-arbitrary-file-upload 2024-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpjobboard/wpjobboard-564-sql-injection 2020-11-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elastic-email-sender/elastic-email-sender-1220-missing-authorization 2025-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/order-audit-log-for-woocommerce/order-audit-log-for-woocommerce-20-reflected-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-optimizer/wp-optimizer-236-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-map-plugin/wp-maps-easiest-most-advanced-wordpress-plugin-for-google-maps-423-cross-site-request-forgery 2022-02-22T14:59:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-seo/wp-meta-seo-4518-unauthenticated-stored-cross-site-scripting-via-request_uri-in-404-logging 2026-06-23T16:46:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-thickbox-plus/auto-thickbox-plus-19-reflected-cross-site-scripting 2015-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-mailchimp-extension/contact-form-7-extension-for-mailchimp-0570-authenticated-subscriber-server-side-request-forgery 2024-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sp-client-document-manager/sp-project-document-manager-425-reflected-cross-site-scripting 2021-08-16T16:45:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/conquerors/conquerors-american-football-nfl-psd-template-1213-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-best-elementor-templates-widgets-kits-woocommerce-builders-5920-authenticated-contributor-stored-cross-site-scripting 2024-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brandfolder/brandfolder-5019-authenticated-contributor-stored-cross-site-scripting-via-id-parameter 2025-07-15T18:16:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stackable-ultimate-gutenberg-blocks/stackable-page-builder-gutenberg-blocks-31311-authenticated-contributor-stored-cross-site-scripting 2025-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-downloadmanager/wp-downloadmanager-plugin-1686-stored-cross-site-scripting 2022-01-12T13:42:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-video-gallery/all-in-one-video-gallery-464-missing-authorization-to-unauthenticated-bunny-stream-video-creationdeletion 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-extender-for-divi-builder/contact-form-extender-for-divi-submissions-db-extra-fields-106-unauthenticated-arbitrary-file-deletion 2026-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/posts-filter/posts-filter-131-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ulike/wp-ulike-4831-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-log-deletion-via-id-parameter 2026-02-02T14:51:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-tripadvisor-review-slider/wp-tripadvisor-review-slider-118-authenticated-admin-stored-cross-site-scripting 2023-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gd-bbpress-tools/gd-bbpress-tools-353-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-grid/the-grid-280-authenticated-subscriber-stored-cross-site-scripting 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instagrate-to-wordpress/intagrate-lite-137-authenticated-admin-stored-cross-site-scripting 2024-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cookie-notice-and-consent-banner/cookie-notice-amp-consent-banner-for-gdpr-amp-ccpa-compliance-1711-authenticated-contributor-stored-cross-site-scripting 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/miraculous/miraculous-209-missing-authorization-to-unauthenticated-arbitrary-content-deletion 2025-09-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tags-to-meta-keywords/tags-to-keywords-101-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/infility-global/infility-global-21449-unauthenticated-sql-injection 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-coming-soon-page/coming-soon-163-unauthenticated-information-exposure 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-jetpack/booster-for-woocommerce-370-cross-site-scripting 2018-07-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/floating-social-buttons/floating-social-buttons-15-cross-site-request-forgery 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpc-badge-management/wpc-badge-management-for-woocommerce-316-authenticated-shop-manager-stored-cross-site-scripting-via-text-attribute 2026-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/payu-india/payu-commercepro-plugin-383-unauthenticated-privilege-escalation 2025-01-06T16:09:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eu-vat-for-woocommerce/euuk-vat-manager-for-woocommerce-21214-reflected-cross-site-scripting 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/civi/civi-job-board-freelance-marketplace-wordpress-theme-2161-authentication-bypass 2025-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-members/wp-members-membership-3473-missing-authorization-to-settings-update 2023-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/goldstar/goldstar-211-missing-authorization 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpglobus-translate-options/wpglobus-translate-options-210-reflected-cross-site-scripting-via-page 2023-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hd-quiz-save-results-light/hd-quiz-save-results-light-05-missing-authorization 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-library/link-library-76-reflected-cross-site-scripting 2024-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-webmaster/wp-webmaster-824-cross-site-request-forgery 2013-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-database-backup/wp-database-backup-511-cross-site-scripting 2019-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/falang/falang-multilanguage-for-wordpress-142-authenticated-subscriber-privilege-escalation 2026-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videospirecore/videospirecore-theme-plugin-106-authenticated-subscriber-privilege-escalation-via-user-email-changeaccount-takeover 2026-02-10T21:29:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-218-missing-authorization-via-multiple-ajax-actions 2023-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mail-log/wp-mail-log-112-incorrect-authorization-to-authenticated-contributor-data-viewing-and-deletion 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/funnel-builder/funnel-builder-for-wordpress-by-funnelkit-2143-authenticatedadministrator-sql-injection 2023-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/candifly/candifly-106-authenticated-contributor-stored-cross-site-scripting 2025-01-06T16:22:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/permalinks-customizer/permalinks-customizer-282-cross-site-request-forgery-via-post_settings 2023-10-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/fish-house/fish-house-127-unauthenticated-php-object-injection 2025-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-last-changes/list-last-changes-121-authenticated-contributor-stored-cross-site-scripting 2025-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration-stripe/user-registration-stripe-1312-missing-authorization 2026-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpvivid-backuprestore/wpvivid-backup-migration-plugin-0999-authenticated-admin-phar-deserialization 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-calendar/booking-calendar-wpdevart-3219-authenticated-contributor-sql-injection 2024-12-23T21:34:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/laposta-woocommerce/laposta-woocommerce-191-authenticated-administrator-stored-cross-site-scripting 2025-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vr-calendar-sync/vr-calendar-231-unauthenticated-remote-code-execution 2022-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/membership-for-woocommerce/membership-for-woocommerce-290-missing-authorization 2025-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-category-meta/category-meta-128-cross-site-request-forgery 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/full-screen-page-background-image-slideshow/full-screen-page-background-image-slideshow-11-authenticated-administrator-stored-cross-site-scripting 2024-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-appointment-booking/smart-appointment-booking-107-authenticated-subscriber-stored-cross-site-scripting-via-saab_save_form_data-ajax-action 2026-02-03T19:43:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/edd-commissions/easy-digital-downloads-commissions-312-reflected-cross-site-scripting 2019-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-product-feed-manager/woocommerce-google-feed-manager-220-authenticated-shop-manager-stored-cross-site-scripting 2024-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/tinysalt/tinysalt-3100-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/formula/formula-051-reflected-cross-site-scripting-via-quality_customizer_notify_dismiss_action 2024-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mail-options/wp-mail-options-023-cross-site-request-forgery-to-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-tournament-registration/wp-tournament-registration-130-authenticated-contributor-stored-cross-site-scripting-via-field-parameter 2025-08-05T13:00:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clickwhale/clickwhale-link-manager-link-shortener-and-click-tracker-for-affiliate-links-link-pages-241-authenticated-contributor-stored-cross-site-scripting 2025-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dzs-videogallery/dzs-video-gallery-1239-unauthenticated-php-object-injection 2025-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-slider-and-carousel-with-category/product-slider-and-carousel-with-category-for-woocommerce-271-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-1513-sensitive-information-disclosure 2005-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailin/newsletter-smtp-email-marketing-and-subscribe-forms-by-brevo-formely-sendinblue-3177-reflected-cross-site-scripting 2024-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-expand-tabs-free/wp-tabs-2116-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/knight-lab-timelinejs/timelinejs3-370-stored-cross-site-scripting 2020-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dc-woocommerce-multi-vendor/multivendorx-the-ultimate-woocommerce-multivendor-marketplace-solution-4219-missing-authorization-to-unauthenticated-table-rates-deletion 2025-04-04T16:21:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/horizontal-scrolling-announcement/horizontal-scrolling-announcement-92-authenticated-subscriber-sql-injection-via-shortcode 2023-09-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/market-exporter/market-exporter-2022-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-319-authenticated-administrator-remote-code-execution 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seraphinite-accelerator/seraphinite-accelerator-22814-authenticated-subscriber-exposure-of-sensitive-information-to-an-unauthorized-actor 2026-03-03T22:00:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trackserver/trackserver-510-authenticated-contributor-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/app-builder/app-builder-557-missing-authorization 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-tricks/jettricks-1541-authenticated-contributor-stored-cross-site-scripting 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cyberus-key/cyberus-key-10-authenticated-administrator-stored-cross-site-scripting-via-uid-in-cyberkey_settings-plugin-setting 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ads-for-wp/google-adsense-banner-ads-by-adsforwp-16-cross-site-scripting 2019-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/goodnex/goodnex-responsive-html5css3-site-template-113-sensitive-information-disclosure 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admire-extra/admire-extra-16-authenticated-contributor-stored-cross-site-scripting 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youtube-simple-gallery/youtube-simple-gallery-220-authenticated-contributor-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oliver-pos/oliver-pos-a-woocommerce-point-of-sale-pos-2423-sensitive-information-exposure-to-privilege-escalation 2025-02-14T19:04:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-crypto-currency-payment/multi-cryptocurrency-payments-203-unauthenticated-sql-injection 2025-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-gdpr/wordpress-gdpr-202-unauthenticated-stored-cross-site-scripting 2024-11-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-cf7-db/advanced-contact-form-7-db-160-sql-injection 2019-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meeting-scheduler-by-vcita/online-booking-scheduling-calendar-for-wordpress-by-vcita-455-missing-authorization 2025-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-conversion-tracking/woocommerce-conversion-tracking-2011-missing-authorization 2024-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-users-from-csv-with-meta/import-and-export-users-and-customers-1268-unauthenticated-information-exposure 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcodes-ultimate/wp-shortcodes-plugin-shortcodes-ultimate-712-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-search-lite/ajax-search-lite-4133-authenticated-administrator-php-object-injection 2025-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-and-page-builder/post-and-page-builder-by-boldgrid-visual-drag-and-drop-editor-1241-cross-site-request-forgery-via-submitdefaulteditor 2023-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/validated/validated-102-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gd-star-rating/gd-star-rating-1917-cross-site-scripting 2012-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lbg_zoominoutslider/lbg-zoominoutslider-544-authenticated-contributor-sql-injection 2025-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bepro-listings/bepro-listings-220020-unauthenticated-arbitrary-file-upload 2016-07-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tree-website-map/tree-sitemap-pages-posts-categories-list-29-missing-authorization-to-arbitrary-plugin-installationactivation 2021-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-276-user-registration-setting-bypass-to-unauthorized-user-registration 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-free-widgets-addons-templates-15121-authenticated-editor-remote-code-execution 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/wordpress-download-manager-2949-reflected-cross-site-scripting 2017-06-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/so-widgets-bundle/siteorigin-widgets-bundle-1704-missing-authorization-to-authenticated-subscriber-arbitrary-shortcode-execution 2026-02-17T20:23:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-post-view-generator/custom-post-view-generator-046-reflected-cross-site-scripting 2021-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/terms-before-download/terms-before-download-104-authenticated-contributor-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-1830-authenticated-administrator-stored-cross-site-scripting 2024-11-04T21:24:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lastudio-element-kit/la-studio-element-kit-for-elementor-1392-authenticated-contributor-stored-cross-site-scripting 2024-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clover-online-orders/smart-online-order-for-clover-155-authenticated-contributor-stored-cross-site-scripting 2024-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spoki/spoki-2160-authenticated-administrator-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-mcp/royal-mcp-secure-ai-connector-for-claude-chatgpt-gemini-1425-missing-authorization 2026-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exit-intent-popups-by-optimonk/exit-popups-onsite-retargeting-by-optimonk-204-cross-site-request-forgery 2023-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vendor/trustedlogin-vendor-111-unauthenticated-information-disclosure 2024-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-type-modifier-simple/add-custom-post-type-into-post-query-103-reflected-cross-site-scripting 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kali-forms/contact-form-builder-with-drag-drop-kali-forms-2327-missing-authorization-via-contact-form 2023-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/godaddy-email-marketing-sign-up-forms/godaddy-email-marketing-114-cross-site-request-forgery 2016-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-syndication-toolkit-reader/content-syndication-toolkit-reader-15-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-support/awesome-support-wordpress-helpdesk-support-plugin-617-missing-authorization-via-wpas_get_users 2024-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpxmas-snow/wpxmas-snow-11-missing-authorization 2026-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tp-education/tp-education-44-authenticated-contributor-stored-cross-site-scripting-via-shortcodes 2023-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-registration-form-builder-with-submission-manager/registrationmagic-5205-authenticated-admin-insecure-direct-object-reference-to-arbitrary-user-password-change 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/upc-ean-barcode-generator/upceangtin-code-generator-202-authenticated-subscriber-arbitrary-file-deletion 2025-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formidable-registration/formidable-registration-211-authenticated-contributor-arbitrary-user-password-reset-to-account-takeover 2024-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/flatsome/flatsome-3175-unauthenticated-php-object-injection 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-pack-addon/the-pack-elementor-addons-2088-authenticated-author-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wplms/wplms-19952-authenticated-instructor-arbitrary-file-upload 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-restaurant-menu/quick-restaurant-menu-202-cross-site-request-forgery 2023-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mage-eventpress/event-manager-for-woocommerce-425-authenticated-contributor-stored-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-523-stored-cross-site-scripting-via-comments 2019-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/interactive-geo-maps/mapgeo-interactive-geo-maps-1627-reflected-cross-site-scripting-via-map-parameter 2026-05-13T17:15:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ar-vr-3d-model-try-on/3d-viewer-201-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-settings-modification-via-settings-rest-endpoint 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popupally/popupally-211-authenticated-admin-stored-cross-site-scripting 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/health-check/health-check-troubleshooting-123-cross-site-request-forgery 2019-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/perfect-survey/perfect-survey-151-unauthenticated-sql-injection 2021-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-live-chat-support-pro/wp-live-chat-support-pro-8006-remote-code-execution-via-unrestricted-file-upload 2019-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/z-inventory-manager/plaininventory-319-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/piotnetforms/piotnet-forms-1030-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-700-arbitrary-file-upload 2020-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mon/wp-mon-051-arbitrary-file-download 2015-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-catalog-enquiry/wc-catalog-enquiry-305-arbitrary-file-upload 2017-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dejureorg-vernetzungsfunktion/dejureorg-vernetzungsfunktion-1975-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-11T15:17:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-downloadmanager/wp-downloadmanager-1684-server-side-request-forgery 2021-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-appointments/easy-appointments-3110-authenticated-administrator-stored-cross-site-scripting 2023-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluent-community/fluentcommunity-1215-unauthenticated-php-object-injection 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webappick-pdf-invoice-for-woocommerce/challan-3758-cross-site-request-forgery-to-arbitrary-options-update 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-login-redirect/custom-login-redirect-100-cross-site-request-forgery-to-stored-cross-site-scripting 2021-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/book-a-room/book-a-room-29-cross-site-request-forgery-to-settings-update 2025-02-11T21:10:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-whatsapp-chat/wp-social-chat-click-to-chat-app-604-administrator-stored-cross-site-scripting 2022-07-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/artplacer-widget/artplacer-widget-2206-authenticated-editor-sql-injection 2023-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bsk-gravityforms-blacklist/bsk-forms-blacklist-39-cross-site-request-forgery 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-url-shorter/custom-url-shortener-036-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wplms/wplms-19952-authenticated-contributor-arbitrary-file-upload 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/worker/managewp-worker-4931-unauthenticated-stored-cross-site-scripting 2026-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Avada/avada-7111-missing-authorization 2023-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/per-page-add-to/per-page-add-to-head-143-cross-site-request-forgery-to-stored-cross-site-scripting 2021-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/row-seats/row-seats-core-268-php-object-injection 2017-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/drop-in-image-slideshow-gallery/drop-in-image-slideshow-gallery-120-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-addons-for-elementor/elementor-ai-addons-70-widgets-premium-templates-ultimate-elements-221-authenticated-contributor-private-templates-content-disclosure 2025-01-06T16:08:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-best-elementor-templates-widgets-kits-woocommerce-builders-594-authenticated-contributor-stored-cross-site-scritping 2024-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventON/eventon-pro-499-missing-authorization 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sikshya/learning-management-system-elearning-course-builder-wordpress-lms-plugin-sikshya-lms-0021-reflected-cross-site-scripting-via-page-parameter 2024-12-16T21:00:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/limb-gallery/wordpress-gallery-plugin-limb-image-gallery-157-authenticated-subscriber-arbitrary-file-download 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/music-let-loose-mp3-audio-player/mll-audio-player-mp3-ajax-07-authenticated-subscriber-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vikrentcar/vikrentcar-car-rental-management-system-132-information-exposure 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-auction/ultimate-wordpress-auction-plugin-101-cross-site-request-forgery 2013-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Divi/divi-4202-authenticated-contributor-stored-cross-site-scripting 2023-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-subscriptions/woocommerce-subscriptions-580-missing-authorization 2024-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-smart-compare/wpc-smart-compare-for-woocommerce-647-authenticated-contributor-dom-based-stored-cross-site-scripting 2025-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pgall-for-woocommerce/-556-unauthenticated-sql-injection 2026-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spin-wheel/spin-wheel-210-unauthenticated-client-side-prize-manipulation-via-prize_index-parameter 2026-01-16T18:09:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpschoolpress/school-management-system-wpschoolpress-2214-authenticated-studentparent-sql-injection 2025-01-06T16:09:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zapier/zapier-for-wordpress-152-missing-authorization 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slider-templates/slider-templates-103-authenticated-subscriber-server-side-request-forgery 2025-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/edd-download-info/edd-download-info-11-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-01-06T20:33:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-addons/master-addons-for-elementor-2062-authenticated-author-stored-cross-site-scripting 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rest-api-authentication/wordpress-rest-api-authentication-363-missing-authorization-to-authenticated-subscriber-limited-options-update 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-1322-authenticated-admin-stored-cross-site-scripting-via-facebook-app-id 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meeting-scheduler-by-vcita/appointment-booking-and-online-scheduling-442-missing-authorization-to-unauthenticated-stored-cross-site-scripting 2024-06-21T12:35:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shareyourcart/shareyourcart-171-sensitive-information-disclosure 2012-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contus-video-gallery/wordpress-video-gallery-27-sql-injection 2015-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chameleon-css/chameleon-css-12-cross-site-request-forgery 2021-10-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/persuasion/persuasion-24-arbitrary-file-download 2013-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-pagebuilder/wp-page-builder-123-multiple-stored-cross-site-scripting 2021-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-checkout-getnet/plugin-oficial-getnet-para-woocommerce-180-reflected-cross-site-scripting 2025-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-user-profiles-memberships-groups-and-communities-583-missing-authorization 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clickwhale/clickwhale-243-cross-site-request-forgery 2025-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userheat/userheat-plugin-1110-cross-site-request-forgery 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/canto/canto-190-blind-server-side-request-forgery-via-treephp 2020-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-550-unauthenticated-stored-cross-site-scripting-via-booking_form_page_url-parameter 2026-05-05T18:41:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/hillter/hillter-307-authenticated-subscriber-php-object-injection 2025-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shopperapproved-reviews/shopper-approved-reviews-20-21-missing-authorization-to-authenticated-subscriber-arbitrary-options-update 2025-04-01T20:28:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sunshine-photo-cart/sunshine-photo-cart-2828-cross-site-request-forgery-bypass 2021-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-bulk-editor/bear-1133-cross-site-request-forgery-to-profile-deletion 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/find-and-replace-content/find-and-replace-content-for-wordpress-11-missing-authorization-to-unauthenticated-stored-cross-site-scripting 2025-10-14T20:02:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pricing-tables-for-wpbakery-page-builder/pricing-tables-for-wpbakery-page-builder-formerly-visual-composer-20-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-calendar-events/google-calendar-events-327-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-5194-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-09-29T16:24:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2050-authenticated-contributor-stored-cross-site-scripting 2024-06-04T19:06:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/overstock-affiliate-links/overstock-affiliate-links-11-reflected-cross-site-scripting-via-_serverphp_self 2025-12-19T15:07:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-content-copy-protector/wp-copy-protection-no-right-click-314-missing-authorization-to-arbitrary-plugin-installationactivation 2021-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mmm-file-list/mmm-simple-file-list-23-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/universam-demo/universam-87234-unauthenticated-php-object-injection 2025-07-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flipping-cards/flipping-cards-130-authenticated-administrator-stored-cross-site-scripting 2024-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-elementor-page-builder/the-plus-addons-for-elementor-page-builder-lite-554-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sri/subresource-integrity-sri-manager-040-missing-authorization 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-file-size/media-library-file-size-167-missing-authorization 2026-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/surferseo/surfer-132357-missing-authorization 2023-09-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ti-woocommerce-wishlist/ti-woocommerce-wishlist-2100-authenticated-contributor-stored-cross-site-scripting 2025-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-photonav/wp-photonav-122-authenticated-contributor-stored-cross-site-scripting-via-photonav-shortcode 2025-06-25T13:51:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zigaform-form-builder-lite/zigaform-form-builder-lite-742-unauthenticated-stored-cross-site-scripting 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-counter/social-counter-205-authenticated-administrator-php-object-injection 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/enfold/enfold-responsive-multi-purpose-theme-484-reflected-cross-site-scripting 2021-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/news-kit-elementor-addons/news-kit-elementor-addons-136-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-224-authenticated-subscriber-arbitrary-file-upload 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/adforest/adforest-609-authentication-bypass-to-admin 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lgpd-compliant-cookie-banner/illow-cookies-consent-020-cross-site-request-forgery 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jetformbuilder/jetformbuilder-353-missing-authorization-to-unauthenticated-form-generation 2025-12-15T18:47:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-xml-feed/import-xml-and-rss-feeds-214-unauthenticated-remote-code-execution 2023-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-permalinks-cascade/the-permalinks-cascade-22-missing-authorization-to-authenticated-subscriber-plugin-settings-update 2025-11-17T20:12:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/risk-free-cash-on-delivery-cod-woocommerce/risk-free-cash-on-delivery-cod-woocommerce-104-authenticated-administrator-stored-cross-site-scripting 2025-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forumwp/forumwp-214-missing-authorization 2025-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-from-frontend/post-from-frontend-100-cross-site-request-forgery-to-arbitrary-post-deletion 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/notificationx/notificationx-fomo-live-sales-notification-woocommerce-sales-popup-gdpr-social-proof-announcement-banner-floating-notification-bar-321-missing-authorization 2026-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wedevs-project-manager/wp-project-manager-2631-authenticated-project-manager-sql-injection 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpglobus/wpglobus-multilingual-everything-196-cross-site-scripting-via-wpglobus_optionbrowser_redirectredirect_by_language 2018-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-comments-extension/mainwp-comments-extension-406-missing-authorization 2023-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pure-css-circle-progress-bar/pure-css-circle-progress-bar-12-authenticated-contributor-stored-cross-site-scripting 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rss-feed-post-generator-echo/echo-rss-feed-post-generator-546-unauthenticated-privilege-escalation 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-manager-resumes/wp-job-manager-resume-manager-210-cross-site-request-forgery 2024-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-css3-related-posts-widget/related-posts-widget-with-thumbnails-12-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-for-geodirectory/events-calendar-for-geodirectory-2314-authenticated-contributor-php-object-injection 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/faq-builder-ays/faq-builder-ays-135-blind-sql-injection 2021-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nari-accountant/nari-accountant-1012-authenticated-editor-stored-cross-site-scripting 2025-11-03T15:32:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/signup-signin/signup-signin-100-unauthenticated-privilege-escalation-via-weak-password-reset-validation-via-reset_activation_code-leading-to-account-takeover 2026-06-23T16:37:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uncode-core/uncode-core-2916-authenticated-subscriber-arbitrary-shortcode-execution-in-uncode_get_medias 2025-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gd-rating-system/gd-rating-system-350-unauthenticated-stored-cross-site-scripting-via-ip 2024-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/drop-shadow-boxes/drop-shadow-boxes-1713-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leopard-wordpress-offload-media/leopard-311-missing-authorization-to-authenticated-subscriber-arbitrary-options-update 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-jetpack/booster-for-woocommerce-716-authenticated-contributor-stored-cross-site-scripting 2024-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flower-delivery-by-florist-one/flower-delivery-by-florist-one-358-admin-stored-cross-site-scripting 2022-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-351-denial-of-service-via-wp-postpass-cookie 2013-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/delicious-recipes/wp-delicious-187-authenticated-contributor-stored-cross-site-scripting 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-paypal-add-on/contact-form-7-paypal-stripe-add-on-193-cross-site-request-forgery 2023-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-271-authenticated-admin-path-traversal 2024-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bazinga/bazinga-119-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/userfeedback-lite/user-feedback-1100-authenticated-editor-sql-injection 2025-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newspack-blocks/newspack-blocks-308-missing-authorization 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kivicare-clinic-management-system/kivicare-320-reflected-cross-site-scripting-via-filtertype 2023-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/upi-qr-code-payment-for-woocommerce/upi-qr-code-payment-gateway-for-woocommerce-151-missing-authorization 2026-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/one-click-login-as-user/login-as-user-103-authenticated-subscriber-privilege-escalation-via-oclaup_original_admin-cookie 2026-04-14T19:44:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hmh-footer-builder-for-elementor/hmh-footer-builder-for-elementor-10-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-table-editor/table-editor-164-cross-site-request-forgery 2025-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup4phone/popup4phone-132-unauthenticated-stored-cross-site-scripting 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kento-post-view-counter/kento-post-view-counter-28-cross-site-request-forgery 2016-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/athemes-starter-sites/athemes-starter-sites-1053-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-07-26T21:43:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/appsero-helper/appsero-helper-132-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aa-audio-player/aa-audio-player-10-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-scroll-to-id/page-scroll-to-id-178-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-rollback/rollback-123-cross-site-request-forgery 2015-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-social-media-icons/social-media-share-buttons-social-sharing-icons-11112-authenticated-stored-cross-site-scripting 2015-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-appointments/easy-appointments-31118-insufficient-authorization 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-google-sheets-connector/cf7-google-sheets-connector-509-missing-authorization-to-limited-site-configuration-update 2024-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/business-profile/five-star-business-profile-and-schema-216-subscriber-page-creation-settings-update-to-stored-cross-site-scripting 2022-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/publish-2-pingfm/publish-2-pingfm-11-cross-site-request-forgery-to-stored-cross-site-scripting-via-wppingpingkey-parameter 2026-05-04T14:07:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spice-post-slider/carousel-recent-post-slider-and-banner-slider-20-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maintenance/maintenance-402-authenticated-stored-cross-site-scripting 2021-07-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpadcenter/wp-adcenter-260-authenticated-contributor-stored-cross-site-scripting 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-box/popup-box-212-authenticated-local-file-inclusion 2022-05-17T11:20:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-seo/yoast-seo-202-authenticated-contributor-stored-cross-site-scripting 2023-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formidable/formidable-form-builder-20503-reflected-cross-site-scripting 2017-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/any-news-ticker/any-news-ticker-311-authenticated-contributor-stored-cross-site-scripting 2025-09-29T15:27:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instawp-connect/instawp-connect-01082-unauthenticated-local-file-inclusion 2025-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-csv-importer/easy-drag-and-drop-all-import-wp-ultimate-csv-importer-56-cross-site-request-forgery 2019-08-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/saasplate-core/saasplate-core-128-unauthenticated-sql-injection 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluent-booking/fluent-booking-the-ultimate-appointments-scheduling-events-booking-events-calendar-solution-210-authenticated-contributor-stored-cross-site-scripting 2026-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/homey/homey-booking-and-rentals-wordpress-theme-244-missing-authorization-to-authenticated-subscriber-arbitrary-reservation-post-deletion 2025-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-slide-categorywise/wp-slide-categorywise-11-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ycyclista/ycyclista-123-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/password-protect-page/ppwp-wordpress-password-protect-page-185-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcasa/wpcasa-141-unauthenticated-code-injection 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tournamatch/wordpress-plugin-tournamatch-461-authenticated-subscriber-stored-cross-site-scripting 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tiny-bootstrap-elements-light/tiny-bootstrap-elements-light-4334-unauthenticated-local-file-inclusion 2025-09-29T15:27:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dw-promobar/dw-promobar-104-authenticated-admin-stored-cross-site-scripting 2022-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woolentor-addons/woolentor-253-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/armember-membership/armember-lite-membership-plugin-4016-authenticated-administrator-stored-cross-site-scripting 2023-07-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cm-invitation-codes/cm-registration-tailored-tool-for-seamless-login-and-invitation-based-registrations-256-open-redirect 2025-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedpress/embedpress-373-sensitive-information-exposure 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ablocks/ablocks-wordpress-gutenberg-blocks-240-missing-authorization-to-authenticated-subscriber-settings-modification 2026-01-06T19:05:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/beauty/beauty-114-authenticated-subscriber-stored-cross-site-scripting-via-tpl_featured_cat_id-parameter 2024-09-12T21:28:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-takeover/page-takeover-116-authenticated-administrator-stored-cross-site-scripting 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/atomchat/atomchat-115-authenticated-contributor-stored-cross-site-scripting-via-atomchat-shortcode 2024-10-31T20:30:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inpost-gallery/inpost-gallery-2145-authenticated-subscriber-local-file-inclusion 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-backup-to-dropbox/wordpress-backup-to-dropbox-41-reflected-cross-site-scripting 2014-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/graceful-email-obfuscation/graceful-email-obfuscation-022-authenticated-contributor-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wish-list-for-woocommerce/wishlist-for-woocommerce-multi-wishlists-per-customer-317-cross-site-request-forgery-to-cross-site-scriping-via-wishlist-name 2025-03-07T14:14:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mortgage-loan-calculator/mortgage-calculator-loan-calculator-1517-cross-site-scripting 2021-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tourmaster/tourmaster-538-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/autolinks/autolinks-101-cross-site-request-forgery-to-cross-site-scripting 2022-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-login-and-registration-modal-popup/ajax-login-and-registration-modal-popup-inline-form-224-reflected-cross-site-scripting 2024-11-12T13:26:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wppopupmagic/wp-popup-magic-100-authenticated-contributor-stored-cross-site-scripting-via-name-shortcode-attribute 2026-01-08T21:19:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-submissions/cf7-submissions-026-missing-authorization 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/file-gallery/file-gallery-1853-authenticated-contributor-stored-cross-site-scripting-via-file_gallery_shortcode 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thrive-apprentice/thrive-apprentice-108102-unauthenticated-php-object-injection 2026-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tplayer-html5-audio-player-with-playlist/tplayer-1216-unauthenticated-sql-injection 2025-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stax-addons-for-elementor/elementor-addons-widgets-and-enhancements-stax-143-cross-site-request-forgery-via-toggle_widget 2023-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-coming-soon/easy-coming-soon-182-cross-site-request-forgery-to-stored-cross-site-scripting 2015-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multiple-location-google-map/multiple-location-google-map-11-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webo-facto-connector/webo-facto-140-unauthenticated-privilege-escalation 2024-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pressference-exporter/pressference-exporter-103-authenticated-administrator-sql-injection 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tourfic/tourfic-2145-missing-authorization-in-multiple-functions 2024-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-smiley/wp-smiley-141-cross-site-request-forgery-to-cross-site-scripting 2015-05-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/king-addons/king-addons-for-elementor-51162-authenticated-contributor-stored-cross-site-scripting 2025-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mtouch-quiz/mtouch-quiz-312-reflected-cross-site-scripting 2015-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-todo/wp-to-do-130-cross-site-request-forgery-via-wptodo_settings 2024-05-29T15:53:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-to-buffer/wordpress-to-buffer-381-authenticated-admin-cross-site-scripting 2022-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/delete-custom-fields/delete-custom-fields-031-cross-site-request-forgery-to-post-meta-deletion 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder-block/popupkit-220-missing-authorization-to-sensitive-information-disclosure-and-data-deletion 2026-02-09T20:31:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woc-open-close/open-close-woocommerce-store-495-authenticated-contributor-local-file-inclusion 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/breaking-news-ticker/breaking-news-ticker-244-authenticated-contributor-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-bulb-finder-for-wp-wc/auto-bulb-finder-for-wordpress-280-authenticated-contributor-stored-cross-site-scripting 2025-10-02T21:29:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-taxonomy-images/easy-taxonomy-images-101-unauthenticated-stored-cross-site-scripting 2025-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/honeypot-for-wp-comment/honeypot-for-wp-comment-223-reflected-cross-site-scripting-via-page 2024-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flo-forms/flo-forms-1043-missing-authorization 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gs-team-members/gs-team-members-223-authenticated-contributor-stored-cross-site-scripting 2023-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp3-music-player-by-sonaar/mp3-audio-player-for-music-radio-podcast-by-sonaar-55-authenticated-contributor-stored-cross-site-scripting-via-sonaar_audioplayer-shortcode 2024-07-09T19:09:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/olimometer/olimometer-257-sql-injection 2016-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/export-all-urls/export-all-urls-41-authenticated-editor-stored-cross-site-scripting 2022-05-27T12:58:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/betheme/betheme-2675-reflected-cross-site-scripting 2023-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rometheme-for-elementor/romethemekit-for-elementor-150-authenticated-contributor-stored-cross-site-scripting 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gd-rating-system/gd-rating-system-23-cross-site-scripting 2018-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sensei-lms/sensei-lms-451-missing-authorization 2022-08-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visualizer/visualizer-3111-authenticated-subscriber-sql-injection 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ip2location-country-blocker/ip2location-country-blocker-2265-arbitrary-country-ban-via-cross-site-request-forgery 2022-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/counter-box/counter-box-wordpress-plugin-for-countdown-timer-counter-12-sql-injection 2022-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-membership/simple-membership-455-exposure-of-private-personal-information-to-an-unauthorized-actor 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-roadmap/wp-roadmap-213-authenticated-contributor-sql-injection 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-currency-switcher/woocs-currency-switcher-for-woocommerce-professional-free-137-authenticated-local-file-inclusion 2021-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/astra-bulk-edit/astra-bulk-edit-1210-authenticated-contributor-stored-cross-site-scripting 2026-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imember360/imember360-38012-39001-cross-site-request-forgery 2014-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/category-featured-images/category-featured-images-118-authenticated-author-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/verse-o-matic/verse-o-matic-411-cross-site-request-forgery-to-stored-cross-site-scripting 2021-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-support-plus-responsive-ticket-system/wp-support-plus-responsive-ticket-system-714-sql-injection 2016-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cookie-consent-for-developers/cookie-consent-for-developers-171-authenticated-administrator-stored-cross-site-scripting-via-multiple-settings-fields 2026-01-23T19:20:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sureforms/sureforms-drag-and-drop-form-builder-for-wordpress-143-missing-authorization-to-authenticated-contributor-settings-update 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-sentinel/wordpress-sentinel-101-sql-injection 2011-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/filr-protection/filr-secure-document-library-1211-authenticated-administrator-stored-cross-site-scripting-via-html-upload 2026-01-16T14:11:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-eMember/wp-emember-v1022-unauthenticated-information-exposure 2026-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-calendar/wp-calendar-153-authenticated-contributor-cross-site-scripting 2022-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iframe/iframe-50-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/just-writing-statistics/just-writing-statistics-53-missing-authorization 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/platform/platform-144-missing-authorization-to-unauthenticated-arbitrary-options-update 2015-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masterstudy-lms-learning-management-system-pro/masterstudy-lms-pro-470-authenticated-subscriber-arbitrary-file-upload 2025-05-27T16:26:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js-jobs/js-job-manager-202-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-donation-plugin-and-fundraising-platform-351-authenticated-contributor-stored-cross-site-scripting 2024-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/perfmatters/perfmatters-259-authenticated-subscriber-arbitrary-file-overwrite-via-snippets-parameter 2026-04-09T11:55:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jquery-hover-footnotes/jquery-hover-footnotes-14-cross-site-request-forgery-to-plugin-settings-update 2026-06-08T15:07:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-246-cross-site-scripting 2019-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formcraft-form-builder/formcraft-126-authenticated-admin-stored-cross-site-scripting 2023-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/devnex-addons-for-elementor/devnex-addons-for-elementor-109-authenticated-contributor-stored-cross-site-scripting 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/directorist/directorist-866-unauthenticated-open-redirect 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/more-featured-images/more-featured-images-100-authenticated-contributor-stored-cross-site-scripting 2022-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sliced-invoices/sliced-invoices-392-missing-authorization 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/intelly-related-posts/inline-related-posts-331-cross-site-request-forgery 2024-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rbxgallery/rbx-gallery-31-arbitrary-file-upload 2012-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/order-notification-for-telegram/order-notification-for-telegram-101-missing-authorization-to-unauthenticated-send-telegram-test-message 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/convertplug/convertplus-344-unauthorized-account-creation 2019-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/old-posts-highlighter/old-posts-highlighter-103-cross-site-request-forgery-to-settings-update 2026-05-26T17:20:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-wp-health-check/sitealert-formerly-wp-health-197-cross-site-request-forgery 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-easy-paypal-payment-or-donation-accept-plugin/easy-accept-payments-for-paypal-499-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/w3-total-cache-0941-arbitrary-file-upload 2016-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatorwp/automatorwp-250-cross-site-request-forgery 2023-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sync-post-with-other-site/sync-post-with-other-site-151-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-calendar-booking-plugin-for-appointments-and-events-526-missing-authorization-to-booking-details-exposure 2026-02-11T13:37:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-builder/wdcontactformbuilder-1068-cross-site-request-forgery 2019-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-340-authenticated-subscriber-html-injection 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-slider-3/smart-slider-3-3519-authenticated-contributor-stored-cross-site-scripting 2022-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ts-tree/ts-tree-011-missing-authorization-to-authenticated-subscriber-arbitrary-content-deletion 2025-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/manual-image-crop/manual-image-crop-110-reflected-cross-site-scripting 2015-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-review/wp-ultimate-review-203-authenticated-administrator-stored-cross-site-scripting 2023-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-blog/jetblog-248-unauthenticated-information-exposure 2026-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kbucket/kbucket-422-authenticated-subscriber-arbitrary-file-upload 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b-slider/b-slider-gutenberg-slider-block-for-wp-200-authenticated-subscriber-sensitive-information-exposure 2025-08-14T13:59:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-admanager/ad-manager-112-open-redirection 2014-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hydra-booking/hydra-booking-1110-authenticated-subscriber-sql-injection 2025-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/doctreat/doctreat-167-authenticated-subscriber-arbitrary-shortcode-execution 2025-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/canto/canto-311-missing-authorization-to-authenticated-subscriber-arbitrary-setting-modification 2026-04-16T18:16:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cluevo-lms/cluevo-e-learning-platform-180-authenticated-cross-site-scripting 2022-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-search-pro/ajax-search-pro-4261-reflected-cross-site-scripting 2023-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-builder-add/landing-page-builder-1515-open-redirect 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/id-arrays/id-arrays-212-reflected-cross-site-scripting 2026-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sticky-menu-block/sticky-content-101-authenticated-contributor-stored-cross-site-scripting 2025-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jobwp/jobwp-240-cross-site-request-forgery 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nps-computy/nps-computy-275-authenticated-admin-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acymailing/acymailing-smtp-newsletter-750-open-redirect 2021-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-addons-for-elementor/responsive-addons-for-elementor-154-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/publishpress/publishpress-editorial-calendar-workflow-comments-notifications-and-statuses-350-cross-site-scripting 2021-09-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/global-notification-bar/global-notification-bar-101-authenticated-admin-stored-cross-site-scripting 2024-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wip-woocarousel-lite/wip-woocarousel-lite-117-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-slider/master-slider-395-unauthenticated-php-object-injection 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ditty-news-ticker/ditty-responsive-news-tickers-sliders-and-lists-3142-authenticated-author-stored-cross-site-scripting 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-load-more/ajax-load-more-2112-local-file-inclusion 2016-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/complianz-gdpr/complianz-gdprccpa-cookie-consent-644-cross-site-request-forgery-via-ajax_delete_snapshot 2023-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buymeacoffee/buy-me-a-coffee-button-and-widget-plugin-37-missing-authorization 2023-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/camoo-sms/camoo-sms-301-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-and-page-builder/post-and-page-builder-by-boldgrid-visual-drag-and-drop-editor-1275-authenticated-contributor-stored-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accelerated-mobile-pages/amp-for-wp-accelerated-mobile-pages-1092-authenticated-contributor-cross-site-scripting-via-shortcode 2023-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yourchannel/yourchannel-124-cross-site-request-forgery-to-plugin-language-translation-update 2023-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rsvpmaker/rsvpmaker-932-unauthenticated-sql-injection 2022-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-coupon-usage/coupon-affiliates-640-cross-site-request-forgery 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clickdesigns/clickdesigns-180-missing-authorization-to-api-key-modification-or-removal 2025-01-06T15:06:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supportcandy/supportcandy-316-authenticated-subscriber-sql-injection 2023-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-forum/wp-forum-174-remote-sql-injection 2008-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-invoice/easy-invoice-invoice-generator-pdf-quotes-payments-2119-unauthenticated-remote-code-execution 2026-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youforms-free-for-copecart/youforms-for-wordpress-creating-forms-for-copecart-105-stored-cross-site-scripting 2021-07-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adserve/adserve-03-sql-injection 2008-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/template-events-calendar/events-shortcodes-templates-for-the-events-calendar-231-authenticated-contributor-sql-injection-via-shortcode 2023-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-digital-downloads/easy-digital-downloads-301-php-object-injection 2022-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/experto-cta-widget/experto-cta-widget-call-to-action-sticky-cta-floating-button-plugin-111-missing-authorization-to-unauthenticated-settings-update 2025-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mycbgenie-clickbank-storefront/clickbank-storefront-wordpress-plugin-17-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/countdown-wpdevart-extended/countdown-and-countup-woocommerce-sales-timer-182-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/search-google/search-by-google-19-authenticated-administrator-stored-cross-site-scripting 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vk-all-in-one-expansion-unit/vk-all-in-one-expansion-unit-98501-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/convertcalculator/convertcalculator-for-wordpress-111-authenticated-contributor-stored-cross-site-scripting-via-id-and-type-parameter 2024-11-15T15:03:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpbits-addons-for-elementor/wpbits-addons-for-elementor-page-builder-15-authenticated-contributor-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yoo-slider/yoo-slider-plugin-200-stored-cross-site-scripting 2022-03-21T21:28:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wwc-amz-aff/woocommerce-amazon-affiliates-90216-unauthenticated-arbitrary-file-upload 2015-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/css3-buttons/css3-buttons-01-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-05T17:37:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/go-to-top/go-to-top-008-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/team/team-showcase-12228-authenticated-contributor-stored-cross-site-scripting 2026-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/optio-dentistry/optio-dentistry-22-authenticated-contributor-stored-cross-site-scripting 2025-09-05T14:06:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sf-booking/service-finder-bookings-60-authentication-bypass-via-user-switch-cookie 2025-07-31T14:59:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-404-auto-redirect-to-similar-post/wp-404-auto-redirect-105-authenticated-admin-stored-cross-site-scripting 2026-02-17T16:29:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/motta-addons/motta-addons-161-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/disqus-comment-system/disqus-comment-system-276-reflected-cross-site-scripting 2014-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/calculated-fields-form/calculated-fields-form-11150-authenticated-administrator-stored-cross-site-scripting 2023-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-carousel-slider-for-elementor/post-carousel-slider-for-elementor-150-authenticated-contributor-stored-cross-site-scripting 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-activity-log-pro/user-activity-log-pro-234-authenticated-subscriber-sql-injection 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/olalaweb-mailchimp-campaign-manager/mailchimp-campaigns-324-missing-authorization-to-authenticated-subscriber-mailchimp-app-disconnection 2026-02-13T18:28:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tripetto/wordpress-form-builder-plugin-for-contact-forms-surveys-and-quizzes-tripetto-806-unauthenticated-stored-cross-site-scripting 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/material-design-icons-for-elementor/material-design-icons-for-page-builders-142-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-force-ssl/wp-force-ssl-https-ssl-redirect-166-missing-authorization-to-settings-update 2024-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-post-grid/the-post-grid-774-missing-authorization-via-ajax 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modern-footnotes/modern-footnotes-1416-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/twitter-liveblog/twitter-liveblog-112-cross-site-request-forgery 2014-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enjoy-instagram-instagram-responsive-images-gallery-and-carousel/enjoy-social-feed-622-missing-authorization 2024-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gd-mylist/gd-mylist-111-stored-cross-site-scripting 2022-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-registration/simple-user-registration-63-unauthenticated-privilege-escalation 2025-06-25T13:47:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/external-media/external-media-1035-authenticated-administrator-stored-cross-site-scripting 2022-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-blocks/essential-blocks-for-gutenberg-420-missing-authorization-via-ajax-actions 2023-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anywhere-elementor/anywhere-elementor-1211-authenticated-contributor-post-disclosure 2024-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/minterpress/minterpress-105-missing-authorization-to-authenticated-subscriber-arbitrary-options-update 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cm-business-directory/cm-business-directory-optimise-and-showcase-local-business-153-authenticated-author-stored-cross-site-scripting 2026-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-addons-for-gutenberg/spectra-wordpress-gutenberg-blocks-2162-authenticated-contributor-stored-cross-site-scripting-via-team-widget 2024-12-02T16:32:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/vixus/vixus-business-startup-elementor-template-kit-1016-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rng-refresh/rng-refresh-10-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/glossary-by-codeat/glossary-2127-authenticated-contributor-stored-cross-site-scripting 2023-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/aqualots/aqualots-116-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-contact-form-integration-for-elementor/eleforms-all-in-one-form-integration-including-db-for-elementor-2999-cross-site-request-forgery 2024-11-15T15:10:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tpg-get-posts/tpg-get-posts-365-authenticated-contributor-stored-cross-site-scripting 2024-12-16T10:45:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/countdown-builder/countdown-coming-soon-maintenance-countdown-clock-2891-unauthenticated-limited-local-file-inclusion 2025-04-03T16:22:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wolfnet-idx-for-wordpress/wolfnet-idx-for-wordpress-1191-authenticated-admin-stored-cross-site-scripting 2024-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pictpress/pictpress-091-directory-traversal 2007-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rename-media-files/rename-media-files-101-authenticated-contributor-remote-code-execution 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bmlt-meeting-map/bmlt-meeting-map-260-authenticated-contributor-local-file-inclusion 2025-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real3d-flipbook/real3d-flipbook-10-reflected-cross-site-scripting 2016-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weather-atlas/weather-atlas-widget-121-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce/woocommerce-404-unauthorized-post-meta-creationmodification 2020-05-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wonderplugin-video-embed/wonder-video-embed-17-authenticated-contributor-stored-cross-site-scripting 2021-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-star-rating-with-font-awersome/contact-form-7-star-rating-with-font-awesome-13-authenticated-editor-stored-cross-site-scripting 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/small-package-quotes-unishippers-edition/small-package-quotes-unishippers-edition-248-unauthenticated-sql-injection 2025-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscription-with-secure-captcha/easy-email-subscription-13-authenticated-admin-sql-injection-via-uid 2025-11-05T14:24:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-blocks-pro/easy-blocks-pro-1021-missing-authorization 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-remote-thumbnail/wp-remote-thumbnail-132-authenticated-contributor-arbitrary-file-upload 2025-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-424-cross-site-scripting-in-theme-preview 2015-08-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-delivery-notes/print-invoice-delivery-notes-for-woocommerce-590-missing-authorization 2026-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blockspare/gutenberg-page-builder-blocks-ready-made-patterns-library-324-authenticated-contributor-stored-cross-site-scripting 2024-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pearl-header-builder/wordpress-header-builder-plugin-pearl-136-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pawfriends/pawfriends-pet-shop-and-veterinary-wordpress-13-cross-site-request-forgery 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-0849-sql-injection 2015-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-1359-insufficient-access-control-to-menu-settings-update 2023-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-360-362-missing-authorization-to-remote-code-execution 2022-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sv100-companion/sv100-companion-2002-missing-authorization-to-unuathenticated-arbitrary-options-update 2024-12-05T19:32:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blockons/blockons-1215-authenticated-contributor-stored-cross-site-scripting 2026-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/Ultimate_AI/ultimateai-283-authentication-bypass 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-312-incorrect-authorization-for-contributor-level-users 2011-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/business-directory-plugin/business-directory-plugin-5111-cross-site-request-forgery-to-arbitrary-payment-history-update 2021-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-invoice/wp-invoice-web-invoice-and-billing-431-cross-site-request-forgery-to-stored-cross-site-scripting 2022-04-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ooohboi-steroids-for-elementor/ooohboi-steroids-for-elementor-213-missing-authorization-leading-to-authenticated-subscriber-attachment-deletion 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-140-missing-authorization-to-authenticated-subscriber-db-cleanup-actions 2025-11-26T21:34:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webinar-ignition/webinarignition-live-automated-evergreen-webinar-system-also-for-woocommerce-408253-authenticated-subscriber-arbitrary-file-deletion 2026-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blrt-wp-embed/blrt-wp-embed-169-authenticated-contributor-sql-injection 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fs-poster/fs-poster-658-authenticated-subscriber-sql-injection 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ostende/ostende-143-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/typekit/typekit-plugin-for-wordpress-123-cross-site-request-forgery 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vcaching/varnishnginx-proxy-caching-183-unauthenticated-information-exposure 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-airbnb-review-slider/wp-airbnb-review-slider-32-cross-site-request-forgery 2023-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-nested-pages/nested-pages-327-cross-site-request-forgery-to-local-file-inclusion 2024-07-03T23:23:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revi-io-customer-and-product-reviews/reviio-573-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-content-shortcode/custom-content-shortcode-402-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-download-monitor/simple-download-monitor-3925-authenticated-administrator-sql-injection 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/Premium_Gallery_Manager/premium-gallery-manager-unknown-versions-arbitrary-file-upload 2014-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/codup-read-only-admin/codup-read-only-admin-1117-cross-site-scripting 2022-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/onetone/onetone-306-onetone-companion-111-stored-cross-site-scripting 2020-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/photography/photography-772-reflected-cross-site-scripting 2025-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-hide-categories/wp-hide-categories-10-reflected-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/riode/riode-multi-purpose-woocommerce-1623-unauthenticated-local-file-inclusion 2025-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mybb-last-topics/mybb-last-topics-10-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/codepen-embedded-pen-shortcode/codepen-embedded-pens-shortcode-100-authenticated-contributor-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/backupwordpress/backupwordpress-313-authenticated-admin-directory-traversal 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gotmls/anti-malware-security-and-brute-force-firewall-42185-authenticated-admin-php-object-injection 2022-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webp-express/webp-express-0259-unauthenticated-information-exposure 2025-12-03T15:48:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mooberry-book-manager/mooberry-book-manager-41512-unauthenticated-information-exposure-via-export-files 2024-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-code/quick-code-10-cross-site-request-forgery-to-stored-cross-site-scripting 2024-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-syntax/wp-syntax-12-authenticated-author-regex-denial-of-service 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-designer/product-designer-1032-unauthenticated-php-object-injection 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blocksy-companion/blocksy-companion-2110-authenticated-contributor-stored-cross-site-scripting-via-blocksy_newsletter_subscribe-shortcode 2025-09-16T17:33:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-profile-avatar/wp-user-profile-avatar-10-authenticated-contributor-stored-cross-site-scripting 2023-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/music-store/music-store-wordpress-ecommerce-1015-open-redirect 2015-07-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powr-pack/powr-210-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/waitlist-woocommerce/waitlist-woocommerce-back-in-stock-notifier-275-reflected-cross-site-scripting 2024-09-13T14:49:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ws-form/ws-form-lite-and-ws-form-pro-18176-stored-cross-site-scripting 2022-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementskit-lite/elementskit-lite-352-authenticated-contributor-stored-cross-site-scripting-via-image-comparison-widget 2025-06-18T15:03:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/print-invoices-packing-slip-labels-for-woocommerce/woocommerce-pdf-invoices-packing-slips-delivery-notes-and-shipping-labels-471-authenticated-shop-manager-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rock-convert/rock-convert-2110-authenticated-admin-stored-cross-site-scripting 2022-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/traveltour/travel-tour-524-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/file-manager-advanced/multiple-elfinder-plugins-various-versions-directory-traversal-to-arbitrary-file-deletion 2025-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-user-profiles-groups-and-communities-5942-insecure-direct-object-reference-to-authenticated-subscriber-private-messages-disclosure 2025-02-17T13:45:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/folders/folders-unlimited-folders-to-organize-media-library-folder-pages-posts-file-manager-303-authenticated-contributor-stored-cross-site-scripting-via-svg-file-upload 2024-08-05T22:52:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar/the-events-calendar-61512-6162-unauthenticated-sql-injection 2026-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unite-gallery-lite/unite-gallery-lite-15-sql-injection 2015-07-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/registrations-for-the-events-calendar/registrations-for-the-events-calendar-274-reflected-cross-site-scripting 2021-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-quiz/wp-adv-quiz-102-authenticated-admin-stored-cross-site-scripting-via-quiz-question-and-message 2024-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-copilot-content-generator/ai-chatbot-workflow-automation-by-aiwu-1417-unauthenticated-privilege-escalation 2026-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awcode-toolkit/awcode-toolkit-1014-reflected-cross-site-scripting 2024-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/surbma-infusionsoft-shortcode/surbma-infusionsoft-shortcode-201-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-06-26T17:50:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xpert-tab/xpert-tab-13-authenticated-contributor-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluentform/fluent-forms-617-unauthenticated-insecure-direct-object-reference-to-payment-status-tampering-via-submission_id 2025-12-05T18:10:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popover-windows/popover-windows-12-cross-site-request-forgery-to-arbitrary-popover-configuration-update 2025-12-12T16:09:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-wordpress-lms-plugin-427-unauthenticated-sql-injection-via-c_fields 2024-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woostagram-connect/woostagram-connect-102-unauthenticated-arbitrary-file-upload 2024-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-keyword-monitor/wp-keyword-monitor-105-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sabre/sabre-122-cross-site-scripting 2012-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-registration-form-builder-with-submission-manager/registrationmagic-custom-registration-forms-3792-php-object-injection 2017-10-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/just-tables/justtables-woocommerce-product-table-149-cross-site-request-forgery-via-plugin_activation 2023-03-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/get-post-content-shortcode/get-post-content-shortcode-04-insecure-direct-object-reference-to-authenticated-contributor-sensitive-information-disclosure-via-post_content-shortcode 2024-12-13T15:54:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/joomsport-sports-league-results-management/joomsport-for-sports-team-league-football-hockey-more-577-unauthenticated-sql-injection 2026-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aco-woo-dynamic-pricing/dynamic-pricing-with-discount-rules-for-woocommerce-458-authenticated-shop-manager-sql-injection 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/snow-storm/snow-storm-146-reflected-cross-site-scripting 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thrive-ab-page-testing/multiple-thrive-themes-and-plugins-various-versions-arbitrary-options-update 2021-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wux-blog-editor/wux-blog-editor-300-unauthenticated-arbitrary-file-upload 2024-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/minhnhut-link-gateway/minhnhut-link-gateway-361-reflected-cross-site-scripting-via-url-parameter 2026-05-26T20:48:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/setsail-membership/setsail-membership-103-authentication-bypass-via-account-takeover 2025-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spotbot/spotbot-018-reflected-cross-site-scripting 2025-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leyka/leyka-3311-missing-authorization 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-multitasking/wp-multitasking-0112-cross-site-request-forgery-to-smtp-settings-update 2024-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feedzy-rss-feeds/rss-aggregator-by-feedzy-feed-to-post-autoblogging-news-youtube-video-feeds-aggregator-432-missing-authorization 2024-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/a4-barcode-generator/print-labels-with-barcodes-create-price-tags-product-labels-order-labels-for-woocommerce-346-authenticatedsubscriber-stored-cross-site-scripting-via-templates 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/twitch-tv-embed-suite/twitch-tv-embed-suite-210-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-pickup-store/wc-pickup-store-189-missing-authorization-to-unauthenticated-settings-update 2025-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-theme-core/jetthemecore-for-elementor-220-authenticated-subscriber-arbitrary-file-deletion 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-type-x/product-catalog-simple-1711-authenticated-contributor-stored-cross-site-scripting-via-show_products-shortcode 2025-02-27T18:52:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/opening-hours/were-open-145-cross-site-request-forgery 2023-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/checkout-for-paypal/checkout-for-paypal-1032-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videojs-hls-player/videojs-hls-player-102-authenticated-contributor-stored-cross-site-scripting 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-cart-for-digital-products/wp-estore-854-reflected-cross-site-scripting-via-discount-editing 2024-06-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pearl-header-builder/wordpress-header-builder-plugin-pearl-137-missing-authorization-to-unauthenticated-arbitrary-site-options-deletion 2024-06-11T20:05:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-document-embedder/google-doc-embedder-2518-cross-site-scripting 2015-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-builder-add/landing-page-builder-1512-authenticated-administrator-stored-cross-site-scripting 2023-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restropress/restropress-312-cross-site-request-forgery-via-rpress_orders_list_table_process_bulk_actions 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-bought-together/wpc-frequently-bought-together-for-woocommerce-703-missing-authorization 2024-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bello/bello-directory-listing-160-cross-site-scripting 2021-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gs-facebook-comments/wp-social-comments-172-missing-authorization-to-authenticated-subscriber-settings-change 2022-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/microsoft-clarity/microsoft-clarity-093-cross-site-request-forgery-to-stored-cross-site-scripting 2024-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mage-eventpress/event-manager-for-woocommerce-386-authenticated-administrator-stored-cross-site-scripting-via-mep_get_option-function 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7/contact-form-7-531-arbitrary-file-upload-via-bypass 2020-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/official-sendle-shipping-method/sendle-shipping-602-missing-authorization 2025-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp_scraper/wordpress-woocommerce-scraper-plugin-import-data-from-any-website-107-unauthenticated-arbitrary-file-download 2026-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-abandon-cart-pro/abandoned-cart-pro-for-woocommerce-1040-authenticated-subscriber-privilege-escalation 2026-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-post/postx-gutenberg-blocks-for-post-grid-323-incorrect-authorization 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpmozo-addons-lite-for-elementor/wpmozo-addons-lite-for-elementor-120-authenticated-contributor-stored-cross-site-scripting 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shopsite-plugin/shopsite-1510-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-03T20:46:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress/buddypress-191-stored-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/fana/fana-1135-authenticated-contributor-local-file-inclusion 2025-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/gutenberg-blocks-with-ai-by-kadence-wp-page-builder-features-342-authenticated-contributor-stored-cross-site-scripting-via-button-link 2025-01-10T14:30:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulk-delete/bulk-delete-553-missing-authorization 2016-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enhanced-e-commerce-for-woocommerce-store/conversios-707-authenticated-subscriber-sql-injection-via-ee_syncproductcategory 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-231-unauthenticated-local-file-inclusion 2025-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kama-thumbnail/kama-thumbnail-351-cross-site-request-forgery 2026-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tablepress/tablepress-tables-in-wordpress-made-easy-331-reflected-cross-site-scripting 2026-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rsvpmaker/rsvpmarker-1145-missing-authorization 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yikes-inc-easy-mailchimp-extender/easy-forms-for-mailchimp-687-reflected-cross-site-scripting 2023-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anytrack-affiliate-link-manager/anytrack-affiliate-link-manager-155-missing-authorization 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/stockholm/stockholm-96-authenticated-contributor-local-file-inclusion 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-saml-20-single-sign-on/saml-sp-single-sign-on-504-missing-authorization-to-notice-dismissal 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-push-notifications/ultimate-push-notifications-118-authenticated-subscriber-sql-injection 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-addon-for-elementor/events-addon-for-elementor-229-authenticated-contributor-stored-cross-site-scripting-via-typewriter-and-countdown-widgets 2025-08-28T19:53:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xpro-elementor-addons/xpro-elementor-addons-1417-authenticated-contributor-stored-cross-site-scripting 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-by-supsystic/contact-form-by-supsystic-1728-authenticated-administrator-stored-cross-site-scripting 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/syncee-for-suppliers/syncee-for-suppliers-105-missing-authorization-to-sensitive-information-disclosure 2022-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/watu/watu-quiz-341-authenticated-contributor-stored-cross-site-scripting 2024-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/v-form/vform-305-missing-authorization 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/knr-author-list-widget/axact-author-list-widget-300-sql-injection 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contentstudio/contentstudio-125-authorization-bypass 2023-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/translate-this-google-translate-web-element-shortcode/translate-this-gtranslate-shortcode-10-authenticated-contributor-stored-cross-site-scripting 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagemagick-engine/imagemagick-engine-1710-authenticated-administrator-remote-code-execution 2024-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sms-alert/sms-alert-395-unauthenticated-privilege-escalation-via-arbitrary-password-reset 2026-06-30T19:08:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-optimize/wp-optimize-3211-cross-site-request-forgery 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/label-grid-tools/labelgrid-tools-1358-reflected-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-url-to-featured-image/add-featured-image-custom-link-200-authenticated-author-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/like-dislike-plus-counter/like-dislike-plus-counter-like-dislike-buttons-10-authenticated-admin-stored-cross-site-scripting 2025-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/get-bookings-wp/getbookingswp-1127-missing-authorization 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/good-url-preview-box/url-preview-box-120-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-monitor/download-monitor-196-missing-authorization 2017-05-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-better-messages/bp-better-messages-19937-reflected-cross-site-scripting 2021-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ali2woo-lite/aliexpress-dropshipping-with-alinext-lite-335-authenticated-subscriber-arbitrary-file-upload 2024-06-18T14:28:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/strong-testimonials/strong-testimonials-3112-authenticatedcontributor-improper-authorization-to-views-modification 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpglobus/wpglobus-multilingual-everything-196-cross-site-scripting-via-wpglobus_optionpost_typepage 2018-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chart-builder/chartify-317-authenticated-administrator-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-expander/video-expander-10-authenticated-contributor-stored-cross-site-scripting 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-folio/simple-folio-111-authenticated-contributor-stored-cross-site-scripting-via-client-name-and-link-meta-fields 2026-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/os-datahub-maps/os-datahub-maps-183-authenticated-author-arbitrary-file-upload 2026-02-02T18:50:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slider-images/slider-carousel-responsive-image-slider-150-missing-authorization 2023-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/client-portal/client-portal-118-cross-site-request-forgery-via-cp_create_private_pages_for_all_users 2023-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-view-google-calendar/list-view-google-calendar-743-authenticated-administrator-stored-cross-site-scripting-via-event-description 2026-04-14T11:14:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-data-filter-and-taxonomy-filter/wordpress-meta-data-and-taxonomies-filter-mdtf-132-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pixel-formbuilder/pixel-wordpress-form-builderplugin-autoresponder-102-unauthenticated-sql-injection 2025-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-page-spider/admin-page-spider-331-authenticated-admin-stored-cross-site-scripting 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/attesa-extra/attesa-extra-139-authenticated-contributor-stored-cross-site-scripting 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feedzy-rss-feeds/feedzy-rss-feeds-lite-510-authenticated-subscriber-server-side-request-forgery 2025-10-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/tempera/tempera-182-authenticated-contributor-stored-cross-site-scripting 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2119-reflected-cross-site-scripting 2021-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/linked-variation/advanced-linked-variations-for-woocommerce-103-missing-authorization 2025-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/survey-maker/survey-maker-5163-unauthenticated-authorization-bypass 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fusion-engage/fusion-engage-105-local-file-inclusion 2015-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yml-for-yandex-market/yml-for-yandex-market-423-reflected-cross-site-scripting 2024-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-carticon/wp-carticon-100-authenticated-admin-stored-cross-site-scripting 2025-11-03T15:28:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customer-reviews-woocommerce/customer-reviews-for-woocommerce-5470-reflected-cross-site-scripting-via-s 2024-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder/popup-builder-4110-authenticated-admin-cross-site-scripting 2022-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/single-property/single-property-28-authenticated-subscriber-php-object-injection 2025-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-slider-block/content-slider-block-create-fully-functional-slider-with-gutenberg-block-315-authenticated-contributor-post-disclosure 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscribe2/subscribe2-1040-missing-authorization 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/branda-white-labeling/branda-white-label-wordpress-3481-authenticated-administrator-stored-cross-site-scripting 2023-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-social-share-block/simple-social-share-block-100-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hreflang-manager-lite/hreflang-manager-106-cross-site-request-forgery 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/one-user-avatar/one-user-avatar-236-cross-site-request-forgery 2021-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-contact-form-the-drag-and-drop-form-builder-for-wordpress-34271-stored-cross-site-scripting 2020-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-limit-login-attempts/limit-login-attempts-404-stored-cross-site-scripting 2021-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awin-data-feed/awin-data-feed-17-reflected-cross-site-scripting 2022-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wm-zoom/wm-zoom-10-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profilegrid-user-profiles-groups-and-communities/profilegrid-5984-missing-authorization-to-authenticated-subscriber-arbitrary-group-joining 2026-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mail-baby-smtp/mail-baby-smtp-28-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/otpless/otp-less-one-tap-sign-in-2058-reflected-cross-site-scripting 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ays-popup-box/popup-box-create-countdown-coupon-video-contact-form-popups-497-missing-authorization-to-unauthenticated-limited-options-update 2024-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wicked-folders/wicked-folders-21816-missing-authorization-on-ajax_clone_folder 2023-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/convex/convex-111-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/snap-pixel/snap-pixel-157-authenticated-administrator-stored-cross-site-scripting 2023-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zarinpal-paid-downloads/zarinpal-paid-downloads-23-reflected-cross-site-scripting 2025-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tp-gallery-slider/tp-gallery-slider-12-unauthenticated-stored-cross-site-scripting 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kathmag/multiple-sparklewpthemes-themes-various-versions-missing-authorization-to-arbitrary-plugin-activation 2023-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enable-media-replace/enable-media-replace-414-reflected-cross-site-scripting 2023-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cornerstone/cornerstone-788-missing-authorization 2026-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-site-enhancements/admin-and-site-enhancements-ase-840-missing-authorization 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broken-link-checker-seo/broken-link-checker-126-authenticated-author-sql-injection 2025-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/remoji/remoji-postcomment-reaction-and-enhancement-22-unauthenticated-stored-cross-site-scripting 2026-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-grid/post-grid-and-gutenberg-blocks-2311-authenticated-contributor-php-object-injection 2025-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpmastertoolkit/wpmastertoolkit-wpmtk-all-in-one-plugin-252-authenticated-administrator-to-arbitrary-file-read-and-write 2025-04-23T19:54:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-497-authenticated-arbitrary-file-deletion 2018-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ical-availability/wp-ical-availability-103-missing-authorization 2023-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-popular-posts/wordpress-popular-posts-710-unauthenticated-arbitrary-shortcode-execution 2025-01-03T10:02:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/polylang/polylang-151-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addonify-quick-view/addonify-quick-view-for-woocommerce-1216-unauthenticated-full-path-dislcosure 2024-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kona-instagram-feed-for-gutenberg/kona-gallery-block-17-authenticated-contributor-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/papercite/papercite-0518-missing-authorization 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pre-orders/woocommerce-pre-orders-200-authenticated-contributor-stored-cross-site-scripting 2023-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-quick-front-end-editor/wp-quick-frontend-editor-55-authenticated-settings-change 2021-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/category-and-product-woocommerce-tabs/category-and-product-woocommerce-tabs-10-authenticated-contributor-local-file-inclusion 2025-11-17T20:16:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-server-stats/wp-server-health-stats-1610-authenticated-administrator-stored-cross-site-scripting 2022-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/super-socializer/social-share-social-login-and-social-comments-plugin-super-socializer-71368-authentication-bypass-via-disqus-oauth-provider 2024-11-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/justified-gallery/justified-gallery-173-missing-authorization-via-dismiss_how_to_use_notice-and-dismiss_notice 2023-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-501-authorization-bypass 2018-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-engine/ai-engine-318-authenticated-subscriber-php-object-injection-via-phar-deserialization 2025-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-multishipping/wcmultishipping-mondial-relay-inpost-chronopost-for-woocommerce-302-authenticated-subscriber-sql-injection 2026-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/boombox-theme-extensions/boombox-theme-extensions-180-authenticated-contributor-local-file-inclusion-via-shortcode 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-poll/liquidpoll-advanced-polls-for-creators-and-brands-3377-unauthenticated-stored-cross-site-scripting 2024-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-the-contact-form-builder-that-grows-with-you-3819-unauthenticated-stored-cross-site-scripting-via-form-calculations 2024-12-11T16:24:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gtbabel/gtbabel-668-unauthenticated-cookie-stealing 2025-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buooy-sticky-header/buooy-sticky-header-052-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gutentor/gutentor-gutenberg-blocks-page-builder-for-gutenberg-editor-335-authenticated-contributor-stored-cross-site-scripting 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-207-sql-injection 2007-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nextgen-gallery/nextgen-gallery-2156-authenticated-local-file-inclusion-sql-injection 2016-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-social-icons/easy-social-icons-324-missing-authorization-via-cnss_save_ajax_order 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vc-autoresponder-addon/bakery-autoresponder-addon-106-missing-authorization 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/neresa-wp/neresa-13-unauthenticated-local-file-inclusion 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-database-cleaner/advanced-database-cleaner-316-cross-site-request-forgery 2025-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/prestige/prestige-141-unauthenticated-php-object-injection 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-performance-pack/wp-performance-pack-254-cross-site-request-forgery 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bookster/bookster-wordpress-appointment-booking-plugin-110-unauthenticated-appointment-manipulation 2024-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/read-and-understood/read-and-understood-21-stored-cross-site-scripting 2018-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aeroscroll-gallery/aeroscroll-gallery-infinite-scroll-image-gallery-post-grid-with-photo-gallery-1012-unauthenticated-directory-traversal 2025-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pdf-vouchers/woocommerce-pdf-vouchers-494-unauthenticated-arbitrary-file-deletion 2024-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pepro-bacs-receipt-upload-for-woocommerce/peprodev-woocommerce-receipt-uploader-269-reflected-cross-site-scripting 2024-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woolentor-addons/shoplentor-287-authenticated-contributor-stored-cross-site-scripting 2024-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mappress-google-maps-for-wordpress/mappress-maps-for-wordpress-2884-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/music-store/music-store-1041-cross-site-scripting 2016-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/esteem/esteem-150-authenticated-author-stored-cross-site-scripting 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wplms/wplms-199-unauthenticated-privilege-escalation 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce/woocommerce-222-cross-site-scripting-via-range-parameter 2014-09-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hide-it/hide-it-101-authenticated-contributor-stored-cross-site-scripting 2025-06-05T17:48:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-connector-pro/post-connector-103-and-post-conector-premium-163-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learning-management-system/masteriyo-lms-1114-authenticated-student-insecure-direct-object-reference 2024-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress/buddypress-500-720-privilege-escalation-via-rest-api 2021-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themify-builder/themify-builder-763-authenticated-contributor-local-file-inclusion 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-13986-authenticated-subscriber-private-post-disclosure 2024-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-1393-authenticated-contributor-stored-cross-site-scriting 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/biagiotti/biagiotti-352-unauthenticated-local-file-inclusion 2026-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yaypricing/yaypricing-353-missing-authorization 2025-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-plugins-dashboard/download-plugins-and-themes-in-zip-from-dashboard-191-reflected-cross-site-scripting 2024-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/market-exporter/market-exporter-2019-missing-authorization-to-arbitrary-file-deletion 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/depay-payments-for-woocommerce/web3-cryptocurrency-payments-by-depay-for-woocommerce-21217-missing-authorization-to-information-exposure 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/6.8/wordpress-682-authenticated-author-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-avatar-reloaded/user-avatar-reloaded-121-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/atarim-visual-collaboration/atarim-401-missing-authorization-via-remove_feedbacktool_notice 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-product-add-ons/yith-woocommerce-product-add-ons-450-unuathenticated-cross-site-scripting 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bookly-responsive-appointment-booking-tool/bookly-215-unauthenticated-stored-cross-site-scripting-via-name 2023-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-file-list/simple-file-list-609-authenticated-administrator-stored-cross-site-scripting 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beds24-online-booking/beds24-online-booking-2027-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/drag-and-drop-file-upload-for-elementor-forms/drag-and-drop-file-upload-for-elementor-forms-153-unauthenticated-arbitrary-file-upload 2025-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cmb2/cmb2-2101-authenticated-contributor-php-object-injection 2024-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-google-code-inserter/smart-google-code-inserter-35-stored-cross-site-scripting 2018-01-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/landing-pages/wordpress-landing-pages-123-sql-injection 2013-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integrio-core/integrio-core-128-unauthenticated-local-file-inclusion 2026-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/intelly-welcome-bar/welcome-bar-204-authenticated-administrator-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/blogbyte/blogbyte-111-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-expiry-for-woocommerce/product-expiry-for-woocommerce-25-missing-authorization-to-authenticated-subscriber-plugin-settings-update 2024-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contentstudio/contentstudio-118-missing-authorization 2022-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gwolle-gb/gwolle-guestbook-471-reflected-cross-site-scripting 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mycred/mycred-261-authenticated-contributor-stored-cross-site-scripting 2023-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/axeptio-sdk-integration/axeptio-254-unauthenticated-local-file-inclusion 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot/ai-chatbot-454-authenticated-administrator-stored-cross-site-scripting 2023-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mystickyelements/all-in-one-floating-contact-form-my-sticky-elements-213-missing-authorization 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-landing-page/landing-page-builder-free-landing-page-templates-3198-local-file-inclusion-via-lpp_template_select 2023-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/upcoming-events-lists/upcoming-events-lists-140-authenticated-subscriber-insecure-direct-object-reference 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/secure-passkeys/secure-passkeys-121-missing-authorization-to-authenticated-subscriber-passkey-exposure-and-deletion 2025-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-addons-for-elementor-addons-and-templates-kit-for-elementor-171049-missing-authorization-to-unauthenticated-custom-post-type-contents-exposure 2026-03-16T15:17:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nazy-load/flying-images-optimize-and-lazy-load-images-for-faster-page-speed-2414-authenticated-admin-stored-cross-site-scripting 2025-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-objects/gallery-objects-04-sql-injection 2014-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gift-voucher/gift-cards-gift-vouchers-and-packages-woocommerce-supported-418-sql-injection 2018-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/presto-player/the-ultimate-video-player-for-wordpress-222-authenticated-contributor-stored-cross-site-scripting 2024-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/surveyjs/surveyjs-11232-authenticated-contributor-stored-cross-site-scripting-via-id-parameter 2025-05-02T19:04:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photosmash-galleries/photosmash-plugin-105-cross-site-scripting 2011-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscribe-to-unlock-lite/subscribe-to-unlock-lite-130-authenticated-subscriber-local-file-inclusion 2025-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nmedia-user-file-uploader/frontend-file-manager-182-unauthenticated-content-injection 2021-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pool-services/pool-services-33-unauthenticated-server-side-request-forgery 2025-11-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premmerce-dev-tools/premmerce-dev-tools-20-missing-authorization-to-authenticated-subscriber-remote-code-execution-via-plugin-creation 2026-06-15T16:26:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-share-buttons-by-supsystic/social-share-buttons-by-supsystic-223-cross-site-request-forgery 2022-05-27T13:59:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-2913-authenticated-stored-cross-site-scripting 2020-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/estatebud-properties-listings/estatebud-properties-listings-550-cross-site-request-forgery-to-settings-update 2025-03-24T19:32:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inet-webkit/inet-webkit-122-missing-authorization 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/community-events/community-events-157-authenticated-administrator-stored-cross-site-scripting-via-ce_venue_name-parameter 2026-02-17T20:16:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-seopress/seopress-on-site-seo-79-authenticatedcontributor-stored-cross-site-scripting-via-social-image-url 2024-06-19T13:31:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-add-to-cart-text-change/add-to-cart-text-changer-and-customize-button-add-custom-icon-20-cross-site-request-forgery-via-wactc_text_form 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking/booking-calendar-10147-authenticated-contributor-stored-cross-site-scripting 2025-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-powerplaygallery/powerplay-gallery-33-sql-injection 2015-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/monkee-boy-wp-essentials/monkee-boy-essentials-11-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-10-25T20:36:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videowhisper-live-streaming-integration/broadcast-live-video-live-streaming-webrtc-hls-rtsp-rtmp-6110-unauthenticated-arbitrary-file-read 2025-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-funnel-manager/wp-funnel-manager-140-unauthenticated-php-object-injection 2025-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-entries/database-for-contact-form-7-wpforms-elementor-forms-133-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/boombox-theme-extensions/boombox-theme-extensions-180-authenticated-subscriber-privilege-escalation-via-password-resetaccount-takeover-in-boombox_ajax_reset_password 2025-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-monitor/download-monitor-4913-missing-authorization 2024-05-29T14:49:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dt-the7/the7-website-and-ecommerce-builder-for-wordpress-11130-authenticated-contributor-stored-cross-site-scripting-via-url-attribute 2024-06-24T21:29:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fotobook/fotobook-323-reflected-cross-site-scripting 2022-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/decalog/decalog-390-authenticated-admin-sql-injection 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yame-linkinbio/yame-link-in-bio-090-unauthenticated-information-exposure 2025-05-01T13:10:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/joli-faq-seo/joli-faq-seo-wordpress-faq-plugin-132-cross-site-request-forgery 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miraculouscore/miraculous-core-209-unauthenticated-insecure-direct-object-reference 2025-09-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maximum-products-per-user-for-woocommerce/maximum-products-per-user-for-woocommerce-443-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/remove-post-type-slug/remove-post-type-slug-102-cross-site-request-forgery-to-settings-update 2026-02-18T15:59:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/appointment-buddy-online-appointment-booking-by-accrete/appointment-buddy-widget-12-reflected-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-jetpack/booster-for-woocommerce-723-reflected-cross-site-scripting 2024-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addthis/wordpress-share-buttons-plugin-addthis-220-code-injection 2011-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-registration-form-builder-with-submission-manager/registrationmagic-user-registration-plugin-with-custom-registration-forms-6026-unauthenticated-privilege-escalation-via-password-recovery 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hide-my-wp/hide-my-wp-ghost-security-firewall-5301-reflected-cross-site-scripting-via-url 2024-11-14T18:16:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rss-feed-widget/rss-feed-widget-297-authenticated-admin-stored-cross-site-scripting 2024-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wise-chat/wise-chat-263-reverse-tabnabbing 2019-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-memberships-pro/paid-memberships-pro-21210-cross-site-request-forgery-to-membership-modification 2024-06-18T18:44:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clearbit/clearbit-reveal-106-cross-site-request-forgery 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-piwik/wp-matomo-integration-wp-piwik-105-cross-site-scripting 2015-10-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-addons-for-elementor/responsive-addons-for-elementor-free-elementor-addons-plugin-and-elementor-templates-164-authenticated-contributor-stored-cross-site-scripting 2025-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-dashboard-twitter/wordpress-dashboard-tweeter-132-missing-authorization 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mpdf/wp-mpdf-351-cross-site-request-forgery-bypass 2021-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-post-order-category/custom-categorypost-type-post-order-160-missing-authorization 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gwolle-gb/gwolle-guestbook-253-cross-site-scripting 2018-07-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/starbox/starbox-the-author-box-for-humans-347-insecure-direct-object-reference 2024-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visualcomposer/visual-composer-260-multiple-cross-site-scripting 2020-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/getwid/getwid-gutenberg-blocks-207-authenticated-contributor-dom-based-stored-cross-site-scripting-via-countdown 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sureforms/sureforms-252-unauthenticated-payment-amount-validation-bypass-via-form_id 2026-03-27T12:56:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/perfect-woocommerce-brands/perfect-brands-for-woocommerce-204-unauthorized-brand-creation 2022-01-28T09:32:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/porto-functionality/porto-theme-functionality-373-missing-authorization 2025-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/remove-nofollow-commenter-link/remove-nofollow-commenter-url-10-cross-site-request-forgery-to-settings-update 2026-06-01T19:44:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wens-responsive-column-layout-shortcodes/evision-responsive-column-layout-shortcodes-23-authenticated-contributor-stored-cross-site-scripting 2023-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/capability-manager-enhanced/publishpress-capabilities-158-authenticated-sql-injection 2018-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leadcapture/wp-lead-capturing-pages-26-unauthenticated-sql-injection 2025-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdatatables/wpdatatables-lite-plugin-2011-sql-injection 2019-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/page-builder-pagelayer-drag-and-drop-website-builder-184-authenticatedcontributor-stored-cross-site-scripting-via-custom-attributes 2024-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/serial-codes-generator-and-validator/serial-codes-generator-and-validator-with-woocommerce-support-2414-authenticated-subscriber-stored-cross-site-scripting 2023-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-migration/all-in-one-wp-migration-and-backup-786-unauthenticated-information-disclosure-via-error-logs 2024-10-21T16:33:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-seo-pack/all-in-one-seo-pack-237-unauthenticated-stored-cross-site-scripting 2016-07-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedding-barcodes-into-product-pages-and-orders/barcode-generator-for-woocommerce-204-missing-authorization-to-authenticated-subscriber-settings-update 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/z-inventory-manager/plaininventory-316-unauthenticated-php-object-injection 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/8-degree-notification-bar/notification-bar-for-wordpress-118-unauthenticated-stored-cross-site-scripting 2022-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-import-export-for-woo/product-import-export-for-woocommerce-241-authenticatedshop-manager-arbitrary-file-upload 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-custom-fields-font-awesome/advanced-custom-fields-font-awesome-501-authenticated-contributor-stored-cross-site-scripting 2026-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real3d-flipbook-lite/3d-flipbook-pdf-viewer-pdf-embedder-real-3d-flipbook-wordpress-plugin-362-reflected-cross-site-scripting 2024-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rss-feed-post-generator-echo/echo-rss-feed-post-generator-5481-reflected-cross-site-scripting 2025-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-281-local-file-inclusion 2019-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/designthemes-core/designthemes-core-16-authenticated-contributor-stored-cross-site-scripting 2025-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/marker-io/markerio-116-cross-site-request-forgery 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/strong-testimonials/strong-testimonials-2314-reflected-cross-site-scripting 2018-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Blooog-v1.1/bloog-11-cross-site-scripting 2013-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/direct-payments-wp/direct-payments-wp-130-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lbg-vp2-html5-bottom/html5-video-player-535-reflected-cross-site-scripting 2026-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/freesia-empire/freesia-empire-141-authenticated-contributor-stored-cross-site-scripting 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pie-register/pie-register-3848-missing-authorization 2026-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/highlight-and-share/highlight-and-share-social-text-and-image-sharing-511-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/point-maker/point-maker-016-authenticated-contributor-stored-cross-site-scripting 2025-03-04T21:06:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-zoho/integration-for-contact-form-7-and-zoho-crm-bigin-117-cross-site-scripting 2021-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insert-php-code-snippet/insert-php-code-snippet-134-authenticated-admin-stored-cross-site-scripting 2024-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cache-images/cache-images-32-cross-site-request-forgery-to-image-upload 2022-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-rocket/social-rocket-social-sharing-plugin-1210-cross-site-request-forgery 2020-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-tickets-with-ticket-scanner/event-tickets-with-ticket-scanner-237-authenticated-admin-stored-cross-site-scripting 2024-08-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/homeroofer/homeroofer-2110-unauthenticated-local-file-inclusion 2025-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-404-pro/custom-404-pro-328-reflected-cross-site-scripting 2019-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insert-headers-and-footers/wpcode-206-missing-authorization-to-sensitive-key-disclosureupdate 2023-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-post/post-grid-gutenberg-blocks-for-news-magazines-blog-websites-postx-505-missing-authorization-to-limited-post-meta-modification 2026-04-15T18:53:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-wordpress-lms-plugin-431-missing-authorization-to-unauthenticated-orders-statistics-exposure 2025-12-15T16:22:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-wp-cleaner/easy-wp-cleaner-19-cross-site-request-forgery 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-customers-manager/woocommerce-customers-manager-297-reflected-cross-site-scripting 2024-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-donation-plugin-and-fundraising-platform-3161-unauthenticated-php-object-injection 2024-09-27T13:58:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/revolution/revolution-258-authenticated-subscriber-local-file-inclusion 2025-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpview/wpview-130-authenticatedadministrator-stored-cross-site-scripting 2023-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mage-eventpress/wpevently-436-authenticated-contributor-php-object-injection 2025-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-import/import-any-xml-or-csv-file-to-wordpress-346-cross-site-scripting 2018-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-map-no-api/simple-map-no-api-19-authenticated-contributor-stored-cross-site-scripting-via-width-parameter 2025-02-17T15:46:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ebay-feeds-for-wordpress/wp-ebay-product-feeds-331-authenticated-administrator-stored-cross-site-scripting 2023-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/opal-estate-pro/opal-estate-pro-property-management-and-submission-176-authenticated-contributor-stored-cross-site-scripting 2024-05-21T19:15:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booster-plus-for-woocommerce/booster-562-booster-plus-600-and-booster-elite-600-for-woocommerce-reflected-cross-site-scripting 2022-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theme-switcha/theme-switcha-34-authenticated-contributor-stored-cross-site-scripting 2025-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unyson/unyson-2718-sensitive-information-exposure 2018-09-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gourl-bitcoin-payment-gateway-paid-downloads-membership/gourl-bitcoin-payment-gateway-paid-downloads-membership-1413-arbitrary-file-upload 2018-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/metasync/search-atlas-seo-254-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-384-authenticated-subscriber-arbitrary-shortcode-execution 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/secure-copy-content-protection/secure-copy-content-protection-and-content-locking-498-unauthenticated-stored-cross-site-scripting-via-x-forwarded-for-header 2026-02-12T01:05:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-source-control-isc/image-source-control-lite-show-image-credits-and-captions-2280-reflected-cross-site-scripting 2025-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/total/total-theme-2119-authenticatedsubscriber-plugin-activation 2023-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ppv-live-webcams/paid-videochat-turnkey-site-html5-ppv-live-webcams-7323-missing-authorization 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bft-autoresponder/arigato-autoresponder-and-newsletter-2723-cross-site-request-forgery 2024-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp-restaurant-menu/restaurant-menu-by-motopress-246-cross-site-request-forgery 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/biagiotti-core/biagiotti-core-213-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/saaslauncher/saaslauncher-130-missing-authorization 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sogrid/sogrid-156-unauthenticated-local-file-inclusion 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gyan-elements/gyan-elements-221-reflected-cross-site-scripting 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stklcode-liveticker/liveticker-by-stklcode-122-authenticated-contributor-stored-cross-site-scripting 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imager-elementor/imager-for-elementor-204-missing-authorization 2025-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-change-monitor/seo-change-monitor-12-authenticated-subscriber-sql-injection 2023-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/laurent/laurent-elegant-restaurant-wordpress-theme-31-unauthenticated-local-file-inclusion 2026-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-customer-reviews/wp-customer-reviews-375-reflected-cross-site-scripting-via-wpcr3_fname-parameter 2026-02-18T16:21:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salon-booking-system/salon-booking-system-10296-missing-authorization 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/itactics/itactics-10-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/print-science-designer/print-science-designer-13155-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/socialsnap/social-media-plugin-by-social-snap-136-authenticated-admin-stored-cross-site-scripting 2025-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot/chatbot-448-unauthenticated-stored-cross-site-scripting-in-admin-dashboard 2023-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-feeds/ai-feeds-1011-unauthenticated-arbitrary-file-upload 2025-11-25T09:45:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/editionguard-for-woocommerce-ebook-sales-with-drm/editionguard-for-woocommerce-ebook-sales-with-drm-342-cross-site-request-forgery-to-privilege-escalation 2024-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-import-export-for-woo/product-import-export-for-woocommerce-import-export-product-csv-suite-256-missing-authorization 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-classified-listings/ultimate-classified-listings-17-authenticated-subscriber-stored-cross-site-scripting 2024-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/age-restriction/premium-age-verification-restriction-for-wordpress-302-unauthenticated-arbitrary-file-download 2025-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acf-extended/advanced-custom-fields-extended-0905-0911-unauthenticated-remote-code-execution-in-prepare_form 2025-12-02T18:43:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/helloprint/helloprint-146-reflected-cross-site-scripting 2022-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/faq-builder-ays/faq-builder-ays-171-reflected-cross-site-scripting 2024-11-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pdf-invoices-packing-slips/woocommerce-pdf-invoices-packing-slips-386-missing-authorization 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pz-linkcard/pz-linkcard-256-authenticated-contributor-server-side-request-forgery 2025-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-523-reflected-cross-site-scripting-via-shortcode-previews 2019-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-events-calendar/the-events-calendar-6122-missing-authorization 2023-07-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-custom-fields/advanced-custom-fields-510-missing-authorization-to-information-disclosure 2021-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-maps/wp-go-maps-10101-unauthenticated-arbitrary-record-creation 2026-06-19T06:01:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-buddypress-integration-xprofile-checkout-manager/buddypress-xprofile-checkout-manager-for-woocommerce-135-stored-cross-site-scripting 2022-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-blocks/essential-blocks-442-unauthenticated-local-file-inclusion 2023-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pocket-widget/pocket-widget-013-authenticated-admin-stored-cross-site-scripting 2024-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-membership-custom-registration-form-login-form-and-user-profile-413-insecure-direct-object-reference-to-unauthenticated-membership-modification 2025-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nd-projects/cost-calculator-18-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/os-diagnosis-generator/-1416-authenticated-subscriber-stored-cross-site-scripting-via-js-parameter 2026-05-19T12:02:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-file-manager/media-file-manager-142-directory-traversal-to-arbitrary-file-relocation 2018-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailerpress/mailerpress-204-authenticated-author-stored-cross-site-scripting-via-campaign-html-content-field 2026-06-08T19:47:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geo-targetly-geo-content/geo-content-60-authenticated-contributor-stored-cross-site-scripting 2025-01-06T16:26:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revinsite/revinsite-110-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-05T17:46:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/author-avatars/author-avatars-listblock-2125-missing-authorization 2026-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-video/responsive-video-10-authenticated-contributor-stored-cross-site-scripting 2024-08-20T17:23:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/css-js-files/css-js-files-150-authenticated-admin-arbitrary-file-read 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pixelbeds-channel-manager-booking-engine/pixelbeds-channel-manager-and-hotel-booking-engine-10-cross-site-request-forgery 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-engine/ai-engine-247-authenticated-admin-sql-injection 2024-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter-optin-box/wordpress-newsletter-plugin-noptin-165-open-redirect 2022-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/felan-framework/felan-framework-113-unauthenticated-sql-injection 2026-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integromat-connector/make-connector-1510-authenticated-administrator-arbitrary-file-upload 2025-09-03T21:08:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cloud-search/cloudsearch-300-cross-site-request-forgery 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gold-price-chart-widget/live-gold-price-silver-price-charts-widgets-24-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customer-reviews-woocommerce/customer-reviews-for-woocommerce-5360-missing-authorization 2023-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/friechat/friechat-wordpress-chat-plugin-103-sql-injection 2015-07-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-351-server-side-request-forgery 2013-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/card-elements-for-elementor/card-elements-for-elementor-122-authenticated-contributor-stored-cross-site-scripting 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-seo-premium/yoast-seo-premium-204-missing-authorization-to-zapier-key-reset 2023-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-address-encoder/email-encoder-0312-premium-1025-free-unauthenticated-stored-cross-site-scripting 2026-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/database-backup/database-backup-and-check-tables-automated-with-scheduler-2024-235-authenticated-administrator-sensitive-information-exposure 2025-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webd-woocommerce-advanced-reporting-statistics/advanced-woocommerce-product-sales-reporting-411-unauthenticated-sql-injection 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/art-theme/art-theme-31223-missing-authorization-to-authenticated-subscriber-theme-option-delete 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/picturesurf-gallery/picturesurf-gallery-12-arbitrary-file-upload 2012-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coordinadora/envos-coordinadora-woocommerce-1131-unauthenticated-sensitive-information-exposure 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/depicter/depicter-404-cross-site-request-forgery 2025-10-30T20:18:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profit-products-tables-for-woocommerce/active-products-tables-for-woocommerce-106-unauthenticated-php-object-injection 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aco-product-labels-for-woocommerce/product-labels-for-woocommerce-sale-badges-158-authenticated-admin-sql-injection 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exchange-addon-easy-us-sales-taxes/easy-us-sales-taxes-add-on-for-ithemes-exchange-110-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-23-related-posts-plugin/wordpress-related-posts-364-authenticated-admin-stored-cross-site-scripting 2021-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-ip-and-location/user-ip-and-location-22-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-04-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fv-wordpress-flowplayer/fv-flowplayer-video-player-75377212-insufficient-input-validation-to-unauthenticated-stored-cross-site-scripting-and-arbitrary-usermeta-update 2023-08-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sms/wp-sms-701-missing-authorization 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/apicona/apicona-2410-authenticated-subscriber-php-object-injection 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/commentator/commentator-253-reflected-cross-site-scripting 2016-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oceanpayment-creditcard-gateway/oceanpayment-creditcard-gateway-60-missing-authentication-to-unauthenticated-order-status-update 2025-10-14T19:36:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wedocs/wedocs-2116-missing-authorization-to-authenticated-subscriber-documentation-post-update 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-export-categories-taxonomies/export-categories-taxonomies-103-missing-authorization 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliate-disclosure-statement/affiliate-disclosure-statement-03-cross-site-request-forgery 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/breeze/breeze-213-authenticated-administrator-stored-cross-site-scripting-via-breeze_api_token 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contentstudio/contentstudio-137-missing-authorization 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nmedia-user-file-uploader/frontend-file-manager-212-missing-authorization 2022-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fancy-product-designer/fancy-product-designer-woocommerce-wordpress-648-unauthenticated-server-side-request-forgery-via-race-condition 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ooohboi-steroids-for-elementor/ooohboi-steroids-for-elementor-214-missing-authorization-leading-to-authenticated-subscriber-image-upload 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duplicator/duplicator-130-unauthenticated-remote-code-execution 2023-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comment-approved-notifier-extended/comment-approved-notifier-extended-52-authenticated-administrator-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/evently/evently-17-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-form-integration/advanced-form-integration-1750-authenticatedadministrator-sql-injection 2023-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/really-simple-google-tag-manager/really-simple-google-tag-manager-106-cross-site-request-forgery-via-plugin_activation 2023-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/listdom/listdom-501-missing-authorization 2025-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/convertforce-popup-builder/convertforce-popup-builder-007-stored-cross-site-scripting-via-entrance_animation 2026-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/scylla-lite/scylla-lite-183-authenticated-contributor-stored-cross-site-scripting-via-button-shortcode 2024-06-27T20:12:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-full-stripe-free/stripe-payment-forms-by-wp-full-pay-843-missing-authorization-to-unauthenticated-payment-record-manipulation-via-paymentintentid-parameter 2026-06-26T18:04:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/prettyphoto/wordpress-prettyphoto-123-authenticated-contributor-stored-cross-site-scripting-via-url-parameter 2024-06-05T15:42:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpress/powerpress-600-cross-site-scripting 2015-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inactive-logout/inactive-logout-322-missing-authorization 2023-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-database-backup/wp-database-backup-55-unauthenticated-information-disclosure 2020-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nextgen-gallery/nextgen-gallery-3210-sql-injection 2019-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/saphali-woocommerce-lite/saphali-woocommerce-lite-1813-cross-site-request-forgery-via-woocommerce_saphali_page_s_l 2023-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salient-core/salient-core-308-missing-authorization 2025-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dw-question-answer-pro/dw-question-answer-pro-136-missing-authorization-checks 2022-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ymc-smart-filter/filter-grids-292-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/next-page/next-page-152-authenticated-administrator-stored-cross-site-scripting-via-settings 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-subscription-forms/wp-subscription-forms-123-missing-authorization 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-best-elementor-templates-widgets-kits-woocommerce-builders-603-authenticated-contributor-stored-cross-site-scripting-via-fancy-text-widget 2024-09-10T17:52:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paypal-pay-buy-donation-and-cart-buttons-shortcode/paypal-pay-now-buy-now-donation-and-cart-buttons-shortcode-17-authenticated-admin-stored-cross-site-scripting 2024-05-22T12:58:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-social-icons/easy-social-icons-320-admin-stored-cross-site-scripting 2022-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/striking-r/striking-234-authenticated-contributor-local-file-inclusion 2024-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extensions-for-cf7/extensions-for-cf7-320-authenticated-admin-sever-side-request-forgery 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-seo-pack/premium-seo-pack-332-authenticated-subscriber-sql-injection 2025-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/templates-patterns-collection/cloud-templates-patterns-collection-122-sensitive-information-exposure-via-log-file 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-auto-top/wp-auto-top-293-cross-site-request-forgery 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-287-privilege-escalation 2016-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-slick-slider/responsive-slick-slider-wordpress-15-authenticated-contributor-content-injection 2023-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-post-widget/content-blocks-custom-post-widget-330-authenticated-contributor-local-file-inclusion-via-shortcode 2024-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dc-woocommerce-multi-vendor/wc-marketplace-4117-reflected-cross-site-scripting 2024-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribers-premium/icegram-express-pro-595-authenticated-admin-server-side-request-forgery 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/faq-for-woocommerce/xplainer-woocommerce-product-faq-woocommerce-accordion-faq-plugin-170-missing-authorization-to-authenticated-subscriber-stored-cross-site-scripting 2024-07-08T19:41:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pvn-auth-popup/pvn-auth-popup-100-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mediavine-control-panel/mediavine-control-panel-2106-unauthenticated-information-exposure 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/onelogin-saml-sso/onelogin-saml-sso-plugin-216-authentication-bypass 2016-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/majestic-support/majestic-support-the-leading-edge-help-desk-customer-support-plugin-105-unauthenticated-sensitive-information-exposure-through-unprotected-directory 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-nested-pages/nested-pages-3212-authenticated-contributor-stored-cross-site-scripting 2025-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wd-instagram-feed/10web-social-photo-feed-1428-reflected-cross-site-scripting 2021-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/photocrati-theme/photocrati-480-cross-site-scripting 2014-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-picasa-albums-viewer/google-photos-gallery-with-shortcodes-402-reflected-cross-site-scripting 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/felan-framework/felan-framework-114-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-activationdeactivation-via-process_plugin_actions 2025-10-15T18:07:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/export-wp-page-to-static-html/export-wp-page-to-static-htmlcss-410-missing-authorization 2025-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ulisting/ulisting-166-missing-authorization 2021-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-feed-pro/product-feed-pro-for-woocommerce-1240-cross-site-request-forgery-via-update_project 2023-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/realty-workstation/realty-workstation-109-authenticated-sql-injection 2022-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/remove-yellow-bgbox/remove-yellow-bgbox-10-cross-site-request-forgery 2026-05-19T12:07:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcode-ninja/shortcode-ninja-14-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedpress/embedpress-embed-pdf-google-docs-vimeo-wistia-embed-youtube-videos-audios-maps-embed-any-documents-in-gutenberg-elementor-3912-authenticated-contributor-stored-cross-site-scripting-via-embedpress_doc_custom_color 2024-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-abstracts-manuscripts-manager/wp-abstracts-262-cross-site-request-forgery 2023-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cision-block/cision-block-430-authenticated-contributor-stored-cross-site-scripting-via-id-parameter 2025-05-05T20:29:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/system-dashboard/system-dashboard-289-reflected-cross-site-scripting-via-x-forwarded-for 2024-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/change-wp-page-permalinks/wp-page-permalink-extension-154-missing-authorization-to-authenticated-subscriber-arbitrary-rewrite-rules-flush 2026-01-08T21:56:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/viabill-woocommerce/viabill-woocommerce-1170-missing-authorization-to-unauthenticated-settings-change 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fresh-framework/fresh-framework-1700-unauthenticated-remote-code-execution 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribers/icegram-express-email-subscribers-newsletters-and-marketing-automation-plugin-5723-unauthenticated-sql-injection-via-optin 2024-06-20T16:01:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/soundslides/soundslides-250-reflected-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.0/wordpress-core-401-cross-site-scripting-via-media-playlists 2014-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-vendors/woocommerce-products-vendor-2165-unauthenticated-sql-injection 2022-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bold-timeline-lite/bold-timeline-lite-120-authenticated-contributor-stored-cross-site-scripting 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gdpr-framework/the-gdpr-framework-by-data443-210-authenticated-admin-stored-cross-site-scripting 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tokenico-cryptocurrency-token-launchpad-presale-ico-ido-airdrop/cryptocurrency-token-launchpad-presale-ico-ido-airdrop-by-tokenico-247-missing-authentication-to-unauthenticated-presale-update 2025-11-20T19:19:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-social-media-share-buttons/woocommerce-social-media-share-buttons-130-cross-site-request-forgery-to-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/phone-orders-for-woocommerce/phone-orders-for-woocommerce-371-missing-authorization 2022-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thegem-elements-elementor/thegem-theme-elements-for-elementor-51051-authenticated-contributor-local-file-inclusion 2025-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multiparcels-shipping-for-woocommerce/multiparcels-shipping-for-woocommerce-1155-unauthenticated-stored-cross-site-scripting 2023-07-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hot-random-image/hot-random-image-192-authenticated-contributor-stored-cross-site-scripting-via-link-parameter 2025-05-21T20:43:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b-tiktok-feed/tiktok-feed-1021-missing-authorization 2025-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pods/pods-custom-content-types-and-fields-missing-authorization 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/checkout-gateway-iris/checkout-gateway-for-iris-13-missing-authorization 2026-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirection/redirection-229-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mapsvg/mapsvg-8534-unauthenticated-arbitrary-shortcode-execution 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/push-notifications-for-wp/push-notifications-for-wordpress-lite-601-cross-site-request-forgery 2021-11-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stop-registration-spam/stop-registration-spam-124-reflected-cross-site-scripting 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/live-composer-page-builder/page-builder-live-composer-1535-cross-site-request-forgery 2024-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clicksold-wordpress-plugin/wordpress-clicksold-idx-plugin-190-authenticated-admin-stored-cross-site-scripting 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-contact-form/wp-contact-form-16-cross-site-request-forgery-via-wpcf_adminpage 2024-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-text-widget/advanced-text-widget-201-cross-site-scripting 2012-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-whisper/link-whisper-free-065-authenticated-contributor-sql-injection 2023-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ap-plugin-scripteo/ads-pro-plugin-multi-purpose-wordpress-advertising-manager-489-unauthenticated-time-based-sql-injection-via-bsa_pro_id 2025-07-01T14:54:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pure-chat/pure-chat-live-chat-plugin-more-222-cross-site-request-forgery 2024-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-elements/jetelements-2620-authenticated-contributor-stored-cross-site-scripting 2024-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anything-order-by-terms/anything-order-by-terms-140-missing-authorization 2026-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/taxonomy-terms-order/category-order-and-taxonomy-terms-order-1460-cross-site-scripting 2015-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/otter-blocks/otter-blocks-gutenberg-blocks-page-builder-for-gutenberg-editor-fse-306-unauthetnicated-path-traversal-to-arbitrary-image-view 2024-11-26T16:32:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/aperitif/aperitif-15-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/usc-e-shop/welcart-e-commerce-2821-authenticatededitor-arbitrary-file-upload 2023-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amberlink/amber-144-reflected-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/noisa/noisa-260-unauthenticated-php-object-injection 2025-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/progress-planner/progress-planner-092-authenticated-subscriber-stored-cross-site-scripting 2024-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jamstack-deployments/jamstack-deployments-111-missing-authorization 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/toolpage/toolpage-161-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/configure-conference-room/wp-virtual-room-configurator-100-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-396-cross-site-request-forgery-to-order-status-update 2023-06-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/freemind-wp-browser/freemind-wp-browser-12-cross-site-request-forgery-to-cross-site-scripting 2022-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-310-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ays-popup-box/popup-box-477-authenticated-administrator-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/recipes-writer/recipes-writer-104-cross-site-scripting 2016-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extra-post-images/extra-post-images-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-05T17:43:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tablepress/tablepress-18-xml-external-entity-injection 2017-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/order-import-export-for-woocommerce/order-export-order-import-for-woocommerce-260-authenticated-admin-php-object-injection-via-form_data-parameter 2025-03-19T22:28:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fastbook-responsive-appointment-booking-and-scheduling-system/fastbook-responsive-appointment-booking-and-scheduling-system-11-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/swipe-hq-checkout-for-jigoshop/jigoshop-swipe-plugin-310-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/freshmail-newsletter/freshmail-158-multiple-sql-injections 2015-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirect-to-welcome-or-landing-page/redirect-wordpress-to-welcome-or-landing-page-20-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-with-phone-number/login-with-phone-number-1693-missing-authorization 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xpro-elementor-addons/140-widgets-xpro-addons-for-elementor-free-1443-authenticated-contributor-stored-cross-site-scripting-via-post-grid-widget 2024-08-26T22:18:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-events-calendar-bookings-and-tickets-4283-missing-authorization 2026-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jeg-elementor-kit/jeg-elementor-kit-265-authenticated-contributor-stored-cross-site-scripting-via-jkit-tabs-and-jkit-accordion-widgets 2024-06-14T12:29:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforo/wpforo-forum-304-unauthenticated-sql-injection 2026-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpex-replace/wpex-replace-db-urls-040-reflected-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-spod/spreadconnect-215-missing-authorization 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagemagick-sharpen-resized-images/imagemagick-sharpen-resized-images-117-authenticated-administrator-stored-cross-site-scripting 2024-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41060-authenticated-contributor-dom-based-stored-cross-site-scripting-via-video-box-widget 2024-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hello-event-widgets-for-elementor/hello-event-widgets-for-elementor-102-authenticated-contributor-stored-cross-site-scripting 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/super-blank/super-blank-120-authenticated-subscriber-arbitrary-content-deletion 2025-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-wp-security/ithemes-security-4612-stored-cross-site-scripting 2015-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rootspersona/rootspersona-375-missing-authorization 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagepost-content-shortcode/pagepost-content-shortcode-10-missing-authorization 2021-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-grid/post-grid-and-gutenberg-blocks-2289-authenticated-contributor-stored-cross-site-scripting 2024-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-category-posts-list/wp-category-post-list-widget-203-cross-site-request-forgery-via-gen_set_page 2023-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-owl-carousel/simple-owl-carousel-111-authenticated-contributor-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/irm-newsroom/irm-newsroom-1219-authenticated-contributor-stored-cross-site-scripting-via-irmcalendarview-shortcode 2025-06-12T13:12:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-quotation/simple-quotation-132-cross-site-request-forgery 2022-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-3528-missing-authorization 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/small-package-quotes-ups-edition/small-package-quotes-ups-edition-4516-unauthenticated-sql-injection 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/invoicing/wordpress-payments-plugin-getpaid-233-authenticated-stored-cross-site-scripting 2021-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stylish-cost-calculator/stylish-cost-calculator-815-authenticated-contributor-stored-cross-site-scripting 2025-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-power-bi-reports/powerbi-embed-reports-117-authenticated-contributor-stored-cross-site-scripting 2024-12-11T15:09:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gd-bbpress-attachments/gd-bbpress-attachments-25-stored-cross-site-scripting 2018-05-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder/profile-builder-user-profile-user-registration-forms-plugin-1160-authentication-bypass 2014-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fast-ebay-listings/fast-ebay-listings-21215-open-redirect 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-real-estate/essential-real-estate-442-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-06-03T16:39:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-lightbox/form-lightbox-21-unauthenticated-arbitrary-options-update 2016-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mage-eventpress/event-manager-and-tickets-selling-plugin-for-woocommerce-353-arbitrary-settings-change 2021-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recall/wp-recall-registration-profile-commerce-more-162611-authenticated-admin-sql-injection 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dont-break-the-code/dont-break-the-code-31-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/categorify/categorify-1074-missing-authorization-in-categorifyajaxdeletecategory 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/jobscout/jobscout-114-cross-site-request-forgery-to-notice-dimissal 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/evergreen-post-tweeter/evergreen-post-tweeter-189-cross-site-request-forgery 2025-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themify-shortcodes/themify-shortcodes-209-authenticated-contributor-stored-cross-site-scripting-via-themify_button-shortcode 2024-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/magty/magty-106-unauthenticated-local-file-inclusion 2025-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cron-logger/cron-logger-130-missing-authorization 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor-pro/tutor-lms-pro-270-missing-authorization-to-sql-injection 2024-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tainacan/tainacan-100-unauthenticated-information-exposure 2025-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/meeting-scheduler-by-vcita/online-booking-scheduling-calendar-for-wordpress-by-vcita-442-authenticated-contributor-local-file-inclusion 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formcraft-form-builder/formcraft-basic-125-authenticated-admin-stored-cross-site-scripting 2022-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscribe-to-comments-reloaded/subscribe-to-comments-reloaded-220725-unauthenticated-sensitive-information-exposure 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-day-booking-calendar/multi-day-booking-calendar-101-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-events/ultimate-events-133-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/biolife/biolife-323-authenticated-contributor-local-file-inclusion 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-related-attachments-widget/list-related-attachments-216-authenticated-contributor-stored-cross-site-scripting 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/handmade-framework/handmade-framework-39-reflected-cross-site-scripting 2026-03-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/store-locator-widget/store-locator-widget-2025r1-authenticated-contributor-stored-cross-site-scripting 2025-02-18T19:26:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fat-services-booking/fat-services-booking-56-authenticated-subscriber-sql-injection 2025-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aoa-downloadable/downloable-by-american-osteopathic-association-010-unauthenticated-server-side-request-forgery 2025-03-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-test-email/test-email-117-reflected-cross-site-scripting 2026-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recall/wp-recall-registration-profile-commerce-more-162610-authenticated-contributor-protected-post-disclosure 2025-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feed-instagram-lite/gallery-for-social-photo-10027-cross-site-request-forgery-to-post-duplication 2022-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/job-manager-career/job-manager-career-143-sensitive-information-exposure 2023-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-extra-fields/wordpress-user-extra-fields-167-authenticated-subscriber-arbitrary-file-deletion-via-save_fields-function 2025-10-30T18:34:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content_timeline/content-timeline-442-sql-injection 2017-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpzoom-elementor-addons/wpzoom-addons-for-elementor-starter-templates-widgets-134-reflected-cross-site-scripting 2026-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-453-authorization-bypass-to-remove-category-attribute 2016-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-org-chart/simple-org-chart-234-missing-authorization 2023-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bnfw/better-notifications-for-wp-186-email-address-disclosure 2022-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-categories-post-footer/add-categories-post-footer-222-reflected-cross-site-scripting 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/devs-crm/devs-crm-manage-tasks-attendance-and-teams-all-together-118-unauthenticated-information-expsoure 2025-12-12T16:08:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ootb-openstreetmap/out-of-the-block-openstreetmap-283-authenticated-contributor-stored-cross-site-scripting-via-ootb_query-shortcode 2024-12-12T22:57:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nudgify/nudgify-social-proof-sales-popup-fomo-133-cross-site-request-forgery-via-sync_orders_manually 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/most-and-least-read-posts-widget/most-and-least-read-posts-widget-2520-authenticated-contributor-stored-cross-site-scripting 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/robo-gallery/photo-gallery-images-slider-in-rbs-image-gallery-3223-authenticated-admin-stored-cross-site-scripting 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/armember-membership/armember-4010-authenticatedsubscriber-privilege-escalation 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cost-calculator-builder-pro/cost-calculator-builder-pro-3172-authenticated-subscriber-server-side-request-forgery 2024-05-16T19:35:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/github-shortcode/github-shortcode-01-authenticated-contributor-stored-cross-site-scripting 2026-05-26T18:56:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/team-members/team-members-520-authenticated-editor-stored-cross-site-scripting 2022-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/taskbuilder/taskbuilder-407-missing-authorization 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpupper-share-buttons/wpupper-share-buttons-343-missing-authorization 2024-06-03T16:40:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-db/contact-form-to-db-by-bestwebsoft-messages-database-plugin-for-wordpress-172-authenticated-author-sql-injection 2024-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-maker/form-maker-by-10web-11519-unauthenticated-arbitrary-file-upload 2023-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mightyforms/contact-form-survey-form-builder-mightyforms-139-authenticated-contributor-stored-cross-site-scripting 2024-12-03T14:13:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-customizer-for-woocommerce/email-customizer-for-woocommerce-drag-and-drop-email-templates-builder-267-authenticated-administrator-stored-cross-site-scripting-via-email-template-content 2026-01-06T20:40:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-addons/master-addons-2071-authenticated-contributor-stored-cross-site-scripting-via-id-parameter 2025-03-03T19:57:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-to-database-extension/contact-form-7-to-database-extension-21032-csv-injection 2018-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-store-kit/ultimate-store-kit-elementor-addons-294-missing-authorization 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-widget-ninja/profile-widget-ninja-43-authenticated-contributor-stored-cross-site-scripting 2025-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-click-track/wp-click-tracker-073-reflected-cross-site-scripting 2025-07-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lazytasks-project-task-management/lazytasks-project-task-management-with-collaboration-kanban-and-gantt-chart-1229-missing-authorization-to-uanuthenticated-privilege-escalation 2025-12-11T15:07:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-maker/quiz-maker-6687-unauthenticated-sql-injection 2025-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powies-uptime-robot/powies-uptime-robot-097-authenticated-administrator-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-hotel-booking/wp-hotel-booking-207-unauthenticated-sql-injection 2023-10-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/power-zoomer/power-zoomer-12-arbitrary-file-upload 2013-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/appointment-hour-booking/appointment-hour-booking-1456-captcha-bypass 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unite-gallery-lite/unite-gallery-lite-15-cross-site-request-forgery-and-sql-injection 2015-07-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/graphina-elementor-charts-and-graphs/graphina-1810-authenticated-contributor-stored-cross-site-scripting 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woolentor-addons/shoplentor-288-missing-authorization-to-wordpress-option-modification 2024-05-20T19:43:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instawp-connect/instawp-connect-0125-missing-authorization 2026-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-elementor-addons-header-footer-template-library-dynamic-grid-carousel-and-remote-arrows-51028-authenticated-contributor-dom-based-stored-cross-site-scripting 2025-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-424-sql-injection 2015-08-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/esign-genie-for-wp/foxit-esign-for-wordpress-203-authenticated-admin-information-exposure 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mybb-cross-poster/mybb-cross-poster-10-authenticated-admin-stored-cross-site-scripting 2021-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/online-accessibility/accessibility-suite-by-online-ada-2011-sql-injection 2019-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/domain-check/domain-check-1016-reflected-cross-site-scripting-via-domain 2021-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/count-per-day/count-per-day-311-cross-site-scripting 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paypal-responder/paypal-responder-12-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pw-woocommerce-on-sale/pw-woocommerce-on-sale-139-missing-authorization 2025-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/library-bookshelves/library-bookshelves-510-authenticated-contributor-stored-cross-site-scripting 2025-02-17T15:44:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/salem/salem-theme-155-dom-based-cross-site-scripting 2015-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribers/email-subscribers-newsletters-5910-missing-authentication-to-unauthenticated-action-scheduler-task-execution 2025-12-11T21:13:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visual-slider/visualslider-sldier-111-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mf-gig-calendar/mf-gig-calendar-121-authenticated-admin-stored-cross-site-scripting 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wooenvato/woocommerce-envato-affiliates-121-missing-authorization 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-file-list/simple-file-list-4411-reflected-cross-site-scripting 2022-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aio-time-clock-lite/all-in-one-time-clock-lite-tracking-employee-time-has-never-been-easier-20-insecure-direct-object-reference-to-authenticated-subscriber-arbitrary-clocking-inout 2025-10-21T21:09:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-hopper/link-hopper-25-authenticated-administrator-stored-cross-site-scripting-via-hop_name-parameter 2026-02-13T18:33:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bravis-user/bravis-user-101-authentication-bypass-to-account-takeover 2025-08-22T18:31:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/pagelayer-208-authenticated-contributor-information-exposure 2026-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bne-testimonials/bne-testimonials-207-authenticated-contributor-stored-cross-site-scripting 2023-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mxchat-basic/mxchat-ai-chatbot-for-wordpress-246-unauthenticated-blind-server-side-request-forgery 2025-10-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/client-dash/client-dash-220-authenticated-admin-cross-site-scripting 2019-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uptime-robot-monitor/uptime-robot-plugin-for-wordpress-23-authenticated-contributor-sql-injection 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-code-manager/fluentsnippets-1050-cross-site-request-forgery 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-paginate/wp-paginate-218-authenticated-admin-stored-cross-site-scripting 2022-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sydney-toolbox/sydney-toolbox-130-authenticated-contributor-stored-cross-site-scripting 2024-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/liveforms/live-forms-484-missing-authorization 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eu-vat-for-woocommerce/euuk-vat-manager-for-woocommerce-21212-missing-authorization 2024-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customer-reviews-woocommerce/customer-reviews-for-woocommerce-5381-missing-authorization-via-manual-review-reminders 2023-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/per-page-add-to/per-page-add-to-head-144-authenticated-admin-stored-cross-site-scripting 2021-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gmace/gmace-152-cross-site-request-forgery-via-gmace_manager_client 2023-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enable-media-replace/enable-media-replace-418-authenticated-author-stored-cross-site-scripting-via-location_dir-parameter 2026-06-08T14:13:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-filter-posts/post-grid-master-3412-authenticated-contributor-local-file-inclusion 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-feed-pro/product-feed-pro-for-woocommerce-by-adtribes-woocommerce-product-feeds-for-google-facebookmeta-bing-more-1331-sensitive-information-exposure-via-log-files 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-1082-unauthenticated-sql-injection 2018-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-to-chat/form-to-chat-app-116-authenticated-contributor-stored-cross-site-scripting 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-analytify/analytify-google-analytics-dashboard-for-wordpress-422-cross-site-request-forgery 2022-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-clone-any-post-type/wp-clone-any-post-type-36-open-redirect 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quicksand-jquery-post-filter/quicksand-post-filter-jquery-plugin-311-missing-authorization-via-quicksand_admin_ajax 2024-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/podlove-podcasting-plugin-for-wordpress/podlove-podcast-publisher-4012-authenticated-contributor-sql-injection 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-language-switch/user-language-switch-1610-authenticated-administrator-stored-cross-site-scripting-via-tab_color_picker_language_switch-parameter 2026-02-13T18:31:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/footnotes-made-easy/footnotes-made-easy-307-unauthenticated-stored-cross-site-scripting 2025-11-03T16:03:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-from-files/download-from-files-148-arbitrary-file-upload 2021-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailerpress/mailerpress-142-authenticated-contributor-server-side-request-forgery 2026-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elex-woocommerce-dynamic-pricing-and-discounts/elex-woocommerce-dynamic-pricing-and-discounts-212-reflected-cross-site-scripting 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-user-listing/simple-user-listing-192-reflected-cross-site-scripting-via-as 2023-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-crm-system/wp-crm-system-329-authenticated-administrator-stored-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gotmls/anti-malware-security-and-brute-force-firewall-42387-authenticated-contributor-php-object-injection 2026-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-comment-images/embed-images-in-comments-06-cross-site-scripting 2017-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/asmember/asmember-154-authenticated-administrator-stored-cross-site-scripting 2023-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wr-nitro/nitro-by-woorockets-179-missing-authorization-to-arbitrary-plugin-installation 2021-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wise-chat/wise-chat-283-csv-injection 2020-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-options-editor/advanced-options-editor-10-reflected-cross-site-scripting 2025-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lt-unleashed/lt-unleashed-111-authenticated-contributor-local-file-inclusion-via-template-parameter 2025-12-11T14:19:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-560-cross-site-request-forgery-via-invoices__change_status-action 2026-06-05T11:05:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/material-dashboard/material-dashboard-146-unauthenticated-privilege-escalation 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mybrain-utilities/mybrain-utilities-108-authenticated-contributor-stored-cross-site-scripting 2025-09-09T17:56:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-elementor-addons/happy-addons-for-elementor-3107-authenticated-contributor-stored-cross-site-scripting-via-image-stack-group-widget 2024-05-15T19:30:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gsheetconnector-gravity-forms/gsheetconnector-for-gravity-forms-1327-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-installation 2025-10-10T20:59:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gs-testimonial/gs-testimonial-slider-329-unauthenticated-arbitrary-shortcode-execution 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-eMember/wp-emember-1022-reflected-cross-site-scripting 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-390-authentication-bypass 2023-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/animated-pixel-marquee-creator/animated-pixel-marquee-creator-100-cross-site-request-forgery-via-marquee-parameter 2025-12-11T14:25:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reftagger-shortcode/reftagger-shortcode-11-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-symposium-pro/wp-symposium-pro-1601-cross-site-request-forgery 2016-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ghostkit/ghost-kit-341-unauthenticated-local-file-inclusion 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-data-filter-and-taxonomy-filter/mdtf-meta-data-and-taxonomies-filter-138-unauthenticated-local-file-inclusion 2026-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/charety/charety-202-authenticated-subscriber-arbitrary-file-upload 2026-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribers/email-subscribers-newsletters-5910-authenticated-administrator-php-object-injection 2025-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sa-post-author-filter/kikx-simple-post-author-filter-10-reflected-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/collectchat/chatbot-for-wordpress-by-collectchat-249-unauthenticated-stored-cross-site-scripting 2026-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/yourjourney/your-journey-198-prototype-pollution-to-reflected-cross-site-scripting 2023-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/colibri-page-builder/colibri-page-builder-10227-authenticated-administrator-sql-injection-via-post_id 2023-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jobwp/wordpress-job-board-and-recruitment-plugin-jobwp-21-sensitive-information-exposure 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pie-calendar/pie-calendar-128-authenticated-contributor-stored-cross-site-scripting 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/backup-wd/backup-by-10web-1020-reflected-cross-site-scripting 2021-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/co-marquage-service-public/co-marquage-service-publicfr-0571-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress-import-export/learnpress-export-import-wordpress-extension-for-learnpress-404-reflected-cross-site-scripting 2024-11-14T15:47:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/partymaker/partymaker-1115-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/templately/templately-225-improper-authorization-to-arbitrary-post-deletion 2023-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/gutenberg-blocks-with-ai-by-kadence-wp-page-builder-features-3245-authenticated-contributor-stored-dom-based-cross-site-scripting-via-html-data-attributes 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sassy-social-share/sassy-social-share-3360-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/disqus-comment-system/disqus-comment-system-276-remote-code-execution 2014-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-map-route-planner/wp-map-route-planner-100-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-dynamic-text-extension/contact-form-7-dynamic-text-extension-501-cross-site-request-forgery 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-health/wp-umbrella-update-backup-restore-monitoring-2170-unauthenticated-local-file-inclusion 2024-12-07T16:24:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/catch-base/catch-base-346-authenticated-author-stored-cross-site-scripting 2024-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-travel-engine/wp-travel-engine-tour-booking-plugin-tour-operator-software-667-authenticated-subscriber-arbitrary-file-deletion-via-file-renaming 2025-10-08T16:24:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/updraftplus/updraftplus-wordpress-backup-plugin-1950-nonce-leak-to-authorization-bypass 2015-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/everest-backup/everest-backup-233-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-808-cross-site-request-forgery-to-arbitrary-media-deletion 2023-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formidable/formidable-form-builder-20503-unauthenticated-information-disclosure 2017-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integration-for-contact-form-7-and-pipedrive/integration-for-pipedrive-and-contact-form-7-wpforms-elementor-ninja-forms-120-cross-site-request-forgery 2024-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/justrows-free/justrows-free-02-reflected-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-duplicator/post-duplicator-223-cross-site-scripting 2021-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mihdan-index-now/index-now-263-cross-site-request-forgery-via-reset_form 2024-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profitori/profitori-2060-2113-missing-authorization-to-unauthenticated-privilege-escalation-via-stocktend_object-endpoint 2025-05-30T18:08:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/logistics-hub/logisticshub-116-unauthenticated-arbitrary-file-upload 2025-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/vw-fitness/vw-fitness-434-missing-authorization 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sp-announcement/wp-announcement-208-authenticated-administrator-stored-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vc-tabs/tabs-371-authenticated-administrator-stored-cross-site-scripting 2022-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-email/contact-form-email-1148-reflected-cross-site-scripting 2016-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/realpress/realpress-109-missing-authorization-to-unauthenticated-page-creation-and-email-sending 2025-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-post-series/simple-post-series-244-reflected-cross-site-scripting 2025-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/transposh-translation-filter-for-wordpress/transposh-wordpress-translation-1096-authorization-bypass 2022-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/front-end-upload/front-end-upload-054-arbitrary-file-upload 2012-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blur-text/blur-text-100-authenticated-contributor-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribers/email-subscribers-newsletters-422-unauthenticated-file-download-w-information-disclosure 2019-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/foodie/foodie-114-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stopbadbots/block-bad-bots-and-stop-bad-bots-crawlers-and-spiders-and-anti-spam-protection-1023-missing-authorization-to-information-expsoure 2024-05-29T19:55:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpide/wpide-26-authenticated-administrator-arbitrary-file-upload 2022-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ean-for-woocommerce/ean-for-woocommerce-442-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acobot/acobot-live-chat-contact-form-20-cross-site-request-forgery-and-cross-site-scripting 2015-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.4/wordpress-core-341-cross-site-request-forgery 2012-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revisionary/publishpress-revisions-duplicate-posts-submit-approve-and-schedule-content-changes-3515-missing-authorization-to-authenticated-subscriber-sensitive-information-exposure 2024-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ag-custom-admin/agca-custom-dashboard-login-page-721-authenticated-admin-stored-cross-site-scripting 2024-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/drag-and-drop-multiple-file-upload-contact-form-7/drag-and-drop-multiple-file-upload-contact-form-7-1392-unauthenticated-limited-arbitrary-file-upload 2026-01-06T18:04:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sola-support-tickets/sola-support-tickets-313-cross-site-scripting 2016-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yayextra/yayextra-152-missing-authorization 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/codecolorer/codecolorer-0100-authenticated-administrator-stored-cross-site-scripting 2023-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-note/admin-notes-11-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcf7-redirect/redirection-for-contact-form-7-324-unauthenticated-php-object-injection-via-phar-deserialization 2025-08-19T12:30:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mailup/mailup-newsletter-sign-up-form-133-cross-site-scripting 2013-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/members-list/members-list-plugin-436-reflected-cross-site-scripting 2022-03-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-useronline/wp-useronline-270-cross-site-scripting 2010-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/car-repair-service/car-repair-services-auto-mechanic-40-reflected-cross-site-scripting 2021-05-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/openbook-book-data/openbook-book-data-352-cross-site-request-forgery 2022-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visit-site-link-enhanced/visit-site-link-enhanced-10-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/query-wrangler/query-wrangler-1551-reflected-cross-site-scripting-via-page-parameter 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/protected-posts-logout-button/protected-posts-logout-button-144-cross-site-request-forgery-to-settings-update 2023-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bread-butter/lead-capture-gated-content-newsletter-opt-ins-74857-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/canvasio3d-light/canvasio3d-light-250-authenticated-subscriber-arbitrary-file-upload 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-gpx-maps/wp-gpx-maps-1123-arbitrary-file-upload 2012-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pepro-cf7-database/peprodev-cf7-database-170-unauthenticated-stored-cross-site-scripting-via-form-submission 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mitm-bug-tracker/mitm-bug-tracker-10-reflected-cross-site-scripting 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-builder-add/landing-page-builder-1534-authenticated-author-stored-cross-site-scripting 2026-01-10T15:52:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kivicare-clinic-management-system/kivicare-clinic-patient-management-system-ehr-238-sql-injection 2022-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fv-wordpress-flowplayer/fv-flowplayer-video-player-7518727-stored-cross-site-scripting 2022-04-04T05:25:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpzoom-elementor-addons/wpzoom-addons-for-elementor-templates-widgets-1136-authenticated-contributor-stored-cross-site-scripting-via-image-box-widget 2024-05-14T10:38:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visitors-traffic-real-time-statistics/visitor-traffic-real-time-statistics-67-missing-authorization-to-information-disclosure 2023-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wdesignkit/wdesignkit-1040-authenticated-administrator-arbitrary-file-upload 2024-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-voice-mail/easy-voice-mail-125-unauthenticated-stored-cross-site-scripting-via-message 2026-02-13T16:18:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/external-image-replace/external-image-replace-108-cross-site-request-forgery-to-settings-update 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-7-style/contact-form-7-style-319-cross-site-request-forgery 2021-02-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-shortcode/event-espresso-custom-email-template-shortcode-100-reflected-cross-site-scripting 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/rara-business/rara-business-130-missing-authorization 2026-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder-pro/profile-builder-pro-3145-unauthenticated-php-object-injection 2026-05-01T17:10:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/print-invoices-packing-slip-labels-for-woocommerce/woocommerce-pdf-invoices-packing-slips-delivery-notes-and-shipping-labels-441-unauthenticated-stored-cross-site-scripting 2024-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/amplus/amplus-unspecified-version-cross-site-request-forgery 2013-11-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iframe/iframe-40-stored-cross-site-scripting 2015-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lockets/lockets-0999-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/commons-booking/cb-legacy-09418-authenticated-admin-stored-cross-site-scripting 2024-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/url-shortify/url-shortify-1121-unauthenticated-open-redirect-via-redirect_to-parameter 2026-02-17T16:15:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-plugin/advanced-contact-us-form-builder-for-wordpress-405-reflected-cross-site-scripting 2017-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/code-snippets/code-snippets-391-authenticated-contributor-php-code-injection-via-extract-and-php-filter-chains 2025-11-18T19:03:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ltl-freight-quotes-freightquote-edition/ltl-freight-quotes-freightquote-edition-2311-missing-authorization 2025-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/author-avatars/author-avatars-listblock-2117-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-blocks/wowstore-424-missing-authorization 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mail-gateway/wp-mail-gateway-18-missing-authorization-to-authenticated-subscriber-smtp-configuration-modification-via-wmg_save_provider_config-ajax-action 2026-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uicore-elements/uicore-elements-130-missing-authorization-to-unauthenticated-arbitrary-file-read 2025-08-11T17:05:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/block-for-font-awesome/block-for-font-awesome-144-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zerobounce/zerobounce-email-verification-validation-1011-authenticated-administrator-stored-cross-site-scripting 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cits-support-svg-webp-media-upload/cits-support-svg-webp-media-and-ttfotf-file-upload-210-authenticatedauthor-stored-cross-site-scripting-via-svg-upload 2023-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photoxhibit/photoxhibit-218-reflected-cross-site-scripting-via-gid 2016-10-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-e-commerce-shopping-cart/simple-ecommerce-shopping-cart-plugin-sell-products-through-paypal-312-reflected-cross-site-scripting-via-monthly_sales_current_year-parameter 2024-12-06T21:16:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theme-changer/theme-changer-14-cross-site-request-forgery 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-more-than-just-a-page-builder-3215-authenticated-contributor-dom-based-stored-cross-site-scripting 2024-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-verification/user-verification-1093-privilege-escalation 2022-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder-block/popupkit-215-authenticated-subscriber-sql-injection 2025-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/catch-themes-demo-import/catch-themes-demo-import-21-authenticated-admin-arbitrary-file-upload 2022-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-openpos/woocommerce-openpos-644-unauthenticated-arbitrary-file-deletion 2024-07-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-square/woocommerce-square-511-unauthenticated-insecure-direct-object-reference-to-sensitive-information-exposure-in-get_token_by_id 2026-01-09T14:05:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/taeggie-feed/taeggie-feed-0110-authenticated-contributor-stored-cross-site-scripting-via-name-attribute 2025-07-23T20:45:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/utubevideo-gallery/utubevideo-gallery-207-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wps-telegram-chat/wps-telegram-chat-460-authenticated-subscriber-unauthorized-access-to-telegram-bot-api 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/medilink-core/medilink-core-207-authenticated-contributor-local-file-inclusion 2026-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ulisting/ulisting-205-cross-site-request-forgery-leading-to-settings-change 2021-07-27T04:44:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fgallery_plus/fgallery-plus-all-versions-reflected-cross-site-scripting 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/administrator-z/administrator-z-20250927-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/content-audit/content-audit-191-cross-site-request-forgery-to-cross-site-scripting 2017-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/page-builder-pagelayer-189-authenticated-admin-stored-cross-site-scripting 2024-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addify-custom-registration-forms-builder/multiple-addify-plugins-various-versions-cross-site-request-forgery 2023-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-feed-pro/product-feed-pro-for-woocommerce-1244-cross-site-request-forgery 2023-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/checkview/checkview-form-checkout-testing-210-missing-authorization 2026-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/modernee/modernee-160-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-one-category-of-posts/category-of-posts-10-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-member-subscriptions/paid-member-subscriptions-2143-authenticated-contributor-stored-cross-site-scripting 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-database-backup/wp-database-backup-432-cross-site-scripting 2016-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-source-control-isc/image-source-control-2290-reflected-cross-site-scripting 2025-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wa-sticky-button/wp-sticky-button-13-unauthenticated-stored-cross-site-scripting 2022-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/xstore/xstore-973-unauthenticated-sql-injection 2026-06-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ps-ads-pro/ps-ads-pro-100-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-pay-counter/post-pay-counter-2731-php-object-injection 2017-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/infomaniak-connect-openid/infomaniak-connect-for-openid-102-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-03-06T18:46:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themify-ptb-search/themify-ptb-search-addon-139-reflected-cross-site-scripting 2022-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpr-admin-amplify/admin-amplify-130-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-2251-cross-site-request-forgery-via-give_cache_flush 2023-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multilevel-referral-plugin-for-woocommerce/multilevel-referral-affiliate-plugin-for-woocommerce-227-reflected-cross-site-scripting 2024-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/traveler/traveler-travel-booking-wordpress-theme-2786-cross-site-scripting 2020-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chaport/wp-live-chat-chatbots-plugin-for-wordpress-chaport-115-authenticated-administrator-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliate-for-woocommerce/affiliate-for-woocommerce-470-missing-authorization 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-7310-cross-site-request-forgery 2022-10-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-273-missing-authorization 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simply-schedule-appointments/appointment-booking-calendar-16929-insecure-direct-object-reference-to-authenticated-staff-sensitive-information-exposure 2026-03-12T19:08:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-202-reflected-cross-site-scripting 2006-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stop-spammer-registrations-plugin/stop-spammers-security-20226-authenticated-admin-stored-cross-site-scripting 2023-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/strong-testimonials/strong-testimonials-3218-missing-authorization-to-authenticated-contributor-rating-meta-update 2025-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-avatar/profilepress-453-unauthenticated-cross-site-scripting 2023-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-pagespeed-insights/insights-from-google-pagespeed-406-multiple-cross-site-request-forgery 2022-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ht-mega-for-elementor/ht-mega-absolute-addons-for-elementor-249-authenticated-contributor-stored-cross-site-scripting-via-countdown-widget 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddyforms/buddyforms-290-missing-authorization 2025-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-21-directory-traversal 2007-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alink-tap/alink-tap-131-cross-site-request-forgery-to-stored-cross-site-scripting 2025-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/directorist/directorist-866-missing-authorization 2026-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliates-manager/affiliates-manager-2913-authenticated-administrator-stored-cross-site-scripting 2022-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wxsync/wxsync-280-authenticated-contributor-stored-cross-site-scripting 2023-08-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quizlord/quizlord-20-authenticated-administrator-stored-cross-site-scripting 2022-11-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extensive-vc-addon/extensive-vc-addons-for-wpbakery-page-builder-19-unauthenticated-local-file-inclusion 2023-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/show-posts/weaver-show-posts-16-authenticatedcontributor-stored-cross-site-scripting-via-display-name 2023-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder/profile-builder-user-profile-user-registration-forms-361-cross-site-scripting-via-site_url-parameter 2022-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cm-download-manager/cm-download-manager-280-directory-traversal-to-arbitrary-file-deletion-and-denial-of-service 2021-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-tables/ninja-tables-505-missing-authorization 2024-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salesking/salesking-1615-missing-authorization-to-settings-change 2024-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forminator/forminator-1420-order-replay-vulnerability 2025-04-16T22:33:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-3164-missing-authorization-to-arbitrary-attachment-read 2023-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-as-customer-or-user/login-as-user-or-customer-21-cross-site-request-forgery-to-arbitrary-plugin-installationactivation 2021-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/squirrly-seo/seo-plugin-by-squirrly-seo-12316-reflected-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fancy-elementor-flipbox/fancy-elementor-flipbox-251-authenticated-contributor-stored-cross-site-scripting-via-fancy-elementor-flipbox-widget 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/404-page/404-page-by-seedprod-101-authenticated-administrator-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/calculated-fields-form/calculated-fields-form-1240-authenticated-admin-stored-cross-site-scripting 2023-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-membership-514-missing-authorization-to-authenticated-contributor-limited-page-content-modification 2026-05-04T19:57:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-analytics-for-wordpress/google-analytics-by-monster-insights-8140-authenticated-contributor-stored-cross-site-scripting 2023-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pixmagix/pixmagix-172-authenticated-author-path-traversal-in-layersid-parameter 2026-06-29T16:17:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/presto-player/the-ultimate-video-player-for-wordpress-420-authenticated-contributor-stored-cross-site-scripting-via-link_url-shortcode-attribute 2026-06-11T12:49:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maintenance-coming-soon-redirect-animation/maintenance-coming-soon-redirect-animation-230-ip-spoofing-to-bypass 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/designthemes-lms/designthemes-lms-104-unauthenticated-privilege-escalation 2025-12-02T07:26:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geodirectory/geodirectory-wp-business-directory-plugin-and-classified-listings-directory-28162-unauthenticated-sql-injection 2026-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-prayer/wp-prayer-154-cross-site-request-forgery 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sw_maxshop/maxshop-3620-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliate-wp/affiliatewp-2091-reflected-cross-site-scripting 2017-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hd-quiz/hd-quiz-220-221-cross-site-request-forgery-via-multiple-ajax-handlers 2026-06-26T12:56:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simpul-events-by-esotech/simpul-events-by-esotech-185-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slingblocks/slingblocks-gutenberg-blocks-by-funnelkit-formerly-woofunnels-160-authenticated-contributor-stored-cross-site-scripting 2025-08-20T16:47:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zenost-shortcodes/zenost-shortcodes-10-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-11T14:31:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booktics/booktics-1016-missing-authorization-to-get-items-via-rest-api-endpoints 2026-03-09T13:22:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ulisting/listing-classified-ads-business-directory-ulisting-205-reflected-cross-site-scripting 2021-07-27T04:26:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amerisale-re/amerisale-re-all-versions-reflected-cross-site-scripting 2013-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/juicer/juicer-1101-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contests-from-rewards-fuel/contests-by-rewards-fuel-2065-authenticated-contributor-stored-cross-site-scripting 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gs-logo-slider/gs-logo-slider-351-cross-site-request-forgery 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/couponxl/couponxl-450-unauthenticated-privilege-escalation 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-order-export-lite/advanced-order-export-for-woocommerce-313-cross-site-scripting 2020-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gravityforms/gravity-forms-2065-cross-site-scripting 2016-09-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder-pro/profile-builder-pro-3140-unauthenticated-sql-injection 2026-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comments-with-hypercommentscom/hypercomments-096-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-users/email-users-488-arbitrary-settings-update-via-cross-site-request-forgery 2022-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wptools/wp-tools-518-cross-site-request-forgery-to-arbitrary-file-renaming 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hot-random-image/hot-random-image-181-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/myweather/addweather-251-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-132-reflected-cross-site-scripting-via-dnf 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/convertbox-auto-embed/convertbox-auto-embed-wordpress-plugin-1019-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/commentluv/commentluv-2924-reflected-cross-site-scripting 2013-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-logout-register-menu/login-logout-register-menu-20-authenticated-contributor-stored-cross-site-scripting-via-llrmloginlogout-shortcode 2024-05-29T14:17:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatorwp/automatorwp-509-reflected-cross-site-scripting-via-a-0-o-search_field_value 2024-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementskit/elementskit-pro-360-authenticated-contributor-local-file-inclusion-via-price-menu-hotspot-and-advanced-toggle-widgets 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/WHMpress_Client_Area_Api/whmpress-whmcs-client-area-43-revision-3-authenticated-subscriber-arbitrary-options-update 2025-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/drag-and-drop-multiple-file-upload-contact-form-7/drag-and-drop-multiple-file-upload-contact-form-7-1365-cross-site-request-forgery-in-dnd_upload_cf7_upload-and-dnd_codedropz_upload_delete 2023-02-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bajaar/bajaar-highly-customizable-woocommerce-wordpress-210-unauthenticated-local-file-inclusion 2026-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/freshio/freshio-242-authenticated-contributor-local-file-inclusion 2026-01-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chat2/chat2-40-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-nested-pages/nested-pages-329-authenticated-administrator-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-283-unauthenticated-stored-cross-site-scripting 2024-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easy-gallery/wp-easy-gallery-wordpress-gallery-plugin-485-missing-authorization-to-authenticated-subscriber-gallery-manipulation 2024-09-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-sort-and-display/product-sort-and-display-for-woocommerce-241-missing-authorization 2024-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bebetter-social-icons/bebetter-social-icons-27-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ecwid-shopping-cart/ecwid-shopping-cart-6114-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/structured-content/structured-content-164-authenticated-contributor-stored-cross-site-scripting-via-sc_fs_local_business-shortcode 2025-07-23T20:37:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-recaptcha/login-no-captcha-recaptcha-1611-captcha-bypass-via-whitelisted-ip-address-spoofing 2022-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sully/sully-430-cross-site-request-forgery-to-stored-cross-site-scripting 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/question-answer/question-answer-1270-reflected-cross-site-scripting 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/giveasap/simple-giveaways-2481-authenticated-contributor-sql-injection 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-link-manager/page-link-manager-10b-cross-site-request-forgery-to-settings-update 2022-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcode-for-font-awesome/shortcode-for-font-awesome-14-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-multivendor-membership/wcfm-membership-woocommerce-memberships-for-multivendor-marketplace-2118-insecure-direct-object-reference-to-update-membership-payment 2026-02-09T11:17:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-more-than-just-a-page-builder-3202-authenticated-contributor-dom-based-stored-cross-site-scripting-via-path-widget 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/style-tweaker/style-tweaker-011-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/godaddy-email-marketing-sign-up-forms/godaddy-email-marketing-143-missing-authorization 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-peertube-playlist/embed-peertube-playlist-107-authenticated-editor-stored-cross-site-scripting 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-5921-authenticated-contributor-stored-cross-site-scripting-via-twitter-feed 2024-05-29T18:31:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress-activity-plus/buddypress-activity-plus-15-cross-site-request-forgery 2015-07-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sigmaforms-pro/sigma-forms-pro-145-unauthenticated-arbitrary-file-upload 2026-06-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lws-affiliation/lws-affiliation-234-missing-authorization 2024-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kalender-digital/calendaronline-kalenderdigital-1013-authenticated-contributor-stored-cross-site-scripting 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforms-lite/contact-form-by-wpforms-1993-missing-authorization 2026-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arprice/arprice-413-unauthenticated-php-object-injection 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fastest-cache/wp-fastest-cache-112-cross-site-request-forgery-via-wpfc_purgecache_varnish_callback 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventon-lite/eventon-wordpress-virtual-event-calendar-plugin-pro-454-free-227-cross-site-request-forgery-via-evo_eventpost_update_meta 2024-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-property-listings/easy-property-listings-353-authenticated-admin-stored-cross-site-scripting 2024-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-manager-companies/wp-job-manager-company-profiles-17-reflected-cross-site-scripting 2024-12-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/osm/osm-openstreetmap-603-authenticated-contributor-sql-injection 2024-07-08T20:10:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-event-manager/quick-event-manager-974-reflected-cross-site-scripting 2023-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-appointments/easy-appointments-31221-missing-authorization 2026-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/performance-monitor/performance-monitor-106-unauthenticated-server-side-request-forgery-via-url-parameter 2026-03-20T15:10:03.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dealia-request-a-quote/dealia-request-a-quote-107-missing-authorization-to-authenticated-contributor-plugin-configuration-reset 2026-02-18T15:54:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/typofr/typofr-011-reflected-cross-site-scripting 2021-08-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/1-jquery-photo-gallery-slideshow-flash/zooeffect-111-reflected-cross-site-scripting 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/craw-data/craw-data-100-server-side-request-forgery 2022-08-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-list-manager/video-list-manager-17-missing-authorization 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-export-pro/wp-all-export-pro-178-authenticated-remote-code-execution 2022-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flaming-forms/flaming-forms-101-reflected-cross-site-scripting 2024-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feed-instagram-lite/gallery-for-social-photo-10025-subscriber-sql-injection 2022-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.9/wordpress-core-591-jquery-prototype-pollution 2022-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-action-network/action-network-144-reflected-cross-site-scripting 2025-01-08T22:09:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-imageflow2/wp-flow-plus-525-authenticated-author-stored-cross-site-scripting 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-stats-manager/wp-visitor-statistics-real-time-traffic-75-missing-authorization 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-sms/wp-sms-651-authenticated-contributor-stored-cross-site-scripting 2024-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcas/wpcas-107-reflected-cross-site-scripting 2026-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-time-capsule/backup-and-staging-by-wp-time-capsule-12225-missing-authorization 2026-05-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-csv-importer/wp-ultimate-csv-importer-657-missing-authorization 2022-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-addons-for-elementor-171056-unauthenticated-stored-cross-site-scripting-via-status-parameter-in-wpr_update_form_action_meta 2026-05-04T14:32:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gzseo/gzseo-2011-authenticated-contributor-authorization-bypass-to-stored-cross-site-scripting 2026-01-23T19:25:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-travel-engine/wp-travel-engine-621-missing-authorization-to-authenticated-contributor-plugin-settings-update 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexoslider/flexoslider-10004-reflected-cross-site-scripting 2025-06-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-export-pro/wp-all-export-pro-191-authenticated-shopmanager-arbtirary-options-update 2025-02-07T03:24:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/laika-pedigree-tree/laika-pedigree-tree-14-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/medizin/medizin-197-unauthenticated-local-file-inclusion 2025-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sms-alert/smsalert-woocommerce-375-authenticated-contributor-stored-cross-site-scripting-via-sa_subscribe-shortcode 2024-10-28T22:36:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-stock-manager/stock-manager-for-woocommerce-360-cross-site-request-forgery 2026-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pkt1-centro-de-envios/pkt1-centro-de-envios-121-reflected-cross-site-scripting 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/traveler-code/traveler-code-311-unauthenticated-arbitrary-sql-injection 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/database-backup/database-backup-and-check-tables-automated-with-scheduler-2024-236-authenticated-administrator-arbitrary-file-deletion 2025-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/verweise-wordpress-twitter/verweise-wordpress-twitter-10-2-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/interactive-world-maps/interactive-world-maps-2414-reflected-cross-site-scripting 2024-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clerkio/clerk-382-authorization-bypass-via-insufficient-validation 2022-11-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/front-end-only-users/front-end-users-3232-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-grid/video-grid-121-reflected-cross-site-scripting 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bacon-ipsum/bacon-ipsum-24-authenticated-contributor-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/finance-calculator-with-application-form/financial-calculator-221-authenticated-contributor-stored-cross-site-scripting 2024-12-19T18:03:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-bar/notification-bar-22-cross-site-request-forgery 2025-10-02T22:34:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-facebook-likebox/easy-social-feed-656-cross-site-request-forgery 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bm-builder/bm-content-builder-31633-authenticated-contributor-arbitrary-file-download 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quotes-and-tips/quotes-and-tips-by-bestwebsoft-120-cross-site-scripting 2015-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-with-fancybox/popup-with-fancybox-35-authenticated-subscriber-sql-injection-via-shortcode 2023-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-styles/gallery-styles-134-authenticated-contributor-stored-cross-site-scripting 2025-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/colibri-page-builder/colibri-page-builder-10263-authenticated-contributor-stored-cross-site-scripting 2024-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-addons/master-addons-for-elementor-20994-authenticated-author-stored-cross-site-scripting 2024-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mantenimiento-web/mantenimiento-web-08-cross-site-request-forgery 2022-10-31T15:54:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/autoptimize/autoptimize-277-unsafe-file-upload-to-cross-site-scripting 2020-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-524-server-side-request-forgery 2019-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amazon-scraper/amazon-scraper-11-cross-site-request-forgery-to-stored-cross-site-scripting-via-settings-update 2026-05-19T12:06:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-527-authenticated-agent-privilege-escalation 2026-03-02T11:03:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-mstoreapp-mobile-app/mstoreapp-mobile-208-901-unauthenticated-privilege-escalation 2025-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/payment-gateway-for-telcell/payment-gateway-for-telcell-203-open-redirect 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give-donation-modules-for-divi/give-divi-donation-modules-200-sensitive-information-dislcosure 2025-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/vapester/vapester-1110-unauthenticated-local-file-inclusion 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-posts-carousel/wp-posts-carousel-1312-authenticated-contributor-php-object-injection 2025-05-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contus-video-gallery/wordpress-video-gallery-28-sql-injection 2015-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/filter-plus/product-filtering-by-categories-tags-price-range-for-woocommerce-116-missing-authorization-to-unauthenticated-plugin-settings-modification 2025-12-11T15:04:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-paypal-gateway/payment-gateway-for-paypal-on-woocommerce-9053-missing-authorization 2025-11-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/printful-shipping-for-woocommerce/printful-integration-for-woocommerce-222-cross-site-request-forgery 2023-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/litespeed-cache/litespeed-cache-701-authenticated-editor-server-side-request-forgery 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woozap/wp-avcl-automation-helper-formerly-wpflyleads-34-authenticated-subscriber-server-side-request-forgery 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gatormail-smart-forms/gatormail-smartforms-110-authenticated-contributor-stored-cross-site-scripting 2025-01-10T19:03:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geodatasource-country-region-dropdown/geodatasource-country-region-dropdown-101-authenticated-contributor-stored-cross-site-scripting 2024-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dynamic-font-replacement-4wp/dynamic-font-replacement-dfr4wp-en-13-en-sql-injection 2013-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vanguard/vanguard-marketplace-digital-products-php7-21-cross-site-scripting 2020-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rankology-seo-and-analytics-tool/rankology-seo-and-analytics-tool-20-incorrect-authorization-to-authenticated-editor-header-footer-code-creation 2026-01-06T19:26:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-career-openings/easy-career-openings-04-sql-injection 2013-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-direct-menus/bp-direct-menus-100-authenticated-contributor-stored-cross-site-scripting 2025-09-29T15:28:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mybooktable/mybooktable-bookstore-360-authenticated-author-stored-cross-site-scripting 2026-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lws-optimize/lws-optimize-191-cross-site-request-forgery 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-carousel-for-visual-composer/ultimate-carousel-for-wpbakery-page-builder-26-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/purchase-and-expense-manager/purchase-and-expense-manager-112-cross-site-request-forgery-to-arbitrary-purchase-record-deletion 2025-12-11T14:33:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-crowdfunding/wp-crowdfunding-217-authenticated-admin-stored-cross-site-scripting 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/before-and-after/before-and-after-39-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inpost-gallery/inpost-gallery-212-cross-site-scripting 2016-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventON/eventon-4912-reflected-cross-site-scripting 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jeg-elementor-kit/jeg-elementor-kit-256-unauthenticated-authorization-bypass 2022-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/front-editor/front-user-submit-495-open-redirect 2025-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/adirectory/adirectory-wordpress-directory-listing-plugin-23-missing-authorization-to-authenticated-subscriber-arbitrary-post-deletion 2025-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-personal-message/simple-personal-message-200-authenticated-sql-injection 2016-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-cf7-db/advanced-contact-form-7-db-202-sensitive-information-exposure 2024-06-10T17:31:33.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/postmatic/replyable-subscribe-to-comments-and-reply-by-email-146-cross-site-scripting 2015-09-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor_widget_universal_video_player/universal-video-player-140-reflected-cross-site-scripting 2025-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/marketing-automation-by-azexo/marketing-automation-by-azexo-12780-authenticated-subscriber-privilege-escalation 2024-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ameliabooking/booking-for-appointments-and-events-calendar-amelia-12-unauthenticated-full-path-disclosure 2024-08-07T14:41:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rate-my-post/rate-my-post-star-rating-plugin-by-feedbackwp-424-unauthenticated-voting-on-scheduled-posts 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wwm-social-share-on-image-hover/wwm-social-share-on-image-hover-22-authenticated-administrator-stored-cross-site-scripting 2023-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-product-table-lite/woocommerce-product-table-lite-386-unauthenticated-arbitrary-shortcode-execution-reflected-cross-site-scripting 2024-11-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/code-engine/code-engine-033-authenticated-contributor-remote-code-execution 2025-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/page-builder-pagelayer-177-authenticated-author-stored-cross-site-scripting-via-headerfooter 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-page-sidebars/unlimited-page-sidebars-026-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easycart/wp-easycart-5410-authenticated-administrator-sql-injection-via-orderby 2023-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cyr3lat/cyr-to-lat-35-authenticated-sql-injection 2023-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booster-elite-for-woocommerce/elite-booster-for-woocommerce-717-authenticated-subscriber-arbitrary-file-upload 2024-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/depicter/depicter-slider-responsive-image-slider-video-slider-post-slider-206-cross-site-request-forgery-via-save 2024-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-whatsapp-button/add-chat-app-button-215-authenticated-administrator-stored-cross-site-scripting 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/analyticswp/analyticswp-212-unauthenticated-sql-injection 2025-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/job-listings/job-listings-01-011-unauthenticated-privilege-escalation-via-register_action-function 2025-05-02T11:32:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-tickets/event-tickets-521-open-redirect 2021-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ultrapress/ultrapress-122-authenticated-contributor-php-object-injection 2024-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woofunnels-aero-checkout/funnelkit-checkout-3103-unauthenticated-arbitrary-content-deletion 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/funnelkit-stripe-woo-payment-gateway/funnelkit-payment-gateway-for-stripe-woocommerce-11403-cross-site-request-forgery 2026-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/listihub/listihub-106-missing-authorization 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluid-responsive-slideshow/fluid-responsive-slideshow-227-cross-site-request-forgery 2016-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliates-manager/affiliates-manager-2913-csv-injection 2022-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/i-plant-a-tree/i-plant-a-tree-174-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/riode/riode-multi-purpose-woocommerce-1629-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/cloudme/cloudme-cloud-storage-file-sharing-wordpress-theme-122-unauthenticated-local-file-inclusion 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/convert-post-types/convert-post-types-14-reflected-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/floating-contact/floating-contact-button-27-authenticated-admin-stored-cross-site-scripting 2024-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-activity-log/user-activity-log-19-authenticated-administrator-sql-injection 2024-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-wordpress-lms-plugin-4265-unauthenticated-bypass-to-user-registration 2024-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/listings-for-buildium/listings-for-buildium-015-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salert/salert-121-missing-authorization-via-salert_save_settings_with_ajax 2023-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/miti/miti-153-reflected-cross-site-scripting 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smartcat-wpml/smartcat-translator-for-wpml-3172-authenticated-author-sql-injection-via-orderby-parameter 2025-09-10T18:45:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/recently-purchased-products-for-woo/recently-purchased-products-for-woo-113-authenticated-contributor-stored-cross-site-scripting-via-view-parameter 2025-03-04T19:18:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-products-filter/woof-products-filter-for-woocommerce-119-remote-code-execution 2018-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/counter-box/counter-box-wordpress-plugin-for-countdown-timer-counter-123-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/journey-analytics/journey-analytics-1012-cross-site-request-forgery 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-random-posts/ajax-random-posts-033-unauthenticated-php-object-injection 2024-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/error-log-viewer/error-log-viewer-by-bestwebsoft-111-cross-site-request-forgery 2021-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-reminders/email-reminders-205-authenticated-administrator-stored-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/site-mailer/site-mailer-123-unauthenticated-stored-cross-site-scripting 2025-02-27T23:34:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/cardealer/car-dealer-167-unauthenticated-php-object-injection 2025-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/exchange-addon-2checkout/2checkout-add-on-for-ithemes-exchange-110-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accordions/accordion-2315-missing-authorization 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pixtypes/pixtypes-1415-reflected-cross-site-scripting 2023-08-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shiftcontroller/shiftcontroller-employee-shift-scheduling-4923-cross-site-request-forgery-via-get 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jvm-rich-text-icons/jvm-rich-text-icons-123-authenticatedsubscriber-arbitrary-file-upload 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stagtools/stagtools-237-reflected-cross-site-scripting 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-digital-downloads/easy-digital-downloads-3211-unauthenticated-sensitive-information-exposure 2024-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-webinarsystem/webinarpress-1339-reflected-cross-site-scripting 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awesome-responsive-photo-gallery/image-gallery-responsive-photo-gallery-105-reflected-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hide-my-wp/hide-my-wp-ghost-7000-unauthenticated-open-redirect 2026-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anycomment/anycomment-0217-race-condition 2022-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-maker/form-maker-by-10web-11531-authenticated-administrator-stored-cross-site-scripting 2025-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fontsampler/fontsampler-0412-cross-site-request-forgery-to-cross-site-scripting 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flex-guten/flex-guten-125-authenticated-contributor-stored-cross-site-scripting-via-thumbnailhovereffect-parameter 2025-08-05T13:00:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/display-post-metadata/display-post-metadata-140-stored-cross-site-scripting 2021-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ml-slider/slider-gallery-and-carousel-by-metaslider-image-slider-video-slider-31060-authenticated-editor-php-object-injection 2026-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shopelement/shopelement-200-authenticated-contributor-stored-cross-site-scripting 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woomotiv/live-sales-notification-for-woocommerce-woomotiv-343-cross-site-request-forgery-via-ajax_cancel_review 2024-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-216-missing-authorization-to-unauthenticated-local-file-inclusion-arbitrary-settings-update-and-user-creation 2024-09-03T14:04:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ltl-freight-quotes-daylight-edition/ltl-freight-quotes-daylight-edition-227-authenticated-administrator-php-object-injection 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-gift-cards/yith-woocommerce-gift-cards-4120-missing-authorization-to-unauthenticated-woocommerce-settings-update 2024-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/postmagthemes-demo-import/postmagthemes-demo-import-107-authenticated-administrator-arbitrary-file-upload 2022-11-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-wordpress-lms-plugin-4165-reflected-cross-site-scripting 2022-06-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/about-me/about-me-1012-missing-authorization 2022-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-multi-currency/curcy-2125-missing-authorization-to-currency-exchange-retrieval 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpvivid-backuprestore/migration-backup-staging-wpvivid-09105-sensitive-information-exposure 2024-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-hover-effects-for-visual-composer/image-hover-effects-for-wpbakery-page-builder-20-authenticated-contributor-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-load-more/wordpress-infinite-scroll-ajax-load-more-712-authenticated-contributor-stored-cross-site-scripting-via-button_label-parameter 2024-10-01T21:01:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-job-board/simple-job-board-2121-authenticated-administrator-stored-cross-site-scripting 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/latepoint/latepoint-5193-unauthenticated-local-file-inclusion 2025-07-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mediaview/mediaview-112-reflected-cross-site-scripting-via-id-parameter 2025-03-26T12:57:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluentform/fluent-forms-520-authenticated-admin-stored-cross-site-scripting 2024-11-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-map-plugin/wp-google-map-plugin-237-reflected-cross-site-scripting 2015-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-dashboard-rss-feed/admin-dashboard-rss-feed-34-authenticated-administrator-stored-cross-site-scripting 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/review-manager/review-manager-220-missing-authorization 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sb-core/extensions-by-hocwp-team-0232-authentication-bypass 2024-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cms-commander-client/cms-commander-2287-authorization-bypass-through-use-of-insufficiently-unique-cryptographic-signature 2023-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/alright/alright-161-unauthenticated-local-file-inclusion 2025-09-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pgs-core/pgs-core-580-unauthenticated-sql-injection 2025-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modula-best-grid-gallery/image-gallery-photo-grid-video-gallery-21228-improper-authorization-to-authenticated-author-arbitrary-image-file-move 2025-11-14T16:51:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventlist/event-list-192-unauthenticated-local-file-inclusion 2025-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gps-plotter/gps-plotter-530-authenticated-administrator-stored-cross-site-scripting 2023-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpforo/wpforo-forum-209-cross-site-request-forgery 2022-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking/booking-calendar-10141-authenticated-contributor-stored-cross-site-scripting 2025-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-cross-site-scripting-via-template-name 2017-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-essential-kit-for-woocommerce-1/yith-essential-kit-for-woocommerce-1-2340-missing-authorization-to-authenticated-subscriber-limited-plugin-install-activation-and-deactivation 2024-07-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagerecycle-pdf-image-compression/imagerecycle-pdf-image-compression-3113-cross-site-request-forgery-to-settings-update-in-optimizeallon 2024-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/superb-social-share-and-follow-buttons/superb-social-media-share-buttons-and-follow-buttons-113-missing-authorization-via-spbsmajax 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/golo/golo-175-authenticated-contributor-local-file-inclusion 2026-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpress/powerpress-podcasting-111513-authenticated-author-stored-cross-site-scripting 2026-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yet-another-webclap-for-wordpress/yet-another-webclap-for-wordpress-02-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-05T16:45:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coschedule-by-todaymade/coschedule-338-cross-site-request-forgery 2023-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-register-profile-with-shortcode/wp-register-profile-with-shortcode-359-cross-site-request-forgery-to-user-password-reset 2024-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xlsx-viewer/xlsxviewer-211-authenticated-subscriber-arbitrary-file-deletion 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beds24-online-booking/beds24-online-booking-2023-authenticatedadministrator-stored-cross-site-scripting 2024-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cafe-lite/clever-addons-for-elementor-219-authenticated-contributor-stored-cross-site-scripting-via-multiple-cafe-widgets 2024-06-05T13:03:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-polo-payments/polopag-pix-automtico-para-woocommerce-209-unauthenticated-local-file-inclusion 2025-07-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/frontend-registration-contact-form-7/frontend-registration-contact-form-7-51-authenticated-editor-privilege-escalation 2024-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-photo-gallery/photo-gallery-by-ays-516-reflected-cross-site-scripting 2023-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html5-audio-player/html5-audio-player-best-wordpress-audio-player-plugin-2219-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets 2024-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-optimizer-lite/link-optimizer-lite-145-cross-site-request-forgery-to-cross-site-scripting 2022-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/metform/metform-elementor-contact-form-builder-332-cross-site-request-forgery-via-permalink_setup 2023-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bcm-duplicate-menu/bcm-duplicate-menu-112-cross-site-request-forgery 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smarty-for-wordpress/smarty-for-wordpress-3135-cross-site-request-forgery-via-displaysmartymanagementpage 2023-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/timeslot/time-slot-136-authenticated-contributor-stored-cross-site-scripting 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oliver-pos/oliver-pos-2426-unauthenticated-authorization-bypass-through-user-controlled-key-to-oliverauth-header 2026-05-19T12:03:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broken-link-checker/broken-link-checker-1102-authenticated-admin-stored-cross-site-scripting 2014-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordlift/wordlift-ai-powered-seo-schema-3542-missing-authorization-to-authenticated-subscriber-settings-update 2025-01-06T15:41:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/multioffice/multioffice-12-unauthenticated-local-file-inclusion 2026-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wysija-newsletters/mailpoet-newsletters-272-sql-injection 2016-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cross-rss/cross-rss-17-path-traversal 2014-05-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/safe-svg/svg-sanitizer-library-0154-cross-site-scripting-bypass 2023-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcomplete/wpcomplete-2955-missing-authorization 2026-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themeruby-multi-authors/themeruby-multi-authors-100-authenticated-contributor-stored-cross-site-scripting-via-before-and-after-shortcode-attributes 2026-01-23T19:24:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/onlywire-multi-autosubmitter/onlywire-multi-autosubmitter-124-cross-site-request-forgery-to-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uichemy/uichemy-442-authenticated-author-stored-cross-site-scripting 2026-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobsearch/jobsearch-306-authenticated-subscriber-insecure-direct-object-reference 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/joomsport-sports-league-results-management/joomsport-563-missing-authorization 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ays-chatgpt-assistant/ai-chatbot-with-chatgpt-and-content-generator-by-ays-274-missing-authorization 2026-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/page-builder-pagelayer-179-authenticated-admin-stored-cross-site-scripting 2023-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/countdown-builder/countdown-clock-232-pro-features-lock-bypass 2022-04-28T12:59:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/morningtime-lite/morningtime-lite-132-authenticated-contributor-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fat-event-lite/fat-event-lite-11-unauthenticated-local-file-inclusion 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-media-directory/simple-video-directory-142-unauthenticated-sql-injection 2024-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woozone/woocommerce-amazon-affiliates-wordpress-plugin-14010-unauthenticated-sql-injection 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/edd-invoices/easy-digital-downloads-invoices-103-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contextual-related-posts/contextual-related-posts-331-cross-site-request-forgery-in-crpclearcache 2023-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-notification-bar/wordpress-notification-bar-1310-authenticated-administrator-stored-cross-site-scripting 2024-07-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-login-openid/wordpress-social-login-and-register-discord-google-twitter-linkedin-7514-authenticated-contributor-stored-cross-site-scripting 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-seo/wp-meta-seo-4512-unauthenticated-stored-cross-site-scripting-via-referer-header 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-last-modified-info/wp-last-modified-info-195-insecure-direct-object-reference-to-authenticated-author-post-metadata-modification 2026-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/crm-perks-forms/crm-perks-forms-112-authenticated-administrator-stored-cross-site-scripting 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-update-variations-in-cart/woo-update-variations-in-cart-009-authenticated-subscriber-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leco-client-portal/client-portal-pro-562-authenticated-cp-client-arbitrary-file-download 2026-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-manager/file-manager-725-authenticated-administrator-directory-traversal 2024-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-block-editor/nexter-blocks-454-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets 2025-08-18T19:56:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/i-recommend-this/i-recommend-this-372-authenticated-subscriber-sql-injection-via-shortcode 2014-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theplus_elementor_addon/the-plus-addons-for-elementor-page-builder-4111-reflected-cross-site-scripting 2021-05-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coming-soon/coming-soon-page-by-seedprod-511-authenticated-stored-cross-site-scripting 2020-06-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ravpage/ravpage-240-reflected-cross-site-scripting 2026-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-image/popup-image-101-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-users-disable/disable-user-login-101-missing-authorization-to-unauthenticated-settings-update 2022-09-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-calendar/booking-calendar-wpdevart-3211-authenticated-admin-sql-injection 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/toocheke-companion/toocheke-companion-1194-authenticated-contributor-stored-cross-site-scripting 2026-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cf7-to-zapier/cf7-to-webhook-500-unauthenticated-server-side-request-forgery-via-cf7-field-placeholder-in-webhook-url-host 2026-06-17T18:15:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-501-sensitive-information-disclosure 2018-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supportcandy/supportcandy-341-cross-site-request-forgery 2025-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedpress/embedpress-3910-authenticatedcontributor-stored-cross-site-scripting-via-pdf-widget-url 2024-06-12T20:25:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thecartpress/thecartpress-ecommerce-shopping-cart-115-cross-site-scripting 2011-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/header-and-footer-script-adder/header-footer-script-adder-insert-code-in-header-body-footer-205-authenticated-contributor-stored-cross-site-scripting 2025-12-12T15:27:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-import-export-for-woo/product-import-export-for-woocommerce-174-missing-authorization-to-csv-import 2020-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/currency-switcher-for-woocommerce/currency-switcher-for-woocommerce-007-cross-site-request-forgery 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-email/contact-form-email-1265-cross-site-request-forgery 2019-08-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41027-authenticated-contributor-stored-cross-site-scripting-via-button 2024-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/zoya/zoya-14-unauthenticated-php-object-injection 2026-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-tickets/event-tickets-5263-missing-authorization 2025-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/material-dashboard/material-dashboard-145-authenticated-subscriber-local-file-inclusion 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thim-core/thim-core-233-cross-site-request-forgery 2025-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/consulting-elementor-widgets/consulting-elementor-widgets-130-authenticated-contributor-remote-code-execution 2024-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sis-handball/sis-handball-1045-authenticated-administrator-sql-injection-via-orderby 2023-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yet-another-stars-rating/yasr-yet-another-stars-rating-299-cross-site-scripting-via-source 2022-02-03T21:54:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redux-framework/redux-framework-458-authenticated-contributor-stored-cross-site-scripting-via-data-parameter 2025-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ditty-news-ticker/ditty-3124-reflected-cross-site-scripting 2023-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-type-converter/post-type-converter-06-cross-site-request-forgery 2025-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themify-shortcodes/themify-shortcodes-213-authenticated-contributor-stored-cross-site-scripting 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shariff/shariff-wrapper-469-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2024-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nicejob/nicejob-364-cross-site-request-forgery-to-stored-cross-site-scripting 2024-09-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-blocks-for-gutenberg/premium-blocks-gutenberg-blocks-for-wordpress-2127-authenticated-contributor-stored-cross-site-scripting 2024-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-calendar/my-calendar-3217-subscriber-reflected-cross-site-scripting 2021-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/captcha/captcha-436-444-plugin-backdoor 2017-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress-media/rtmedia-for-wordpress-buddypress-and-bbpress-479-missing-authorization 2026-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ameliabooking/booking-for-appointments-and-events-calendar-amelia-1235-unauthenticated-sql-injection-via-search 2025-11-15T15:54:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulk-edit-post-titles/bulk-edit-post-titles-500-missing-authorization-via-bulkupdateposttitles 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-simple-booking-calendar/wp-simple-booking-calendar-2010-reflected-cross-site-scripting 2024-09-12T18:24:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/boilerplate-extension/mainwp-boilerplate-extension-41-missing-authorization-to-plugin-settings-change 2023-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-manager/wordpress-download-manager-2996-cross-site-scripting 2019-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/porn-videos-embed/porn-videos-embed-091-authenticated-contributor-stored-cross-site-scripting 2025-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hash-form/hash-form-drag-drop-form-builder-119-unauthenticated-limited-file-upload 2024-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smtp-sendinblue/yaysmtp-13-authenticated-administrator-sql-injection 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-geo-posts-free/my-geo-posts-free-12-unauthenticated-php-object-injection 2024-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpgform/google-forms-090-unauthenticated-php-object-injection 2017-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easy-events/event-management-events-calendar-rsvp-event-tickets-plugin-384-cross-site-scripting 2022-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-custom-checkout-field/woo-custom-checkout-field-135-cross-site-scripting 2016-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-lead-form/video-lead-form-06-cross-site-scripting 2012-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/awin-data-feed/awin-data-feed-17-unauthenticated-stored-cross-site-scripting 2022-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stop-comment-spam/stop-comment-spam-053-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/taggbox-widget/taggbox-31-unauthenticated-php-object-injection 2024-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advance-search/advance-search-112-reflected-cross-site-scripting 2021-09-09T16:20:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/white-label-cms/white-label-cms-24-authenticated-administrator-php-object-injection 2022-12-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-1841-authenticated-contributor-sql-injection-via-compact_album_order_by-shortcode-parameter 2026-06-05T15:34:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/travel-monster/travel-monster-133-missing-authorization 2026-01-13T13:56:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/code-snippets/code-snippets-2143-reflected-cross-site-scripting 2022-05-18T13:17:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ad-invalid-click-protector/ad-invalid-click-protector-aicp-1252-cross-site-request-forgery-to-arbitrary-ban-deletion 2022-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/5-stars-rating-funnel/5-star-review-funnel-for-google-reviews-trustpilot-provenexpert-and-more-rratingg-1267-missing-authorization 2024-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tapfiliate/tapfiliate-322-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-2fa/wp-2fa-250-insecure-direct-object-reference-to-arbitrary-email-sending 2024-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41031-authenticated-contributor-dom-based-stored-cross-site-scripting-via-global-tooltip 2024-05-30T17:09:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-touch-slider/wp-touch-slider-22-reflected-cross-site-scripting 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/telsender/telsender-11414-unauthenticated-stored-cross-site-scripting-via-telegram-chat-title 2026-01-27T21:48:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-281-open-redirect 2008-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bricks/bricksbuilder-1961-authenticated-contributor-privilege-escalation-via-create_autosave 2025-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-album/responsive-image-gallery-gallery-album-203-missing-authorization-via-multiple-ajax-actions 2023-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-13976-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pixelyoursite/pixelyoursite-your-smart-pixel-tag-manager-9611-authenticated-administrator-stored-cross-site-scripting 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-photo-album-plus/wp-photo-album-plus-11-sql-injection 2008-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-wordfence-extension/mainwp-various-extensions-cross-site-request-forgery 2023-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/thumbs-rating/thumbs-rating-500-race-condition 2023-04-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-analytics-events/wp-google-analytics-events-280-reflected-cross-site-scripting 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/perfit-woocommerce/perfit-woocommerce-101-missing-authorization-to-unauthenticated-arbitrary-plugin-settings-deletion 2026-01-13T17:28:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enhanced-tooltipglossary/cm-tooltip-glossary-better-seo-and-uex-for-your-wp-site-334-reflected-cross-site-scripting 2016-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foodbakery-sticky-cart/foodbakery-sticky-cart-32-unauthenticated-php-object-injection 2025-04-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/form-block/form-block-101-cross-site-request-forgery 2023-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/woodmart/woodmart-704-unauthenticated-arbitrary-content-injection 2023-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gigpress/gigpress-2328-authenticated-subscriber-sql-injection 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-registration-form-builder-with-submission-manager/registrationmagic-custom-registration-forms-user-registration-payment-and-user-login-602-authenticated-admin-stored-cross-site-scripting 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-workflow-automation-lite/ai-workflow-automation-142-missing-authorization 2026-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-post-disclaimer/wp-post-disclaimer-103-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementary-addons/elementary-addons-204-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-bank/gallery-bank-wordpress-photo-gallery-plugin-3061-arbitrary-file-upload 2014-11-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-file-download-light/wp-file-download-light-133-authenticated-editor-stored-cross-site-scripting 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mobile-dj-manager/mdjm-event-management-1781-missing-authorization-to-unauthenticated-arbitrary-custom-event-field-deletion 2026-03-06T11:57:27.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-full-stripe-free/stripe-payment-forms-by-wp-full-pay-accept-credit-card-payments-donations-subscriptions-841-missing-authorization 2026-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/motors-car-dealership-classified-listings/motors-car-dealer-classifieds-listing-143-unauthenticated-arbitrary-file-upload 2022-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/appmaps/appmaps-11-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-bannerWithPlaylist/lambertgroup-allinone-banner-with-playlist-38-authenticated-contributor-sql-injection 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wordpress-popular-posts/wordpress-popular-posts-532-authenticated-arbitrary-file-upload 2021-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-inject/imageinject-115-cross-site-scripting 2018-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nelio-popups/nelio-popups-130-authenticated-contributor-stored-cross-site-scripting 2025-12-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zajax-ajax-navigation/zajax-ajax-navigation-04-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/animated-icon-banner-for-visual-composer/essential-doo-components-for-visual-composer-19-authenticated-contributor-stored-cross-site-scripting 2025-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tinymce-advanced/tinymce-advanced-419-cross-site-request-forgery 2014-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/teachpress/teachpress-907-authenticated-contributor-sql-injection 2025-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-table-builder/wp-table-builder-wordpress-table-plugin-139-reflected-cross-site-scripting 2021-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anber-elementor-addon/anber-elementor-addon-101-authenticated-contributor-stored-cross-site-scripting-via-banner-button-link 2025-08-15T14:49:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wikiloops-track-player/wikiloops-track-player-101-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2026-02-06T20:25:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-1359-insufficient-access-control-to-plugin-deactivation 2023-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-simple-firewall/shield-security-2108-unauthenticated-reflected-cross-site-scripting-via-message-parameter 2026-02-18T16:17:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geodirectory/geodirectory-2384-authenticated-contributor-stored-cross-site-scripting 2024-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/full-width-responsive-slider-wp/full-width-banner-slider-wp-117-reflected-cross-site-scripting-via-search_term 2023-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-product-catalogue/ultimate-product-catalog-423-authenticated-sql-injection 2017-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/abwp-simple-counter/simple-counter-103-authenticated-administrator-stored-cross-site-scripting-via-settings 2023-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/automatewoo/automatewoo-575-missing-authorization 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-currency/wbw-currency-switcher-165-authenticated-administrator-stored-cross-site-scripting 2022-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rss-includes-pages/rss-includes-pages-36-cross-site-scripting 2017-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/resoto/resoto-108-missing-authorization-leading-to-authenticated-subscriber-arbitrary-plugin-activation 2023-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b-carousel-block/b-carousel-block-responsive-image-and-content-carousel-115-missing-authorization-to-authenticated-subscriber-server-side-request-forgery 2025-11-04T17:38:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/printcart-integration/printcart-web-to-print-product-designer-for-woocommerce-240-authenticated-subscriber-sql-injection 2025-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spicy-blogroll/spicy-blogroll-100-local-file-inclusion 2013-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-catalog-for-woocommerce/pdf-catalog-for-woocommerce-1118-authenticated-subscriber-stored-cross-site-scripting 2025-12-04T16:30:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cleantalk-spam-protect/spam-protection-honeypot-anti-spam-by-cleantalk-671-authorization-bypass-via-reverse-dns-ptr-record-spoofing-to-unauthenticated-arbitrary-plugin-installation 2026-02-14T14:21:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/avcp/anac-xml-bandi-di-gara-75-authenticated-editor-stored-cross-site-scripting 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpcodefactory-helper/wpfactory-helper-170-reflected-cross-site-scripting 2024-09-12T15:26:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html5-video-player/html5-video-player-embed-and-play-videos-in-custom-player-2110-missing-authorization 2026-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpseo-local/yoast-seo-local-149-authenticated-contributor-stored-cross-site-scripting 2023-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/magical-addons-for-elementor/magical-addons-for-elementor-1139-authenticated-contributor-stored-cross-site-scripting 2024-06-05T15:35:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-maker/popup-maker-1171-missing-authorization-via-save_popup_enabled_state 2023-03-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdatatables/wpdatatables-lite-plugin-2011-cross-site-scripting 2019-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dc-woocommerce-multi-vendor/multivendor-marketplace-solution-for-woocommerce-wc-marketplace-384-reflected-cross-site-scripting 2021-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/intergeo-maps/google-maps-plugin-by-intergeo-232-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/use-any-font/use-any-font-620-unauthenticated-arbitrary-css-appending 2022-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp3-music-player-by-sonaar/mp3-audio-player-for-music-radio-podcast-by-sonaar-511-unauthenticated-server-side-request-forgery 2026-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/erident-custom-login-and-dashboard/erident-custom-login-and-dashboard-358-authenticated-stored-cross-site-scripting 2021-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/twitter-feeds/twitter-feeds-100-authenticated-contributor-cross-site-scripting-via-tweet_title-shortcode-attribute 2026-03-20T15:08:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-regenerate-select-crop/image-regenerate-select-crop-710-missing-authorization 2023-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/estatik-mortgage-calculator/mortgage-calculator-estatik-2011-reflected-cross-site-scripting 2023-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagelinks-interactive-image-builder-lite/imagelinks-interactive-image-builder-for-wordpress-153-authenticated-contributor-stored-cross-site-scripting 2022-12-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wedesin-html-sitemap/digihood-html-sitemap-311-reflected-cross-site-scripting 2025-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-2251-cross-site-request-forgery-via-save 2023-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/grip/grip-109-unauthenticated-local-file-inclusion 2025-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-security-audit-log/wp-activity-log-5631-unauthenticated-php-object-injection 2026-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jibu-pro/jibu-pro-17-authenticated-stored-cross-site-scripting 2018-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gwebpro-store-locator/g-web-pro-store-locator-21-reflected-cross-site-scripting 2024-12-20T18:44:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nextgen-gallery/nextgen-gallery-20-path-traversal 2014-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webapp-builder/webapp-builder-20-arbitrary-file-upload 2017-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexible-shipping/flexible-shipping-42415-missing-authorization 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uix-shortcodes/uix-shortcodes-203-unauthenticated-arbitrary-shortcode-execution 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/limit-login-attempts/limit-login-attempts-171-unauthenticated-stored-cross-site-scripting 2023-04-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js_composer/wpbakery-visual-composer-75-authenticated-contributor-stored-cross-site-scripting-via-post-author 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revslider/slider-revolution-414-directory-traversal 2014-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trusty-whistleblowing-solution/trusty-whistleblowing-201-missing-authorization 2025-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/activehelper-livehelp/activehelper-livehelp-live-chat-315-reflected-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/borderless/borderless-widgets-elements-templates-and-toolkit-for-elementor-gutenberg-148-authenticated-administrator-stored-cross-site-scripting 2023-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/reales-wp-real-estate-wordpress-theme/reales-wp-real-estate-wordpress-theme-212-missing-authorization-to-unauthenticated-attachment-deletion-and-favorite-property-updates 2025-04-23T19:41:25.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/noo-visionary-core/visionary-core-149-authenticated-subscriber-php-object-injection 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/uppercase/uppercase-122-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-monster/event-monster-120-authenticated-administrator-sql-injection 2022-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mikado-core/mikado-core-152-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-09-08T17:10:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dashboard-widgets-suite/dashboard-widgets-suite-341-authenticated-administrator-stored-cross-site-scripting 2023-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-ldap-login/simple-ldap-login-160-reflected-cross-site-scripting 2024-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-memory/memory-usage-398-cross-site-request-forgery-to-limited-plugin-installation-via-wpmemory_install_plugin-function 2025-07-26T16:22:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/libsyn-podcasting/libsyn-publisher-hub-132-sensitive-information-exposure 2023-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/classified-listing/classified-listing-ai-powered-classified-ads-business-directory-plugin-538-missing-authorization 2026-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kenta-blocks/kenta-blocks-responsive-blocks-and-block-templates-library-139-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/divelogs-widget/divelogs-widget-15-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-11T14:46:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/futurio-extra/futurio-extra-205-authenticated-contributor-stored-cross-site-scripting-via-advanced-text-block-widget 2024-06-11T08:10:30.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trust-payments-gateway-3ds2/trust-payments-gateway-3ds2-122-cross-site-request-forgery 2022-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/new-contact-form-widget/contact-form-widget-142-cross-site-request-forgery 2024-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shipengine-shipping-quotes/shipengine-shipping-quotes-107-unauthenticated-sql-injection 2025-02-11T21:10:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-slimstat/slimstat-analytics-5051-missing-authorization-via-delete_pageview 2023-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/database-to-excel/database-to-excel-10-cross-site-request-forgery 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-engine/ai-engine-332-authenticated-subscriber-server-side-request-forgery 2026-01-27T06:06:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bw-fitrush/fitrush-134-unauthenticated-local-file-inclusion 2025-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/koalendar-free-booking-widget/koalendar-events-appointments-booking-calendar-102-authenticated-contributor-stored-cross-site-scripting-via-height-parameter 2024-12-13T15:48:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-compress-image-optimizer/wp-compress-image-optimizer-all-in-one-62001-open-redirect-via-css 2024-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zephyr-project-manager/zephyr-project-manager-33201-missing-authorization 2025-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-products-by-custom-tax/woocommerce-products-by-custom-tax-22-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-11-10T15:00:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bridge-core/bridge-core-331-authenticated-contributor-stored-cross-site-scripting 2025-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oneclick-whatsapp-order/oneclick-chat-to-order-105-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chordpress/lewe-chordpress-397-cross-site-request-forgery-to-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wedocs/wedocs-ai-powered-knowledge-base-docs-documentation-wiki-ai-chatbot-2115-unauthenticated-sensitive-information-exposure 2026-01-08T17:31:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dans-gcal/dans-embedder-for-google-calendar-12-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/da-reactions/da-reactions-515-authenticated-contributor-stored-cross-site-scripting 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elex-helpdesk-customer-support-ticket-system/elex-wordpress-helpdesk-customer-ticketing-system-326-missing-authorization-to-authenticated-subscriber-privilege-escalation 2025-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sendpress/sendpress-newsletters-122331-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-emoji-one/wp-emoji-one-060-cross-site-request-forgery 2023-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clickdesk-live-support-chat-plugin/live-chat-from-clickdesk-live-chat-help-desk-plugin-for-websites-20-cross-site-scripting 2011-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/funnelforms-free/funnelforms-free-3732-authenticated-administrator-arbitrary-file-upload 2024-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-map-shortcode/google-map-shortcode-312-reflected-cross-site-scripting 2023-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-all-import/import-any-xml-or-csv-file-to-wordpress-362-authenticated-stored-cross-site-scripting 2021-11-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cool-tag-cloud/cool-tag-cloud-225-contributor-stored-cross-site-scripting 2021-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rss-feed-widget/rss-feed-widget-300-reflected-cross-site-scripting-via-_serverrequest_uri 2024-10-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-attachment-export/wp-attachment-export-024-arbitrary-file-download 2015-07-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tidio-live-chat/tidio-live-chat-chatbots-email-integration-520-sensitive-information-disclosure 2022-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/soledad/soledad-868-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/strong-testimonials/strong-testimonials-3216-unauthenticated-arbitrary-shortcode-execution 2025-11-05T19:34:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-embed-thumbnail-generator/videopack-formerly-video-embed-thumbnail-generator-20-remote-code-execution 2012-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-lite/contact-form-plugin-1125-authenticated-contributor-stored-cross-site-scripting 2025-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/mega-store-woocommerce/mega-store-woocommerce-59-missing-authorization-to-authenticated-subscriber-arbitrary-page-creation-and-settings-change 2026-02-18T15:50:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mobile-menu/wp-mobile-menu-2843-cross-site-request-forgery 2024-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-contact-form-iii/wp-contact-form-iii-162d-reflected-cross-site-scripting 2025-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-downloads-list/simple-downloads-list-143-missing-authorization-to-authenticated-subscriber-stored-cross-site-scripting 2025-11-07T14:19:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-party/illi-link-party-10-authenticated-admin-stored-cross-site-scripting 2024-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/transposh-translation-filter-for-wordpress/transposh-wordpress-translation-1091-remote-code-execution 2022-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gallery-plugin/gallery-by-bestwebsoft-469-authenticated-author-sql-injection 2023-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/edoc-employee-application/edoc-employee-job-application-113-reflected-cross-site-scripting 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-by-rank-math/rank-math-seo-102521-missing-authorization 2025-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/top-10/top-10-popular-posts-plugin-for-wordpress-324-missing-authorization-on-tptn_chart_data 2023-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gym-management/wpgym-6710-missing-authorization-to-authenticated-subscriber-privilege-escalation 2024-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customer-area/wp-customer-area-820-insecure-direct-object-reference-to-account-address-disclosure 2024-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/show-google-analytics-widget/show-google-analytics-widget-154-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-catalog-8/product-catalog-8-120-sql-injection 2016-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailster/mailster-103-reflected-cross-site-scripting 2024-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vk-blocks/vk-blocks-19422-missing-authorization-to-sensitive-information-exposure 2025-03-06T21:13:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-1364-local-file-inclusion 2016-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iubenda-cookie-law-solution/iubenda-235-failure-to-restrict-url-protocol 2020-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot-chatgpt/kognetiks-chatbot-for-wordpress-217-missing-authorization-to-authenticated-subscriber-assistant-update 2024-11-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/alt-manager/image-alt-text-manager-182-authenticated-author-stored-cross-site-scripting-via-post-title 2026-03-20T10:42:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kbucket/kbucket-416-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-db-booster/wp-db-booster-101-cross-site-request-forgery-to-database-cleanup 2025-12-19T15:05:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/socialv/socialv-social-network-and-community-buddypress-theme-2015-missing-authorization-to-arbitrary-file-download 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-203-remote-code-execution 2006-06-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mashsharer/social-media-share-buttons-381-authenticated-admin-stored-cross-site-scripting 2022-06-16T15:39:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/invoice-creator/invoice-generator-100-unauthenticated-account-takeover-via-weak-password-reset-validation-via-reset_user_id-parameter 2026-06-23T16:37:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mt-addons-for-elementor/mt-addons-for-elementor-106-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hover-effects/hover-effects-212-authenticated-administrator-sql-injection 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lifterlms/lifterlms-wp-lms-for-elearning-online-courses-quizzes-various-versions-authenticated-student-privilege-escalation 2025-11-12T14:27:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-private-content-plus/wp-private-content-plus-362-unauthenticated-information-exposure 2025-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zita-site-library/zita-elementor-site-library-163-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-10-15T21:49:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bee-layer-slider/bee-layer-slider-11-authenticated-contributor-stored-cross-site-scripting 2025-03-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stylish-price-list/stylish-price-list-690-arbitrary-image-upload 2021-09-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rapidexpcart/rapidexpcart-10-authenticated-level-8administrator-stored-cross-site-scripting 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gf-hubspot/crm-perks-various-plugins-various-versions-reflected-cross-site-scripting 2021-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/videowhisper-video-presentation/videowhisper-video-presentation-414-arbitrary-file-upload 2015-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/spotlight-social-photo-feeds/spotlight-social-media-feeds-171-unauthenticated-sensitive-information-disclosure 2025-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/omnisend-connect/email-marketing-for-woocommerce-by-omnisend-1138-sensitive-information-exposure 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce/woocommerce-942-postmessage-based-cross-site-scripting 2025-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-designer-pro/woocommerce-designer-pro-1926-unauthenticated-arbitrary-file-upload 2025-10-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/idealauto/idealauto-386-unauthenticated-local-file-inclusion 2026-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mobile-app/mobile-app-canvas-382-missing-authorization 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/profile-builder/profile-builder-202-reflected-cross-site-scripting 2014-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/style-admin/style-admin-143-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/wproject/wproject-580-missing-authorization-to-unauthenticated-content-modification-and-deletion 2025-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themegrill-demo-importer/themegrill-demo-importer-2006-missing-authorization 2026-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/athens/athens-116-unauthenticated-local-file-inclusion 2026-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/football-pool/football-pool-2126-authenticated-contributor-stored-cross-site-scripting 2025-09-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geo-mashup/geo-mashup-11318-unauthenticated-time-based-sql-injection-via-map_post_type-parameter 2026-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/everest-forms/everest-forms-203-unauthorized-form-submission-via-disabled-forms 2023-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/method/method-21-arbitrary-file-download 2013-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aone-sms/service-finder-sms-system-200-authentication-bypass 2025-09-18T16:13:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reviewx/reviewx-167-unauthenticated-csv-injection 2023-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/superstorefinder-wp/super-store-finder-70-unauthenticated-sql-injection-to-stored-cross-site-scripting 2025-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/igniteup/igniteup-coming-soon-and-maintenance-mode-340-information-disclosure 2019-11-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-graphql/wpgraphql-253-cross-site-request-forgery 2026-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/backup-backup/backup-migration-139-authenticated-admin-os-command-injection-via-url 2023-12-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/perfmatters/perfmatters-220-authenticated-subscriber-stored-cross-site-scripting 2023-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/void-visual-whmcs-element/wpbakery-visual-composer-whmcs-elements-104-authenticated-contributor-stored-cross-site-scripting-via-void_wbwhmcse_laouts_search-shortcode 2024-11-20T13:55:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-slider/master-slider-responsive-touch-slider-398-authenticated-contributor-stored-cross-site-scripting 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/church-admin/church-admin-5023-authenticated-contributor-stored-cross-site-scripting 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/basepress/knowledge-base-documentation-wiki-plugin-basepress-2161-missing-authorization 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-social-icons/easy-social-icons-320-authenticated-admin-cross-site-scripting-and-missing-authorization-checks 2022-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/houzez-login-register/houzez-login-register-325-authenticated-subscriber-privilege-escalation-via-account-takeover 2024-09-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gutenverse/gutenverse-ultimate-wordpress-fse-blocks-addons-ecosystem-353-authenticated-contributor-stored-cross-site-scripting-via-separatoriconsvg 2026-05-04T14:22:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-geo-posts-free/my-geo-posts-free-12-php-object-injection 2017-04-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blog-manager-wp/blog-manager-wp-105-authenticated-administrator-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-comment-fields/comments-extra-fields-for-postpages-and-cpt-50-missing-authorization 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpjobboard/wpjobboard-5111-authenticated-subscriber-path-traversal 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirect-404-to-parent/redirect-404-to-parent-131-reflected-cross-site-scripting 2021-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/hostmev2/hostme-v2-70-unauthenticated-arbitrary-file-deletion 2026-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-2251-authenticated-contributor-stored-cross-site-scripting-via-give_form_grid-shortcode 2023-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/builderpress/builderpress-201-unauthenticated-local-file-inclusion 2026-03-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdevart-pricing-table/pricing-table-builder-151-cross-site-request-forgery 2025-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/brid-video-easy-publish/target-video-easy-publish-383-authenticated-contributor-stored-cross-site-scripting-via-brid_override_yt-shortcode 2025-01-28T22:37:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themebeez-toolkit/themebeez-toolkit-135-missing-authorization 2025-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nelio-content/nelio-content-405-missing-authorization 2025-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-login-woocommerce/loginsignup-popup-22-cross-site-request-forgery-to-arbitrary-options-update 2022-01-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tagembed-widget/tagembed-embed-twitter-feed-google-reviews-youtube-videos-tiktok-rss-feed-more-social-media-feeds-48-authenticated-contributor-stored-cross-site-scripting 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-elements/jetelements-for-elementor-2741-missing-authorization 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accelerated-mobile-pages/amp-for-wp-107732-authenticated-stored-cross-site-scripting 2021-12-15T10:11:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-elementor-page-builder/the-plus-addons-for-elementor-554-authenticated-contibutor-stored-cross-site-scripting-via-hover-card 2024-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/new-album-gallery/album-gallery-wordpress-gallery-163-authenticated-editor-php-object-injection-via-gallery-meta 2025-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/accesspress-anonymous-post/accesspress-anonymous-post-284-authenticated-contributor-arbitrary-redirect 2023-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Newspaper/newspaper-news-woocommerce-wordpress-theme-67-arbitrary-options-update 2016-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/omni-secure-files/omni-secure-files-0113-arbitrary-file-upload 2012-06-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/i-recommend-this/i-recommend-this-383-authenticated-admin-stored-cross-site-scripting 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-whatsapp/wp-chat-app-363-authenticated-administrator-stored-cross-site-scripting 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/business/business-13-authenticated-contributor-stored-cross-site-scripting 2024-10-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/expand-maker/read-more-accordion-357-authenticated-administrator-sql-injection-via-orderby-parameter 2026-05-19T12:12:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ecab-taxi-booking-manager/taxi-booking-manager-for-woocommerce-121-missing-authorization 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-optimize/wp-optimize-452-authenticated-author-arbitrary-file-deletion-via-original-file-post-meta 2026-05-06T15:34:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zikzag-core/zikzag-core-145-unauthenticated-local-file-inclusion 2025-06-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blobinator/kontxt-content-advisor-22-cross-site-request-forgery 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/robokassa/robokassa-payment-gateway-for-woocommerce-181-reflected-cross-site-scripting 2025-07-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mingle-forum/mingle-forum-10333-stored-cross-site-scripting 2013-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-event-calendar/timely-all-in-one-events-calendar-110-cross-site-scripting 2013-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking/booking-calendar-101415-authenticated-editor-sql-injection 2026-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/trustmate-io-integration-for-woocommerce/trustmateio-integration-for-woocommerce-1812-authenticated-subscriber-arbitrary-blog-option-update 2022-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/zoho-crm-forms/zoho-crm-lead-magnet-1788-reflected-cross-site-scripting 2024-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/clock-in-portal/clock-in-portal-21-cross-site-request-forgery-to-designation-deletion 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpress/powerpress-837-arbitrary-file-upload 2020-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sendsms/sendsms-129-reflected-cross-site-scripting 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-search-to-menu/ivory-search-wordpress-search-plugin-555-missing-authorization-to-authenticated-subscriber-index-creation 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/themify-ultra/themify-ultra-735-privilege-escalation 2023-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-woo-labels/advanced-woo-labels-product-labels-for-woocommerce-193-authenticated-contributor-stored-cross-site-scripting 2024-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/imagerecycle-pdf-image-compression/imagerecycle-pdf-image-compression-3113-missing-authorization-to-settings-update-in-disableoptimization 2024-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/drm-protected-video-streaming/s3player-woocommerce-elementor-integration-421-authenticated-contributor-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-social-icons/easy-social-icons-322-admin-cross-site-scripting 2022-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-elementor-addons-header-footer-template-library-dynamic-grid-carousel-remote-arrows-5102-authenticated-contributor-stored-cross-site-scripting-via-open-map-widget 2024-11-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/runners-log/runners-log-392-authenticated-contributor-stored-cross-site-scripting 2025-06-05T17:54:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stylish-cost-calculator/stylish-cost-calculator-831-authenticated-contributor-stored-cross-site-scripting 2026-01-09T14:36:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/envo-elementor-for-woocommerce/envos-elementor-templates-widgets-for-woocommerce-144-cross-site-request-forgery-via-ajax_plugin_activation 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-13975-authenticated-contributor-stored-cross-site-scripting-via-back-to-top-widget 2024-05-31T17:38:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-imageflow2/wp-flow-plus-523-authenticated-contributor-stored-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-custom-google-tag-manager/add-custom-google-tag-manager-103-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/turbosmtp/turbosmtp-46-reflected-cross-site-scripting-via-page 2024-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/notify-odoo/notify-odoo-101-cross-site-request-forgery-to-settings-update 2026-05-14T18:52:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-addons-for-gutenberg/spectra-gutenberg-blocks-21917-unauthenticated-information-disclosure-in-sensitive-data 2026-02-02T16:58:28.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/twchat/two-way-chat-send-or-receive-messages-to-your-user-314-cross-site-request-forgery 2021-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/antideo-email-validator/antideo-email-validator-1010-unauthenticated-sql-injection 2026-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/funnelforms-free/funnelforms-free-34-missing-authorization-to-enabledisable-dark-mode 2023-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/if-so/if-so-dynamic-content-personalization-1803-authenticated-admin-stored-cross-site-scripting 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-popups-lite/wp-popups-2148-authenticated-contributor-stored-cross-site-scripting 2023-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-seo-pack/premium-seo-pack-wp-seo-plugin-16002-unauthenticated-information-exposure 2024-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-41024-authenticated-contributor-stored-cross-site-scripting 2024-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-structured-data-schema/schema-plugin-for-divi-gutenberg-shortcodes-432-authenticated-contributor-object-instantiation 2025-10-02T22:14:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/buddyboss-theme/buddyboss-theme-2460-missing-authorization 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widget-options/widget-options-4061-missing-authorization 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/education-base/education-base-308-missing-authorization 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/winterlock/cross-site-request-forgery-124-cross-site-request-forgery 2025-02-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/memberpress/memberpress-1120-reflected-cross-site-scripting 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-ajax-page-loader/advanced-ajax-page-loader-277-cross-site-request-forgery-to-arbitrary-file-upload 2024-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-symposium/wp-symposium-1410-cross-site-scripting 2014-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cpl/copperleaf-photolog-016-sql-injection 2010-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-3012-open-redirect 2018-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easy-guide/easy-guide-100-unauthenticated-sql-injection 2025-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliate-reviews/affiliate-reviews-106-authenticated-contributor-stored-cross-site-scripting-via-numcolumns-parameter 2025-07-15T18:16:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dpepress/dpepress-03-authenticated-contributor-stored-cross-site-scripting 2025-05-20T20:34:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-recall/wp-recall-162447-reflected-cross-site-scripting 2021-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/two-factor-login-telegram/wp-2fa-with-telegram-30-two-factor-authentication-bypass 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/metform/metform-elementor-contact-form-builder-330-unauthenticated-csv-injection 2023-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-baidu-map/wp-baidu-map-122-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-10-29T14:00:09.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ship-per-product/ship-per-product-210-missing-authorization 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-media-category-management/wp-media-category-management-22-reflected-cross-site-scripting 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-social-media-plus/social-share-icons-social-share-buttons-362-missing-authorization-to-notice-dismissal 2024-04-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpo365-login/wpo365-400-authenticated-subscriber-server-side-request-forgery 2026-01-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ideal-wp-login-logo-changer/custom-login-logo-117-cross-site-request-forgery 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/debug-functions-time/find-slow-functions-actions-filters-hooks-140-reflected-cross-site-scripting 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/survey-maker/survey-maker-customer-satisfaction-survey-chat-survey-calculaton-form-payment-surveys-428-authenticated-admin-stored-cross-site-scripting 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-photo-feed/simple-photo-feed-140-missing-authorization 2025-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/team-showcase-supreme/team-members-87-authenticated-administrator-stored-cross-site-scripting-via-custom_css-parameter 2026-06-29T14:28:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Avada/avada-7116-authenticated-admin-sql-injection-via-entry 2024-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/companion-sitemap-generator/companion-sitemap-generator-4511-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-businessdirectory/wp-businessdirectory-315-reflected-cross-site-scripting 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/goolytics-simple-google-analytics/goolytics-simple-google-analytics-111-authenticated-administrator-stored-cross-site-scripting 2022-09-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sydney-toolbox/sydney-toolbox-128-authenticated-contributor-stored-cross-site-scripting-via-filterable-gallery 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-plus/media-library-folders-836-insecure-direct-object-reference-to-authenticated-author-arbitrary-attachment-deletion-and-rename 2026-02-13T22:18:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatlive/chatlive-201-unauthenticated-sql-injection 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexi/flexi-428-authenticated-contributor-stored-cross-site-scripting-via-flexi-form-tag-shortcode 2025-10-02T22:16:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wppizza/wppizza-3182-reflected-cross-site-scripting 2023-10-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reveal-listing/reveal-listing-33-unauthenticated-privilege-escalation 2025-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scriptless-social-sharing/scriptless-social-sharing-330-authenticated-contributor-stored-cross-site-scripting 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-admin-logo-changer/wp-admin-logo-changer-10-plugins-settings-update-via-cross-site-request-forgery 2021-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mrkv-vchasno-kasa/vchasno-kasa-103-unauthenticated-log-file-clearing 2025-07-18T17:11:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-font-awesome-share-icons/wp-font-awesome-share-icons-111-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-05-21T18:38:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/acf-frontend-form-element/frontend-admin-by-dynamiapps-3292-missing-authorization-to-authenticated-subscriber-account-takeover-via-user_id-url-query-parameter 2026-05-27T14:51:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/removehide-author-date-category-like-entry-meta/removehide-author-date-category-like-entry-meta-21-cross-site-request-forgery 2023-09-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-image-alt-text-generator-for-wp/ai-image-alt-text-generator-for-wp-115-authenticated-subscriber-sensitive-information-exposure 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pretix-widget/pretix-widget-105-authenticated-contributor-local-file-inclusion 2024-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forumwp/forumwp-forum-discussion-board-212-reflected-cross-site-scripting-via-url-parameter 2024-12-05T19:44:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-hover-effects-addon-for-elementor/image-hover-effects-elementor-addon-133-authenticated-stored-cross-site-scripting 2021-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/aurum/aurum-wordpress-woocommerce-shopping-theme-402-missing-authorization-to-authenticated-subscriber-demo-content-import 2025-01-06T17:57:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/online-booking-engine/ezee-online-hotel-booking-engine-100-authenticated-administrator-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/security-antivirus-firewall/security-antivirus-firewall-saf-235-ip-address-spoofing-to-protection-mechanism-bypass 2024-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpsite-follow-us-badges/follow-us-badges-3111-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/todays-date-inserter/todays-date-inserter-121-authenticated-contributor-stored-cross-site-scripting 2025-09-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-library/link-library-727-cross-site-request-forgery-to-library-settings-reset 2021-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Avada/avada-7115-authenticatedcontributor-sensitive-information-exposure-via-form-entries 2024-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-1568-multiple-reflected-cross-site-scripting 2021-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/export-wp-page-to-static-html/export-wp-page-to-static-html-pdf-434-unauthenticated-cookie-exposure-via-log-file 2025-12-12T15:39:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-list-manager/link-list-manager-10-reflected-cross-site-scripting 2021-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/csv-wc-product-import-export/csv-product-import-export-for-woocommerce-100-authenticated-subscriber-sql-injection 2024-10-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpgetapi/wpget-api-2210-authenticated-administrator-server-side-request-forgery 2025-03-06T20:56:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gumroad/gumroad-310-authenticated-contributor-stored-cross-site-scripting 2023-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qi-blocks/qi-blocks-132-authenticated-contributor-local-file-inclusion 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-scheduled-posts/schedulepress-504-insufficient-authorization-to-authenticated-contributor-arbitrary-post-modifications 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-ads-manager/simple-ads-manager-2594-2596-information-disclosure 2015-04-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tablepress/tablepress-312-authenticated-contributor-dom-based-stored-cross-site-scripting-via-multiple-parameters 2025-05-22T19:56:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vc-tabs/tabs-406-authenticated-administrator-stored-cross-site-scripting 2024-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/event-registration/event-registration-60003-sql-injection 2010-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/whydowork-adsense/whydowork-adsense-12-cross-site-request-forgery 2014-07-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/full-customer/full-customer-3125-authenticated-contributor-local-file-inclusion 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/aldo/aldo-1010-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theplus_elementor_addon/plus-addons-for-elementor-page-builder-416-authentication-bypass 2021-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popularis-extra/popularis-extra-1210-cross-site-request-forgery 2026-01-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/testimonial-post-type/testimonial-post-type-121-authenticated-contributor-stored-cross-site-scripting-via-auto_play-parameter 2025-07-17T16:33:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foogallery-captions/foogallery-captions-102-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/crayon-syntax-highlighter/crayon-syntax-highlighter-284-cross-site-scripting 2016-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/transcoder/transcoder-135-cross-site-request-forgery 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/totalpoll-lite/total-poll-lite-4120-missing-authorization 2026-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-master/contact-form-master-107-reflected-cross-site-scripting 2024-12-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-449-authenticated-subscriber-arbitrary-shortcode-execution 2026-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/falang/falang-multilanguage-for-wordpress-1352-missing-authorization-to-translation-update-and-information-exposure 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/werk-aan-de-muur/werk-aan-de-muur-15-authenticated-administrator-stored-cross-site-scripting 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/err-our-team/inpersttion-for-theme-10-authenticated-contributor-arbitrary-function-call 2025-08-14T20:16:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-gift-cards-premium/yith-woocommerce-gift-cards-premium-3190-unauthenticated-arbitrary-file-upload 2022-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-currency-switcher/woocs-1374-reflected-cross-site-scripting-via-ajax-action 2022-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-schemaorg-rich-snippets/schema-all-in-one-schema-rich-snippets-144-cross-site-scripting 2017-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpo365-login/wordpress-microsoft-office-365-azure-ad-login-153-stored-cross-site-scripting 2021-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fast-wp-speed/fast-wp-speed-100-reflected-cross-site-scripting 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/newsxpress/newsxpress-107-cross-site-request-forgery-to-notice-dismissal 2024-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-member-subscriptions/paid-membership-subscriptions-effortless-memberships-recurring-payments-content-restriction-2111-missing-authorization-via-pms_stripe_connect_handle_authorization_return 2024-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tune-library/tune-library-163-missing-authorization-to-authenticated-subscriber-stored-cross-site-scripting-via-csv-import 2026-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-pricing-tables/easy-pricing-tables-312-arbitrary-post-removal-via-cross-site-request-forgery 2022-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ce21-suite/ce21-suite-220-missing-authorization-to-unauthenticated-plugin-settings-change 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-elementor-addons/happy-addons-for-elementor-3208-unauthenticated-information-exposure 2026-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-2812-authenticated-contributor-stored-cross-site-scripting-via-photo-widget-crop-attribute 2024-05-10T08:49:41.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddyforms-acf/buddyforms-acf-138-authenticated-contributor-cross-site-scripting 2022-08-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rometheme-for-elementor/romethemekit-for-elementor-152-authenticated-contributor-sensitive-information-exposure-via-elementor-templates 2025-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-security-audit-log/wp-activity-log-532-authenticated-admin-php-object-injection 2025-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/second-street-promotion/second-street-316-stored-cross-site-scripting-via-organization_id 2022-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-captcha/easy-captcha-10-reflected-cross-site-scripting 2023-05-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ldap-login-for-intranet-sites/active-directory-integration-ldap-integration-415-authenticated-subscriber-ldap-injection 2023-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gmap-venturit/gmap-venturit-11-authenticated-contributor-stored-cross-site-scripting-via-h-parameter 2025-08-11T13:49:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/listingpro/listingpro-2910-reflected-cross-site-scripting 2025-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xcloner-backup-and-restore/backup-restore-and-migrate-wordpress-sites-with-the-xcloner-plugin-312-remote-command-execution 2015-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/testimonial-slider/testimonial-slider-132-authenticated-contributor-stored-cross-site-scripting 2024-05-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/video-list-manager/video-list-manager-17-reflected-cross-site-scripting 2025-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xisearch-bar/xisearch-bar-26-cross-site-request-forgery-to-stored-cross-site-scripting 2025-06-13T19:46:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cookie-warning/cookie-warning-13-authenticated-administrator-stored-cross-site-scripting 2025-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/valvepress-rankie/rankie-182-reflected-cross-site-scripting 2025-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/newsletter-manager/newsletter-manager-14-open-redirect 2019-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress/buddypress-191-authorization-bypass 2014-02-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-wordpress-page-builder-free-pro-17-authorization-bypass 2016-02-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-blipbot/wp-blipbot-309-cross-site-scripting 2014-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gpt3-ai-content-generator/ai-power-complete-ai-pack-1889-unauthenticated-arbitrary-file-upload 2024-10-30T16:46:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/page-and-post-restriction/page-restriction-wordpress-126-admin-stored-cross-site-scripting 2022-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexible-custom-post-type/flexible-custom-post-type-017-cross-site-scripting 2011-11-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vertical-marquee-plugin/vertical-marquee-plugin-71-authenticated-subscriber-sql-injection-via-shortcode 2023-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-to-hootsuite/wordpress-to-hootsuite-145-authenticated-admin-cross-site-scripting 2022-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/squelch-tabs-and-accordions-shortcodes/squelch-tabs-and-accordions-shortcodes-047-cross-site-request-forgery 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/task-manager/task-manager-302-authenticated-subscriber-arbitrary-file-read 2026-03-20T15:08:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/delete-post-revision/delete-post-revision-11-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-client-reports/wp-client-reports-1022-cross-site-request-forgery 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broken-link-notifier/broken-link-notifier-130-authenticated-contributor-csv-injection 2025-07-10T19:45:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/anyfont/anyfont-223-cross-site-scripting 2014-07-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/edoc-easy-tables/edoc-easy-tables-129-cross-site-request-forgery-to-sql-injection 2024-11-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restricted-site-access/restricted-site-access-731-access-bypass-via-ip-spoofing 2022-08-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/download-counter/download-counter-14-unauthenticated-arbitrary-file-read 2025-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-contact-form-the-drag-and-drop-form-builder-for-wordpress-367-email-address-disclosure 2022-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-to-download/email-to-download-310-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-video-management-system/simple-video-management-system-104-reflected-cross-site-scripting 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uncanny-learndash-toolkit/uncanny-toolkit-for-learndash-3643-missing-authorization-via-review-banner-visibility-rest-route 2023-06-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/external-media-without-import/external-media-without-import-100-reflected-cross-site-scripting 2017-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/sf-booking/service-finder-provider-and-business-listing-theme-32-path-traversal 2018-09-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/edd-manual-purchases/easy-digital-downloads-manual-purchases-191-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-embedder-fay/pdf-embedder-fay-1101-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/svg-block/svg-block-1119-authenticated-author-stored-cross-site-scripting-via-svg 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fundraising-donation/wp-fundraising-donation-and-crowdfunding-platform-142-unauthenticated-sql-injection 2022-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gmap-embed/wp-google-map-176-admin-stored-cross-site-scripting 2021-07-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot/ai-chatbot-449-authenticated-administrator-stored-cross-site-scripting 2023-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-content-type-manager/custom-content-type-manager-0985-authenticated-admin-remote-code-execution 2015-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/domain-for-sale/domain-for-sale-3010-authenticated-contributor-stored-cross-site-scripting-via-class_name-parameter 2025-06-05T22:24:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bridge-core/bridge-core-33-missing-authorization 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-elementor-addons-header-footer-template-library-dynamic-grid-carousel-remote-arrows-565-authenticated-contributor-stored-cross-site-scripting 2024-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-multiple-free-gift/woocommerce-multiple-free-gift-123-insufficient-server-side-validation-to-arbitrary-gift-adding 2024-09-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-1263-referer-cross-site-scripting 2019-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/amely/amely-314-unauthenticated-sql-injection 2025-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/super-socializer/social-share-social-login-and-social-comments-7106-authentication-bypass 2018-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/jannah/jannah-newspaper-magazine-news-buddypress-amp-764-unauthenticated-local-file-inclusion 2026-03-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-and-templates-171036-missing-authorization-to-unauthenticated-media-file-upload 2025-11-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-search-to-menu/ivory-search-5513-authenticated-administrator-stored-cross-site-scripting-via-menu_gcse-and-nothing_found_text-parameters 2026-01-27T19:35:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wooCommerce-order-proposal/woocommerce-order-proposal-205-authenticated-shop-manager-privilege-escalation-via-order-proposal 2024-10-22T13:22:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpvivid-backuprestore/migration-backup-staging-wpvivid-0989-authenticated-administrator-stored-cross-site-scripting 2023-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/booking-and-rental-manager-for-woocommerce/booking-and-rental-manager-254-authenticated-contributor-php-object-injection 2025-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extensions-for-cf7/extensions-for-cf7-340-authenticated-contributor-insecure-direct-object-reference 2026-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-user-profile-user-registration-login-membership-plugin-250-authenticated-admin-limited-remote-code-execution-via-um_populate_dropdown_options 2022-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpkoi-templates-for-elementor/wpkoi-templates-for-elementor-310-authenticated-contributor-stored-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hss-embed-streaming-video/hss-embed-streaming-video-323-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/royal-elementor-addons/royal-elementor-addons-1359-insufficient-access-control-to-theme-activation 2023-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restrict-content/membership-plugin-restrict-content-3218-authenticated-administrator-stored-cross-site-scripting-via-invoice-settings 2026-02-17T17:14:49.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mainwp-child-reports/mainwp-child-reports-22-cross-site-request-forgery-to-arbitrary-options-update 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nex-forms-express-wp-form-builder/nex-forms-ultimate-form-builder-8510-authenticated-contributor-stored-cross-site-scripting 2024-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/soundslides/soundslides-142-authenticated-contributor-stored-cross-site-scripting-via-soundslides-shortcode 2025-11-26T14:19:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-to-feedly/add-to-feedly-1211-cross-site-request-forgery 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cbxwpbookmark/cbx-bookmark-favorite-1713-authenticated-contributor-stored-cross-site-scripting 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/tipsy/tipsy-11-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-crowdfunding/wp-crowdfunding-214-missing-authorization-via-settings_reset 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-maintenance/wp-maintenance-6197-authenticated-administrator-php-object-injection 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/remove-footer-credit/remove-footer-credit-1010-admin-stored-cross-site-scripting 2022-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ahathat/ahathat-plugin-16-authenticated-administrator-sql-injection-via-id-parameter 2025-03-18T22:18:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kv-tinymce-editor-fonts/kv-tinymce-editor-add-fonts-11-cross-site-request-forgery 2023-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stafflist/stafflist-312-authenticated-sql-injection 2022-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/Avada/avada-website-builder-for-wordpress-woocommerce-7114-authenticated-contributor-arbitrary-file-upload 2024-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-flexible-map/flexible-maps-1180-authenticated-contributor-stored-cross-site-scripting-via-flexible-maps-shortcode 2025-08-18T19:06:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/logaster-logo-generator/logaster-logo-generator-13-cross-site-request-forgery-to-arbitrary-media-deletion-and-creation 2023-01-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-dtree-30/wp-dtree-445-authenticated-administrator-stored-cross-site-scripting-via-plugin-settings 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rrdevs-for-elementor/rraddons-for-elementor-110-authenticated-contributor-stored-cross-site-scripting 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-youtube-video/embed-youtube-video-10-authenticated-admin-sql-injection 2021-07-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forminator/forminator-contact-form-payment-form-custom-form-builder-1134-cross-site-request-forgery-bypass 2021-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shortcode-to-display-post-and-user-data/display-custom-fields-in-the-frontend-post-and-user-profile-fields-120-missing-authorization-via-vg_display_data-shortcode 2023-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rover-idx/rover-idx-3002903-authenticated-subscriber-missing-authorization-via-multiple-functions 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-event-attendance/seatt-simple-event-attendance-150-cross-site-request-forgery-to-arbitrary-event-deletion 2026-02-13T16:18:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comment-spam-wiper/comment-spam-wiper-121-authenticated-administrator-stored-cross-site-scripting-via-api-key-setting 2026-03-20T15:14:11.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/http-headers/http-headers-1192-authenticated-administrator-external-control-of-file-name-or-path-to-rce-via-hh_htpasswd_path-and-hh_www_authenticate_user-parameters 2026-04-21T19:13:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/text-selection-color/text-selection-color-16-authenticated-administrator-stored-cross-site-scripting 2025-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gf-bookings-premium/gravity-bookings-259-unauthenticated-sql-injection-via-category_id-parameter 2026-05-05T20:29:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscribe-to-comments-reloaded/subscribe-to-comments-reloaded-150820-reflected-cross-site-scripting 2015-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dekoro/dekoro-107-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gravityforms/gravityforms-248-information-exposure 2019-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mass-delete-tags/mass-delete-taxonomies-300-cross-site-request-forgery-via-mp_plugin_mass_delete_tags_init 2023-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/emma-emarketing-plugin/emma-for-wordpress-133-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-ups-pickup/opsi-israel-domestic-shipments-265-reflected-cross-site-scripting 2025-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/estatik/estatik-real-estate-plugin-410-unauthenticated-php-object-injection 2023-12-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/pagelayer-207-improper-neutralization-of-crlf-sequences-to-unauthenticated-email-header-injection-via-email 2026-03-27T20:45:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-custom-fields-search/wp-custom-fields-search-1234-authenticated-administrator-stored-cross-site-scripting 2023-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-addons-for-gutenberg/spectra-21922-missing-authorization 2026-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/genesis-blocks/genesis-blocks-312-authenticated-contributor-stored-cross-site-scripting-via-block-content 2024-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-travel-engine/wp-travel-engine-tour-booking-plugin-tour-operator-software-667-unauthenticated-local-file-inclusion 2025-10-08T16:24:07.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arforms/arforms-64-reflected-cross-site-scripting 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ot-twitter-feed/twitter-feed-131-authenticated-contributor-stored-cross-site-scripting 2025-11-10T15:17:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-free-widgets-addons-templates-1566-authenticated-contributor-arbitrary-file-upload 2023-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/captivatesync-trade/captivate-sync-322-authenticated-administrator-sql-injection 2025-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chatbot/ai-chatbot-for-wordpress-wpbot-557-authenticated-administrator-stored-cross-site-scripting 2024-07-16T18:32:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-mobile-friendly-image-gallery-1834-reflected-cross-site-scripting-via-image_id-parameter 2025-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/opal-widgets-for-elementor/opal-widgets-for-elementor-169-authenticated-contributor-stored-cross-site-scripting 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/survey-maker/survey-maker-409-ip-address-spoofing 2024-04-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribe/email-subscription-popup-1220-unauthenticated-stored-cross-site-scripting 2024-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/file-manager-advanced/advanced-file-manager-528-authenticated-subscriber-limited-file-upload 2024-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/classic-editor-and-classic-widgets/classic-editor-and-classic-widgets-125-cross-site-request-forgery-via-render_settings_page 2023-03-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fluentform/fluent-forms-621-authenticated-contributor-stored-cross-site-scripting-via-permission_message-shortcode-attribute 2026-05-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/broken-link-checker-seo/broken-link-checker-by-aioseo-123-authenticated-contributor-sql-injection 2025-04-05T16:21:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/insight-core/insight-core-10-authenticated-php-object-injection-stored-cross-site-scripting 2021-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-mercadopago/mercado-pago-payments-for-woocommerce-631-cross-site-request-forgery 2023-02-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mailarchiver/mailarchiver-2101-unauthenticated-stored-cross-site-scripting-via-email-subject 2023-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/capie/capie-1040-unauthenticated-local-file-inclusion 2025-05-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/spare/spare-17-reflected-cross-site-scripting 2025-06-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vikrentcar/vikrentcar-car-rental-management-system-145-unauthenticated-insecure-direct-object-reference 2026-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-security-and-firewall/all-in-one-wp-security-firewall-510-cross-site-request-forgery 2022-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-slider/master-slider-3108-authenticated-contributor-stored-cross-site-scripting-via-masterslider_pb-and-ms_slide-shortcodes 2025-06-16T22:19:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seofy-core/seofy-core-168-unauthenticated-local-file-inclusion 2025-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-nice-loader/wp-nice-loader-0104-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-elementor-addons/happy-addons-for-elementor-3204-authenticated-contributor-sql-injection 2026-01-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpvr/wp-vr-360-panorama-and-free-virtual-tour-builder-for-wordpress-8532-authenticated-contributor-stored-cross-site-scripting 2025-06-27T15:12:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youzify/youzify-125-authenticated-contributor-sql-injection 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedpress/embedpress-3912-authenticatedcontributor-stored-cross-site-scripting-via-widget-attribute 2024-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/auto-delete-posts/auto-delete-posts-130-cross-site-request-forgery-to-arbitrary-settings-update 2022-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ad-inserter/ad-inserter-2730-unauthenticated-sensitive-information-exposure-via-ai-debug-processing-fe 2023-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/upunzipper/upunzipper-100-authenticated-admin-arbitrary-file-deletion 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kush-micro-news/kush-micro-news-167-unauthenticated-stored-cross-site-scripting 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paid-member-subscriptions/paid-membership-subscriptions-effortless-memberships-recurring-payments-content-restriction-2110-cross-site-request-forgery-to-notice-dismissal 2024-04-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ltl-freight-quotes-tql-edition/ltl-freight-quotes-tql-edition-126-authenticated-administrator-php-object-injection 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-270-missing-authorization 2024-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/idx-broker-platinum/impress-for-idx-broker-261-authenticated-stored-cross-site-scripting 2020-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/thena/thena-155-reflected-cross-site-scripting 2026-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/error-log-viewer/error-log-viewer-by-bestwebsoft-106-reflected-cross-site-scripting 2017-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pie-register/pie-register-user-registration-forms-invitation-based-registrations-custom-login-payments-312-sql-injection 2019-07-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-promoter/wp-promoter-13-missing-authorization-to-unauthenticated-statistics-reset-via-wpp-reset_stats-ajax-action 2026-05-26T17:23:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpack-lite-for-elementor/powerpack-addons-for-elementor-free-widgets-extensions-and-templates-2720-authenticated-contributor-stored-cross-site-scripting-via-link-effects-widget 2024-06-12T17:12:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/asf-allow-svg-files/allow-svg-files-11-authenticated-author-stored-cross-site-scripting 2022-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mycred/mycred-2973-authenticated-contributor-stored-cross-site-scripting-via-mycred_load_coupon-shortcode 2026-02-13T19:46:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/duplicate-title-validate/duplicate-title-validate-10-authenticated-subscriber-sql-injection 2024-10-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-academic-people/wp-academic-people-list-041-reflected-cross-site-scripting 2021-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sina-extension-for-elementor/sina-extension-for-elementor-3311-stored-cross-site-scripting 2021-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eroom-zoom-meetings-webinar/eroom-zoom-meetings-webinar-137-cross-site-request-forgery 2022-04-11T17:58:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gg-woo-feed/gtg-product-feed-for-shopping-124-missing-authorization-to-unauthenticated-plugin-settings-update 2023-12-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/ashe/ashe-2243-reflected-cross-site-scripting-via-add_query_arg-parameter 2024-11-18T23:50:20.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contact-form-to-email/contact-form-email-1331-cross-site-request-forgery-to-feedback-submission 2023-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/filebird/filebird-wordpress-media-library-folders-file-manager-648-authenticated-author-sql-injection 2025-08-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widget-google-reviews/rich-showcase-for-google-reviews-6943-authenticated-editor-stored-cross-site-scripting 2026-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerkit/powerkit-259-cross-site-request-forgery 2022-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themesflat-addons-for-elementor/themesflat-addons-for-elementor-212-authenticated-contributor-stored-cross-site-scripting-via-widget-titles 2024-06-05T15:27:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/blocksy/blocksy-2130-authenticated-contributor-stored-cross-site-scripting-via-blocksy_meta-fields 2026-03-02T09:26:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/noo-citilights/citilights-372-missing-authorization 2026-02-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scalable-vector-graphics-svg/scalable-vector-graphics-svg-34-authenticated-author-stored-cross-site-scripting-via-svg 2024-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/caldera-forms-pro/caldera-forms-pro-182-missing-authorization 2019-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/passwords-manager/passwords-manager-148-authenticated-subscriber-sql-injection 2025-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-helper-lite/wp-helper-premium-420-reflected-cross-site-scripting 2023-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lbg_fullscreen_fullwidth_slider/imagevideo-fullscreen-background-167-authenticated-contributor-sql-injection 2025-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-1212-authenticated-cross-site-scripting 2015-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stylish-google-sheet-reader/stylish-google-sheet-reader-40-reflected-cross-site-scripting 2025-03-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mp3-music-player-by-sonaar/mp3-audio-player-music-player-podcast-player-radio-by-sonaar-40-510-unauthenticated-insecure-direct-object-reference-to-sensitive-information-exposure 2026-02-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/baslider/image-slider-by-nextcode-112-cross-site-request-forgery-to-slide-deletion 2022-05-26T11:06:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easyjobs/easyjobs-2414-reflected-cross-site-scripting 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/connections/connections-business-directory-0794-cross-site-scripting 2014-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-migration-duplicator/wordpress-backup-migration-140-missing-authorization-via-wt_delete_schedule 2023-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sv-provenexpert/sv-proven-expert-2006-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slicknav-mobile-menu/slicknav-mobile-menu-192-authenticated-admin-stored-cross-site-scripting 2023-12-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/magic-action-box/magic-action-box-2172-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bit-form/contact-form-by-bit-form-multi-step-form-calculation-contact-form-payment-contact-form-custom-contact-form-builder-2173-missing-authorization-to-authenticated-subscriber-form-submission-disclosure 2024-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buckets/buckets-039-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mapsmarker/leaflet-maps-marker-google-maps-openstreetmap-bing-maps-24-cross-site-scripting 2012-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-ajax-navigation/yith-woocommerce-ajax-product-filter-510-reflected-cross-site-scripting 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hacklog-remote-attachment/hacklog-remote-attachment-132-cross-site-request-forgery 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-template-customizer-for-woo/email-template-customizer-for-woocommerce-1291-authenticated-shop-manager-stored-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/crypto/crypto-215-cross-site-request-forgery-to-authentication-bypass 2024-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amin-chat-button/pulsating-chat-button-141-cross-site-request-forgery-to-stored-cross-site-scripting 2024-12-03T14:18:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/abbie-expander/abbie-expander-101-authenticated-contributor-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/24liveblog/24liveblog-22-authenticated-contributor-exposure-of-sensitive-information-via-block-editor-script-localization 2026-06-23T16:38:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embedpress/embedpress-embed-pdf-youtube-google-docs-vimeo-wistia-videos-audios-maps-any-documents-in-gutenberg-elementor-395-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-01-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gwolle-gb/gwolle-guestbook-412-reflected-cross-site-scripting 2021-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fish-and-ships/fish-and-ships-159-reflected-cross-site-scripting 2024-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/otter-blocks/otter-blocks-gutenberg-blocks-page-builder-for-gutenberg-editor-fse-269-authenticated-contributor-stored-cross-site-scripting-via-titletag 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-currency-switcher/the-fox-currency-switcher-professional-for-woocommerce-1422-unauthenticated-arbitrary-shortcode-execution 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/xsmart/xsmart-1294-authenticated-subscriber-arbitrary-shortcode-execution 2025-10-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slivery-extender/slivery-extender-102-authenticatedcontributor-remote-code-execution-via-shortcode 2024-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/memberlite-shortcodes/memberlite-shortcodes-14-authenticated-contributor-stored-cross-site-scripting 2025-09-16T14:11:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/th-advance-product-search/th-advance-product-search-114-missing-authorization-to-plugin-settings-reset 2022-09-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inboxify-sign-up-form/inboxify-sign-up-form-104-authenticated-administrator-stored-cross-site-scripting 2025-12-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/file-manager-advanced/advanced-file-manager-51-authenticated-administrator-arbitrary-file-and-folder-access 2023-08-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/real-media-library-lite/wordpress-real-media-library-4141-authenticated-author-stored-cross-site-scripting 2021-08-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/master-slider/master-slider-3111-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/bard/bard-2210-cross-site-request-forgery-to-notice-dismissal 2024-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-payments/woopayments-1051-missing-authorization-to-unauthenticated-plugin-settings-update-via-save_upe_appearance_ajax 2026-03-30T16:13:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/menu-card/menu-card-080-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-01-08T21:22:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-421-cross-site-scripting-via-comments 2015-04-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ait-csv-import-export/ait-csv-importexport-303-unauthenticated-arbitrary-file-upload 2020-11-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/timeline-block-block/timeline-block-133-insecure-direct-object-reference-to-authenticated-author-private-timeline-exposure-via-shortcode-attribute 2026-02-05T13:39:29.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-xml-feed/import-xml-and-rss-feeds-215-authenticated-administrator-arbitrary-file-upload 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ga-germanized/analytics-germanized-for-google-analytics-162-authenticated-contributor-stored-cross-site-scripting 2025-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder/popup-builder-344-sql-injection 2019-08-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/automotive/automotive-car-dealership-business-wordpress-theme-1341-authenticated-contributor-stored-cross-site-scripting-via-portfolio-project-details 2026-05-28T17:26:48.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/audio-and-video-player/cp-media-player-113-cross-site-request-forgery-to-player-deletion-and-duplication 2024-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/improved-include-page/improved-include-page-12-authenticated-contributor-arbitrary-postspages-access 2021-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/mantra/mantra-332-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/job-board-light/jobboard-job-listing-127-missing-authorization 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/inline-frame-iframe/inline-frame-iframe-01-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2025-11-24T19:09:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instawp-connect/instawp-connect-01038-unauthenticated-arbitrary-file-upload 2024-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formget-contact-form/contact-form-by-formget-531-authenticated-stored-cross-site-scripting 2015-03-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/export-woocommerce-customer-list/export-customers-list-csv-for-woocommerce-2067-csv-injection 2022-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-foft-loader/wp-foft-loader-2139-authenticated-author-arbitrary-file-upload 2026-02-03T17:31:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-keep/email-keep-11-reflected-cross-site-scripting 2025-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addonify-compare-products/addonify-compare-products-for-woocommerce-1117-missing-authorization-to-unauthenticated-settings-update 2026-02-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/monetag-official/monetag-official-plugin-113-missing-authorization 2025-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobhunt/wp-jobhunt-71-unauthenticated-insecure-direct-object-reference 2025-05-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/roneous/roneous-creative-multi-purpose-wordpress-theme-215-unauthenticated-local-file-inclusion 2026-05-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-import-export-for-woo/product-import-export-for-woocommerce-237-authenticatedshop-manager-arbitrary-file-upload-via-upload_import_file 2024-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simplepress/simplepress-forum-61010-reflected-cross-site-scripting-via-msearch 2025-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/magic-slider/magic-slider-13-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-events-calendar-bookings-and-tickets-4280-unauthenticated-php-object-injection 2026-03-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-raptor/raptor-editor-1020-authenticated-contributor-stored-cross-site-scripting 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-image-collage/easy-image-collage-1135-missing-authorization-to-authenticated-contributor-data-clearance 2024-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/secupress-pro/secupress-free-and-secupress-pro-1412-unauthenticated-arbitrary-ip-ban 2021-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wikipedia-preview/wikipedia-preview-1150-missing-authorization 2025-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-gallery-with-slideshow/image-gallery-with-slideshow-plugin-152-sql-injection-via-gid 2017-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-order-barcodes/woocommerce-order-barcodes-164-cross-site-request-forgery 2023-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-311-denial-of-service 2011-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-contact-form-integration-for-elementor/eleforms-all-in-one-form-integration-including-db-for-elementor-2997-unauthenticated-stored-cross-site-scripting 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/misiek-paypal/misiek-paypal-1120090324-cross-site-request-forgery-to-stored-cross-site-scripting 2024-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/related-products-manager-woocommerce/related-products-manager-for-woocommerce-162-authenticated-contributor-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-maintenance-mode/yith-maintenance-mode-114-reflected-cross-site-scripting 2015-08-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fw-food-menu/fw-food-menu-600-unauthenticated-arbitrary-file-deletion 2025-06-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-advanced-importer/wp-advanced-importer-211-reflected-cross-site-scripting 2016-02-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/golo/golo-city-travel-guide-wordpress-theme-133-reflected-cross-site-scripting 2020-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-realty/wprealty-291-reflected-cross-site-scripting 2013-12-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/amo-team-showcase/amo-team-showcase-114-authenticated-contributor-stored-cross-site-scripting-via-amoteam_skills-shortcode 2025-02-20T15:02:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-assistant/media-library-assistant-317-reflected-cross-site-scripting 2024-07-01T19:02:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/facebook-secret-meta/secret-meta-121-reflected-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-ajax-search/yith-woocommerce-ajax-search-240-unauthenticated-stored-cross-site-scripting 2024-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-affiliate/wc-affiliate-a-complete-woocommerce-affiliate-plugin-253-missing-authorization-to-authenticated-subscriber-sensitive-information-exposure-via-wf-export-all 2025-03-14T14:23:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-aparat/aparat-for-wordpress-220-authenticated-contributor-stored-cross-site-scripting 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/logwpmail/log-wp_mail-01-sensitive-information-disclosure 2022-05-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stock-sync-for-woocommerce/stock-sync-for-woocommerce-232-cross-site-request-forgery 2023-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/kindlycare/kindlycare-161-unauthenticated-php-object-injection 2026-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ripe-hd-player/ripe-hd-flv-11-sql-injection 2013-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formcraft-form-builder/formcraft-129-authenticated-contributor-stored-cross-site-scripting-via-fcb-shortcode 2023-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementskit-lite/elementskit-elementor-addons-306-authenticated-contributor-stored-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/libro-de-reclamaciones/libro-de-reclamaciones-101-reflected-cross-site-scripting 2025-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/reepay-checkout-gateway/frisbii-pay-189-missing-authorization-to-authenticated-subscriber-payment-token-modification 2026-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/transposh-translation-filter-for-wordpress/transposh-wordpress-translation-107-reflected-cross-site-scripting-via-tp_tp 2022-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lucas-string-replace/lucas-string-replace-205-reflected-cross-site-scripting 2024-09-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/musicbox/musicbox-203-reflected-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eazydocs/eazydocs-271-missing-authorization 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/omnipress/omnipress-143-authenticated-contributor-stored-cross-site-scripting 2024-10-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ezpz-one-click-backup/ezpz-one-click-backup-120310-unauthenticated-command-injection 2014-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/contest-gallery/contest-gallery-1915-authenticated-author-sql-injection-via-upload 2022-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/onesignal-free-web-push-notifications/onesignal-web-push-notifications-361-missing-authorization-to-unauthenticated-plugin-settings-update 2025-12-15T02:15:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supportcandy/supportcandy-helpdesk-customer-support-ticket-system-346-authenticated-subscriber-insecure-direct-object-reference 2026-06-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/corona/corona-all-versions-cross-site-scripting 2012-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/no-bot-registration/no-bot-registration-191-cross-site-request-forgery 2024-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/athlon-manage-calameo-publications/manage-calameo-publications-by-athlon-111-reflected-cross-site-scripting 2014-07-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woolentor-addons/shoplentor-332-unauthenticated-email-relay-abuse-via-woolentor_suggest_price_action-ajax-action 2026-02-17T16:06:59.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advance-menu-manager/advance-menu-manager-306-cross-site-request-forgery 2023-11-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-with-phone-number/login-with-phone-number-1726-authentication-bypass-due-to-missing-empty-value-check 2024-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/store-commerce/store-commerce-124-authenticated-contributor-stored-cross-site-scripting 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woolook/woocommerce-blocks-woolook-170-authenticated-admin-local-file-inclusion 2025-08-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/convertkit/convertkit-220-reflected-cross-site-scripting 2023-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/barcode-scanner-with-inventory-order-manager-167-authenticated-admin-arbitrary-file-upload 2025-01-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/truebooker-appointment-booking/truebooker-102-cross-site-request-forgery-to-settings-update 2024-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/capability-manager-enhanced/publishpress-capabilities-23-unauthenticated-arbitrary-options-update 2021-12-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/idpay-contact-form-7/idpay-for-contact-form-7-212-reflected-cross-site-scripting 2021-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/onet-regenerate-thumbnails/onet-regenerate-thumbnails-15-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-video-lightbox/video-lightbox-195-authenticated-stored-cross-site-scripting 2022-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/omfg-mobile/omfg-mobile-pro-1126-cross-site-scripting 2014-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/arconix-faq/arconix-faq-196-missing-authorization 2025-06-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-checker/link-checker-1162-unauthenticated-stored-cross-site-scripting 2019-03-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/xpro-elementor-addons/xpro-addons-140-widgets-for-elementor-150-missing-authorization-to-unauthenticated-xpro-template-creation 2026-05-19T13:32:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/telegram-for-wp/telegram-for-wp-161-authenticated-admin-stored-cross-site-scripting 2025-06-12T13:09:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sniplets/sniplets-123-cross-site-scripting 2008-02-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-contact-form-3621-reflected-cross-site-scripting-via-title 2023-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpstream/wpstream-live-streaming-video-on-demand-pay-per-view-4112-authenticated-subscriber-arbitrary-file-upload 2026-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/astra-sites/starter-templates-elementor-gutenberg-beaver-builder-templates-270-missing-authorization-to-stored-cross-site-scripting 2021-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/astra-sites/starter-templates-elementor-wordpress-beaver-builder-templates-416-authenticated-contributor-server-side-request-forgery 2024-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/youram-youtube-embed/youtube-embed-103-authenticated-contributor-stored-cross-site-scripting-via-instance-parameter 2025-07-28T20:26:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feedzy-rss-feeds/rss-aggregator-by-feedzy-442-authenticatedcontributor-sql-injection 2024-02-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-finance/wp-finance-136-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/primer-by-chloedigital/primer-by-chlodigital-1025-reflected-cross-site-scripting 2025-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enhanced-tooltipglossary/cm-tooltip-glossary-433-authenticated-admin-stored-cross-site-scripting 2024-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scratchblocks-for-wp/scratchblocks-for-wp-101-authenticated-contributor-stored-cross-site-scripting-via-element-shortcode-attribute 2026-05-11T19:02:23.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/paypal-currency-converter-basic-for-woocommerce/paypal-currency-converter-basic-for-woocommerce-13-path-traversal-to-arbitrary-file-read 2015-06-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rencontre/rencontre-dating-site-321-authenticated-admin-stored-cross-site-scripting 2019-08-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-marginalia/my-marginalia-106-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-for-woocommerce/pdf-invoices-for-woocommerce-drag-and-drop-template-builder-460-authenticated-contributor-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/flatsome/flatsome-3187-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-paypal-shopping-cart/easy-paypal-shopping-cart-1110-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elisqlreports/ez-sql-reports-shortcode-widget-and-db-backup-52508-cross-site-request-forgery 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ad-invalid-click-protector/ad-invalid-click-protector-125-sql-injection 2022-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-webinarsystem/webinarpress-13320-cross-site-request-forgery 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/icegram/icegram-3135-missing-authorization 2026-01-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wappointment/appointment-bookings-for-zoom-googlemeet-and-more-wappointment-260-authenticated-administrator-server-side-request-forgery 2024-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/teachpress/teachpress-9012-authenticated-contributor-stored-cross-site-scripting 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fancy-testimonials/fancy-testimonials-10-authenticated-author-stored-cross-site-scripting 2026-06-17T19:25:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/http-https-remover/inisev-plugins-various-versions-missing-authorization-on-handle_installation-function 2023-07-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-over-image-vc-extension/image-over-image-for-wpbakery-page-builder-20-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-03-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementinvader-addons-for-elementor/elementinvader-addons-for-elementor-131-missing-authorization-to-arbitrary-options-read 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.6/wordpress-core-26-cross-site-scripting 2008-07-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tickera-event-ticketing-system/tickera-3526-missing-authorization 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ecwid-shopping-cart/ecwid-shopping-cart-70-authenticated-contributor-stored-cross-site-scripting 2025-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/motorix/motorix-16-unauthenticated-local-file-inclusion 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-addon/ppom-product-addons-custom-fields-for-woocommerce-33015-unauthenticated-arbitrary-file-upload 2025-10-17T18:09:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/disc-golf-manager/disc-golf-manager-100-unauthenticated-php-object-injection 2024-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-click-info/wp-click-info-274-reflected-cross-site-scripting 2025-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jf3-maintenance-mode/maintenance-redirect-201-ip-spoofing-to-maintenance-mode-bypass 2024-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mail-mint/mail-mint-11810-authenticated-admin-arbitrary-file-upload 2025-11-07T21:08:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/friends/friends-351-authenticated-subscriber-php-object-injection 2025-07-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-favicon/all-in-one-favicon-46-authenticated-admin-stored-cross-site-scripting 2018-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/chained-quiz/chained-quiz-1324-cross-site-request-forgery-to-submitted-response-deletion 2022-12-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-zyrex/zyrex-popup-10-authenticated-admin-arbitrary-file-upload 2023-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jobhunt/wp-jobhunt-71-authentication-bypass-to-candidate 2025-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sky-elementor-addons/sky-addons-332-authenticated-author-stored-cross-site-scripting-via-custom-script 2026-05-07T20:49:56.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/infusionsoft-web-tracker/infusionsoft-analytics-20-cross-site-request-forgery 2025-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/element-camp/elementcamp-236-authenticated-author-sql-injection-via-meta_querycompare-parameter 2026-03-20T15:15:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rsvpmaker/rsvpmarker-1065-authenticated-administrator-stored-cross-site-scripting-via-admin-settings 2023-08-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-mail-catcher/wp-mail-catcher-216-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/frontend-checklist/frontend-checklist-232-authenticated-admin-stored-cross-site-scripting-via-items 2024-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliateimportereb/affiliateimportereb-106-reflected-cross-site-scripting-via-module 2025-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-product-table-lite/woocommerce-product-table-lite-395-missing-authorization 2025-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scroll-styler/scroll-styler-11-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-discourse/wp-discourse-251-missing-authorization 2024-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kivicare-clinic-management-system/kivicare-3616-authenticated-receptionist-sql-injection 2026-02-01T18:08:24.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/filester/file-manager-pro-filester-176-cross-site-request-forgery-to-arbitrary-file-rename 2023-09-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-photo-album-plus/wp-photo-album-plus-8701001-unauthenticated-arbitrary-file-upload 2024-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/1003-mortgage-application/1003-mortgage-application-187-unauthenticated-full-path-disclosure 2025-01-20T15:24:32.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/restrict-content/restrict-content-322-reflected-cross-site-scripting 2023-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/parsi-font/mw-font-changer-425-reflected-cross-site-scripting 2016-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/petfinder-listings/petfinder-listings-1019-admin-stored-cross-site-scripting 2022-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-opening-hours/opening-hours-230-authenticated-admin-stored-cross-site-scripting 2023-02-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-import-export-lite/wp-import-export-lite-3926-authenticated-administrator-php-object-injection 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-search/better-search-252-cross-site-request-forgery-to-settings-import 2021-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gpx-viewer/gpx-viewer-229-authenticated-subscriber-arbitrary-file-creation 2024-11-12T13:21:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-field-finder/custom-field-finder-03-authenticated-author-php-object-injection 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/balkon/balkon-132-reflected-cross-site-scripting 2023-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/essential-blocks/essential-blocks-page-builder-gutenberg-blocks-patterns-templates-453-authenticated-contributor-stored-cross-site-scripting 2024-03-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-click-to-tweet/better-click-to-tweet-5103-missing-authorization 2022-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bookit/bookit-237-authentication-bypass 2023-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/integration-cds/dataverse-integration-277-281-missing-authorization-to-authenticated-subscriber-privilege-escalation-via-reset_password_link-rest-route 2025-07-23T20:27:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-membership/simple-membership-356-cross-site-scripting 2017-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-currency-switcher/woocs-woocommerce-currency-switcher-142-missing-authorization 2024-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-restaurant-menu/quick-restaurant-menu-202-authenticated-administrator-cross-site-scripting 2023-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/click-tweet/click-tweet-089-authenticated-administrator-stored-cross-site-scripting 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/provide-forex-signals/provide-forex-signals-10-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/maxbuttons/wordpress-button-plugin-maxbuttons-974-authenticated-administrator-stored-cross-site-scripting 2024-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-intranet/intranet-private-site-all-in-one-intranet-181-missing-authorization 2026-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dashboard-widgets-suite/dashboard-widgets-suite-343-reflected-cross-site-scripting 2024-06-12T19:49:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gc-social-wall/gc-social-wall-115-authenticated-contributor-stored-cross-site-scripting 2025-06-25T13:46:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/moveto/moveto-62-unauthenticated-sql-injection 2024-02-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/minimog/minimogwp-the-high-converting-ecommerce-wordpress-theme-390-unauthenticated-price-manipulation 2025-07-25T16:30:16.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/notely/notely-180-authenticated-administrator-stored-cross-site-scripting 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/loginwp-pro/loginwp-pro-4085-missing-authorization-to-unauthenticated-settings-update 2025-07-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/enl-newsletter/enl-newsletter-101-cross-site-request-forgery 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/countdown-builder/countdown-coming-soon-maintenance-countdown-clock-2395-authenticated-cross-site-scripting 2022-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/muzaara-adwords-optimize-dashboard/optimize-your-campaigns-google-shopping-google-ads-google-adwords-31-information-exposure 2025-01-06T16:05:34.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/css-addons/custom-css-addons-191-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/molongui-authorship/molongui-4619-reflected-cross-site-scripting 2023-07-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/gutenberg-blocks-by-kadence-blocks-page-builder-features-3236-authenticated-contributor-stored-cross-site-scripting-via-countdown-timer 2024-05-10T13:33:39.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ulike/wp-ulike-476-authenticated-administrator-stored-cross-site-scripting 2025-01-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/magical-blocks/magical-blocks-1012-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-sermons/advanced-sermons-32-reflected-cross-site-scripting 2024-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/car-rental-system/car-rental-system-31-sql-injection 2015-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kh-easy-user-settings/kh-easy-user-settings-100-authenticated-subscriber-privilege-escalation 2024-12-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/asgaros-forum/asgaros-forum-11514-admin-sql-injection-via-forum_id 2021-12-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premium-addons-for-elementor/premium-addons-for-elementor-451-authenticated-subscriber-limited-arbitrary-option-update 2021-08-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uncanny-automator-pro/uncanny-automator-pro-5301-cross-site-request-forgery-to-license-setting-reset 2024-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-payment-form/simple-payment-donations-420-reflected-cross-site-scripting 2022-08-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dzs-zoomsounds/zoomsounds-wordpress-wave-audio-player-with-playlist-645-directory-traversal 2021-08-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-calendar/my-calendar-2329-path-traversal-to-remote-code-execution 2015-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/live-composer-page-builder/page-builder-live-composer-1542-authenticated-contributor-php-object-injection 2024-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-mobile-friendly-image-gallery-1568-reflected-cross-site-scripting-1568-reflected-cross-site-scripting 2021-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html5-audio-player/html5-audio-player-2111-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/supportcandy/supportcandy-helpdesk-customer-support-ticket-system-344-missing-authorization 2026-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/godam/godam-146-missing-authorization 2025-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/gustavo/gustavo-122-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-products-filter/husky-products-filter-for-woocommerce-formerly-woof-1342-missing-authorization-via-woof_meta_get_keys 2023-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/photolia/photolia-103-unauthenticated-local-file-inclusion 2026-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-elementor-page-builder/the-plus-addons-for-elementor-542-authenticated-contributor-stored-cross-site-scripting-via-age-gate 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/namaste-lms/namaste-lms-2611-reflected-cross-site-scripting 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/login-with-vipps/login-with-vipps-and-mobilepay-133-authenticated-contributor-stored-cross-site-scripting 2024-11-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bookingpress-appointment-booking/bookingpress-appointment-booking-115-authenticated-subscriber-arbitrary-file-read-to-arbitrary-file-creation 2024-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wgpwpp/wedos-global-122-missing-authorization 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fx-currency-converter/fx-currency-converter-020-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2025-12-11T15:00:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/share-this-image/share-this-image-202-authenticated-contributor-stored-cross-site-scripting-via-sti-buttons-shortcode 2024-09-04T20:25:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ajax-load-more/ajax-load-more-infinite-scroll-lazy-load-load-more-781-incorrect-authorization-to-unauthenticated-privatedraft-post-title-and-excerpt-exposure 2026-01-30T16:20:53.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-puller/product-puller-151-reflected-cross-site-scripting 2025-03-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/modal_survey/modal-survey-20182-authorization-bypass 2021-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementor/elementor-website-builder-284-reflected-cross-site-scripting 2020-01-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/am-hili-affiliate-manager-for-publishers/am-hili-10-authenticated-administrator-stored-cross-site-scripting 2022-11-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-maker/popup-maker-1171-sensitive-data-exposure-via-debug-log-file 2023-03-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/option-tree/option-tree-255-cross-site-scripting 2019-08-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fastly/fastly-1225-missing-authorization 2024-05-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/iubenda-cookie-law-solution/iubenda-332-cross-site-request-forgery 2022-12-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-281-cross-site-scripting 2009-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-custom-registration-form-login-form-and-user-profile-wordpress-plugin-315-missing-authorization-to-authenticated-subscriber-privilege-escalation 2024-04-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mega-forms/contact-form-by-mega-forms-124-authenticated-subscriber-stored-cross-site-scripting 2022-09-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-post-types/wp-easy-post-types-144-authenticated-subscriber-php-object-injection 2024-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pippo/pippo-123-unauthenticated-local-file-inclusion 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-calendar/my-calendar-3423-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pyrmont-v2/pyrmont-v2-207-sql-injection 2009-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/agendapress/agendapress-easily-publish-meeting-agendas-and-programs-on-wordpress-108-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-permalinker/the-permalinker-181-authenticated-contributor-stored-cross-site-scripting 2024-12-13T15:58:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/entrepreneurx/entrepreneur-booking-for-small-businesses-wordpress-313-authenticated-subscriber-php-object-injection 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-addon-for-elementor/events-addon-for-elementor-214-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets 2024-06-11T08:17:21.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/webp-conversion/webp-conversion-21-missing-authorization 2026-01-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/addons-for-elementor-builder/vertex-addons-for-elementor-164-missing-authorization 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpshopify/shopwp-204-missing-authorization-to-stored-cross-site-scripting 2019-10-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/publishpress-authors/co-authors-multiple-authors-and-guest-authors-in-an-author-box-with-publishpress-authors-471-insecure-direct-object-reference-to-authenticated-author-arbitrary-user-email-update-and-account-takeover 2024-10-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-gallery-grid/responsive-gallery-grid-2314-authenticated-admin-stored-cross-site-scripting 2024-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-automatic/wordpress-automatic-plugin-3532-unauthenticated-arbitrary-options-update 2021-09-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/jannah/jannah-760-unauthenticated-php-object-injection 2025-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-phpmyadmin-extension/wp-phpmyadmin-5203-authenticated-administrator-stored-cross-site-scripting 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/polylang/polylang-25-cross-site-request-forgery 2019-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/async-javascript/async-javascript-2201209-authenticated-admin-cross-site-scripting 2021-06-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ownerrez/ownerrez-121-authenticated-contributor-stored-cross-site-scripting 2025-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vikinghammer-tweet/vikinghammer-tweet-024-cross-site-request-forgery-to-stored-cross-site-scripting 2024-08-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sh-slideshow/sh-slideshow-43-cross-site-request-forgery-to-stored-cross-site-scripting 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shareaholic/professional-social-sharing-buttons-icons-related-posts-shareaholic-975-information-disclosure 2022-07-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-log/smart-external-link-click-monitor-link-log-502-reflected-cross-site-scripting 2023-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/prettyphoto/prettyphoto-124-authenticated-contributor-stored-cross-site-scripting 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vikbooking/vikbooking-hotel-booking-engine-pms-1512-cross-site-request-forgery-in-savetranslation-function 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cartflows-pro/cartflows-pro-11112-cross-site-request-forgery 2023-07-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-bundle/wpc-product-bundles-for-woocommerce-845-missing-authorization 2026-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cookies-pro/cookies-pro-10-cross-site-request-forgery-to-stored-cross-site-scripting 2025-03-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/premmerce/premmerce-1319-cross-site-request-forgery 2025-05-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lock-user-account/lock-user-account-103-cross-site-request-forgery-to-account-lockunlock 2023-08-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpschoolpress/wpschoolpress-224-authenticatedteacher-sql-injection-via-classid 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-grid/comboblocks-2286-authenticated-contributor-stored-cross-site-scripting 2024-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/powerpack-lite-for-elementor/powerpack-elementor-addons-free-widgets-extensions-and-templates-281-authenticated-contributor-post-disclosure 2024-12-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-to-all/webberzone-snippetz-211-authenticated-contributor-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/magazine-basic/magazine-basic-unknown-versions-sql-injection 2012-11-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor-15142-authenticated-contributor-stored-cross-site-scripting 2025-04-02T19:12:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rustolat/rus-to-lat-03-cross-site-request-forgery-to-plugins-options-changes 2023-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/image-slider-slideshow/image-slider-slideshow-18-authenticated-contributor-insecure-direct-object-reference 2026-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-google-map-plugin/wp-maps-494-authenticated-admin-stored-cross-site-scripting-via-location_messages-parameter 2026-06-05T15:28:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/3-word-address-validation-field/what3words-address-field-4015-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/common-tools-for-site/common-tools-for-site-102-authenticated-author-stored-cross-site-scripting-via-svg-file-upload 2024-09-25T21:23:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lead-form-builder/responsive-contact-form-builder-lead-generation-plugin-189-missing-authorization 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-better-customer-list/better-customer-list-for-woocommerce-123-reflected-cross-site-scripting 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tubepressnet/tubepressnet-401-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kadence-blocks/gutenberg-blocks-by-kadence-blocks-page-builder-features-3223-authenticated-contributor-stored-cross-site-scripting 2024-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/veda/veda-multipurpose-wordpress-theme-42-authenticated-subscriber-php-object-injection 2025-03-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-paypal-express-checkout-for-woocommerce/yith-paypal-express-checkout-for-woocommerce-1490-cross-site-request-forgery 2025-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ds-faq-plus/wp-ds-faq-plus-142-cross-site-scripting 2020-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nelio-ab-testing/nelio-ab-testing-818-authenticated-editor-remote-code-execution 2026-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dropshipping-xox/dropshix-4014-authorization-bypass 2019-06-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/give/givewp-2252-cross-site-request-forgery-via-give_ajax_store_payment_note 2023-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mihdan-elementor-yandex-maps/mihdan-elementor-yandex-maps-1611-authenticated-contributor-stored-cross-site-scripting-via-marker-pins 2025-09-29T15:32:06.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/maxinet/maxinet-internet-iptv-provider-elementor-template-kit-1210-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tax-report-for-woocommerce/tax-report-for-woocommerce-22-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/email-subscribers/email-subscribers-newsletters-5713-missing-authorization 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-biographia/wp-biographia-400-authenticated-administrator-stored-cross-site-scripting 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-gutenberg-products-block/woocommerce-blocks-370-authorization-bypass 2020-11-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-qr-codes/qr-code-for-woocommerce-120-reflected-cross-site-scripting 2025-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-wp-events/simple-wp-events-1817-unauthenticated-sensitive-information-exposure 2025-04-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/instantio/instantio-3330-unauthenticated-information-exposure 2026-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ad-inserter-pro/ad-inserter-pro-2715-arbitrary-file-modification 2022-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/scalenut/scalenut-113-missing-authorization 2026-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-206-cross-site-request-forgery 2023-12-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/polylang/polylang-373-authenticated-contributor-php-object-injection 2025-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/levelfourstorefront/level-four-store-front-8115-arbitrary-file-upload 2013-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/envolve-plugin/envolve-plugin-10-unauthenticated-arbitrary-file-upload-via-language_file-and-fonts_file 2025-05-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/motors-car-dealership-classified-listings/motors-car-dealership-classified-listings-plugin-1466-missing-authorization-to-authenticated-subscriber-wizard-set-up 2025-04-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/message-ticker/message-ticker-92-authenticated-subscriber-sql-injection-via-shortcode 2023-10-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/education/education-center-lms-online-courses-wordpress-theme-3610-php-object-injection 2025-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/access-category-password/access-category-password-151-reflected-cross-site-scripting 2024-04-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-plus-addons-for-elementor-page-builder/the-plus-addons-for-elementor-540-authenticated-contributor-stored-cross-site-scripting-header-meta-content-widget 2024-03-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/landing-pages/wordpress-landing-pages-184-cross-site-scripting 2015-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/list-category-posts/list-category-posts-0902-authenticated-author-stored-cross-site-scripting 2024-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bitcoin-payments/bitcoin-payments-142-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-avatar/paid-membership-plugin-ecommerce-user-registration-form-login-form-user-profile-restrict-content-profilepress-41613-authenticated-subscriber-stored-cross-site-scripting 2026-04-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-blog/jetblog-243-authenticated-contributor-stored-cross-site-scripting 2025-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-member/ultimate-member-2045-low-privileged-stored-cross-site-scripting 2019-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/piotnetforms/piotnet-forms-1030-authenticated-author-stored-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/extended-widget-options/widget-options-extended-510-widget-options-401-authenticated-subscriber-information-disclosure 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/feedburner-feedsmith/feedburner-feedsmith-22-cross-site-request-forgery 2007-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pet-manager/pet-manager-14-authenticated-contributor-stored-cross-site-scripting 2024-05-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/monitor-chat/monitorchat-111-reflected-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpstream/wpstream-live-streaming-video-on-demand-pay-per-view-454-cross-site-request-forgery-via-wpstream_update_local_event_settings 2023-07-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-post/postx-gutenberg-blocks-for-post-grid-299-unauthenticated-cross-site-scripting 2023-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/athemes-addons-for-elementor-lite/athemes-addons-for-elementor-lite-112-authenticated-contributor-stored-cross-site-scripting-via-countdown-widget 2025-09-05T15:01:44.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nice-paypal-button-lite/nice-paypal-button-lite-135-cross-site-request-forgery 2023-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/buddypress/buddypress-721-missing-authorization-to-unauthorized-group-access 2021-04-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/database-backups/database-backups-1226-cross-site-request-forgery 2021-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/forminator/forminator-1221-missing-authorization-on-hubspot_support_request-ajax-function 2023-04-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/element-camp/elementcamp-232-missing-authorization 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/website-file-changes-monitor/melapress-file-monitor-210-authenticated-admin-authenticated-sql-injection 2025-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ai-engine/ai-engine-263-authenticated-admin-sql-injection 2024-11-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-builder/popup-builder-426-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2024-03-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirect-redirection/redirect-redirection-113-missing-authorization-in-logfilter-function 2023-02-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-gdpr-compliance/gdpr-ccpa-compliance-support-274-missing-authorization 2026-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/post-to-twitter/post-to-twitter-07-cross-site-request-forgery-to-cross-site-scripting 2014-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/geodirectory/geodirectory-wp-business-directory-plugin-and-classified-listings-directory-2897-authenticated-subscriber-stored-cross-site-scripting-via-display_name-parameter 2025-02-10T22:19:26.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/yolox/yolox-1015-unauthenticated-local-file-inclusion 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-rating/multi-rating-505-cross-site-request-forgery 2023-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beyondcart/beyondcart-connector-301-missing-configuration-of-jwt-secret-to-unauthenticated-privilege-escalation-via-determine_current_user-filter 2025-09-10T18:48:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-meta-manager/user-meta-manager-349-reflected-cross-site-scripting 2023-01-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/parabola/parabola-241-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nktagcloud/better-tag-cloud-0995-authenticated-admin-stored-cross-site-scripting 2022-07-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/continually/continually-431-authenticated-administrator-stored-cross-site-scripting-via-continually_embed_code-parameter 2026-05-11T20:38:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-jscrollpane/wp-jscrollpane-203-reflected-cross-site-scripting 2025-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-download-counter/simple-download-counter-20-authenticated-author-arbitrary-file-read 2025-02-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-paypal-donation/paypal-donation-13-cross-site-request-forgery-to-stored-cross-site-scripting 2021-10-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/link-library/link-library-787-authenticated-contributor-server-side-request-forgery 2025-12-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/shopbuilder/shopbuilder-elementor-woocommerce-builder-addons-218-unauthenticated-sensitive-information-exposure 2024-05-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mediaburst-email-to-sms/clockwork-sms-plugins-multiple-versions-cross-site-scripting 2017-12-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/etta/etta-1140-unauthenticated-local-file-inclusion 2025-09-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sl-user-create/sl-user-create-025-information-disclosure 2013-10-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/themeisle-companion/orbit-fox-by-themeisle-21043-authenticated-contributor-stored-cross-site-scripting-via-title_tag-parameter 2025-01-09T18:53:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/groups/groups-370-authenticated-subscriber-insecure-direct-object-reference-to-arbitrary-group-join 2025-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/telecash-ricaricaweb/telecash-ricaricaweb-22-unauthenticated-php-object-injection 2024-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dandelion/dendelion-266-arbitrary-file-upload 2014-01-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpdirectorykit/wp-directory-kit-146-authenticated-admin-sql-injection 2025-12-01T21:39:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/infility-global/infility-global-298-authenticated-subscriber-missing-authorization-to-plugin-options-update 2025-01-06T16:09:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/perfect-portfolio/perfect-portfolio-124-missing-authorization 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slider-pro-lite/slider-pro-lite-141-authenticated-contributor-stored-cross-site-scripting 2025-01-06T15:04:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpfront-user-role-editor/wpfront-user-role-editor-423-authenticated-contributor-stored-cross-site-scripting 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/browser-and-operating-system-finder/browser-and-operating-system-finder-11-cross-site-request-forgery 2021-11-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/siteorigin-panels/page-builder-by-siteorigin-205-reflected-cross-site-scripting 2015-12-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/zoner/zoner-real-estate-41-cross-site-scripting 2019-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/carspot/carspot-dealership-wordpress-classified-theme-243-unauthenticated-arbitrary-password-resetaccount-takeover 2025-02-17T20:04:38.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-hygiene/media-hygiene-402-missing-authorization 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/heateor-login/heateor-login-social-login-plugin-119-authenticated-contributor-stored-cross-site-scripting 2025-09-09T17:52:04.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jeg-elementor-kit/jeg-elementor-kit-262-authenticated-contributor-stored-cross-site-scripting-via-html-tags 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mail-subscribe-list/mail-subscribe-list-213-cross-site-request-forgery 2022-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html-social-share-buttons/html-social-share-buttons-2116-authenticated-contributor-stored-cross-site-scripting 2025-09-05T13:40:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-search-to-menu/ivory-search-5512-missing-authorization 2025-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wen-logo-slider/wen-logo-slider-340-authenticated-author-stored-cross-site-scripting 2026-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-352-cross-site-scripting 2013-06-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gestion-tarifs/gestion-de-tarifs-14-authenticated-contributor-sql-injection 2025-08-14T20:16:13.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fb-autoconnect/wp-fb-autoconnect-405-cross-site-request-forgery-to-stored-cross-site-scripting 2014-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leyka/leyka-3302-reflected-cross-site-scripting 2023-08-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/skt-templates/skt-templates-elementor-gutenberg-templates-614-reflected-cross-site-scripting 2024-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-coming-soon-product/woocommerce-coming-soon-product-with-countdown-50-authenticated-subscriber-stored-cross-site-scripting 2026-02-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-slider/product-slider-for-woocommerce-263-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2022-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fitness-trainer/fitness-trainer-171-missing-authorization 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comments-plus/disable-comments-delete-all-comments-130-missing-authorization 2026-05-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rognone/rognone-062-reflected-cross-site-scripting-via-a-parameter 2026-06-01T19:44:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/church-admin/church-admin-5018-unauthenticated-sql-injection 2025-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexible-faq/flexible-faq-02-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-post-types/wp-easy-post-types-144-authenticated-subscriber-missing-authorization-via-multiple-functions 2024-10-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/project-panorama-lite/panorama-wordpress-project-management-plugin-15-authenticated-administrator-stored-cross-site-scripting 2023-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elite-video-player/elite-video-player-1005-cross-site-request-forgery 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dont-muck-my-markup/dont-muck-my-markup-18-cross-site-request-forgery 2024-01-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/oss-upload/oss-upload-489-cross-site-request-forgery 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vkontakte-cross-post/vkontakte-cross-post-032-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wishlist/wishlist-1044-authenticated-subscriber-sql-injection 2025-04-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cost-of-goods-for-woocommerce/cost-of-goods-sold-cogs-cost-profit-calculator-for-woocommerce-328-reflected-cross-site-scripting 2024-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/frizzly/frizzly-110-reflected-cross-site-scripting 2025-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ryviu/ryviu-product-reviews-for-woocommerce-3126-missing-authorization 2026-01-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sassy-social-share/sassy-social-share-3373-open-redirect 2025-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/formlift/formlift-for-infusionsoft-web-forms-7517-unauthenticated-sql-injection 2024-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pre-orders/woocommerce-pre-orders-202-cross-site-request-forgery 2023-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/creative-mail-by-constant-contact/creative-mail-154-cross-site-request-forgery-to-settings-disconnect 2022-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mikado-core/mikado-core-16-authenticated-contributor-local-file-inclusion 2026-02-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/my-custom-css/my-custom-css-php-ads-33-unauthenticated-full-path-disclosure 2024-08-08T20:34:54.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/apppresser/apppresser-432-improper-missing-encryption-exception-handling-to-authentication-bypass 2024-05-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pagelayer/pagelayer-178-authenticatedcontributor-stored-cross-site-scripting-via-meta-fields 2024-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/solene-core/solene-core-232-unauthenticated-local-file-inclusion 2026-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/handsome-testimonials/handsome-testimonials-reviews-211-authenticated-sql-injection 2021-06-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/outdooractive-embed/outdooractive-embed-15-authenticated-contributor-stored-cross-site-scripting 2024-12-19T18:07:46.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-product-filter/product-filter-by-wbw-297-unauthenticated-sql-injection 2025-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/remote-content-shortcode/remote-content-shortcode-15-authenticatedcontributor-local-file-inclusion-via-shortcode 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/suretriggers/ottokit-1120-authenticated-administrator-sql-injection 2026-03-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seamless-donations/seamless-donations-a-platform-for-global-fundraising-and-rebuilding-using-stripe-and-paypal-5112-cross-site-scripting 2022-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/menu-in-post/menu-in-post-13-authenticated-contributor-stored-cross-site-scripting 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/import-users-from-csv-with-meta/import-and-export-users-and-customers-12712-unauthenticated-sensitive-information-disclosure 2025-01-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/poll-wp/ts-poll-survey-versus-poll-image-poll-video-poll-240-authenticated-administrator-sql-injection-via-orderby-parameter 2024-10-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/logo-scheduler-great-for-holidays-events-and-more/logo-scheduler-120-authenticated-administrator-stored-cross-site-scripting 2023-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bp-member-type-manager/bp-member-type-manager-101-reflected-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/autoptimize/autoptimize-316-authenticated-admin-stored-cross-site-scripting-via-critical-css-rules 2023-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/mamita/mamita-109-unauthenticated-local-file-inclusion 2025-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/speakout/speakout-email-petitions-465-unauthenticated-sql-injection 2026-04-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/subscribe-to-unlock/subscribe-to-unlock-115-authenticated-contributor-local-file-inclusion 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-ajax-navigation/yith-woocommerce-ajax-product-filter-3110-cross-site-scripting 2020-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/unusedcss/rapidload-power-up-for-autoptimize-171-cross-site-request-forgery-via-queue_posts 2023-03-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-maps-by-supsystic/ultimate-maps-by-supsystic-1215-authenticated-admin-stored-cross-site-scripting 2024-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-create-native-android-ios-apps-on-the-cloud-4152-authentication-bypass-to-account-takeover 2024-08-14T14:08:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/idyllic/idyllic-118-authenticated-contributor-stored-cross-site-scripting 2024-06-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/food-and-drink-menu/five-star-restaurant-menu-2414-authenticated-contributor-stored-cross-site-scripting 2024-03-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/candidate-application-form/candidate-application-form-13-arbitrary-file-download 2015-07-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/header-image-slider/header-image-slider-03-reflected-cross-site-scripting 2024-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/foogallery/best-wordpress-gallery-plugin-foogallery-247-authenticatedadministrator-stored-cross-site-scripting-via-settings 2024-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tlp-team/team-team-members-showcase-plugin-441-authenticated-admin-stored-cross-site-scripting 2024-10-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-pocket-urls/wp-pocket-urls-103-authenticated-contributor-stored-cross-site-scripting 2024-11-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/skimlinks/skimlinks-affiliate-marketing-tool-13-missing-authorization 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-aweber-newsletter-subscription/woocommerce-aweber-newsletter-subscription-402-missing-authorization-to-access-token-modification 2024-04-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/stratum/stratum-widgets-for-elementor-161-missing-authorization 2025-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mindbody-access-management/mz-mbo-access-208-cross-site-request-forgery 2021-06-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multiple-pages-generator-by-porthas/multiple-page-generator-plugin-mpg-3319-authenticated-administrator-sql-injection-in-projects_list-and-total_projects 2023-05-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visualizer/visualizer-tables-and-charts-manager-for-wordpress-31114-missing-authorization-to-authenticated-subscriber-arbitrary-chart-creation-and-modification-via-renderchartpages-and-uploaddata-functions 2026-05-27T19:31:18.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/migrate-users/migrate-users-101-cross-site-request-forgery-to-stored-cross-site-scripting 2021-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-elements/jetelements-for-elementor-2613-missing-authorization-to-unauthenticated-arbitrary-attachment-download 2023-11-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-digital-downloads/easy-digital-downloads-325-authenticated-contributor-stored-cross-site-scripting 2023-12-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-job-portal/wp-job-portal-a-complete-recruitment-system-for-company-or-job-board-website-224-authenticated-subscriber-insecure-direct-object-reference 2025-01-02T19:25:08.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-polls/wp-polls-2760-race-condition 2022-10-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/planty/planty-1140-unauthenticated-local-file-inclusion 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/organization-chart/organization-chart-141-missing-authorization 2022-11-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gm-woocommerce-quote-popup/product-enquiry-for-woocommerce-30-authenticated-admin-stored-cross-site-scripting 2023-12-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpaudio-mp3-player/wpaudio-mp3-player-402-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woozone/woocommerce-amazon-affiliates-wordpress-plugin-14010-authenticated-subscriber-sql-injection 2024-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/create-db-tables/create-db-tables-121-missing-authorization-to-authenticated-subscriber-arbitrary-database-table-creationdeletion-via-admin-postphp 2026-04-21T19:08:50.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/affiliates-manager/affiliates-manager-2920-cross-site-request-forgery-via-process_bulk_action 2023-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/taskbuilder/taskbuilder-508-authenticated-subscriber-sql-injection-via-wppm_proj_filter-parameter 2026-06-30T15:19:52.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dzs-wootable/woocommerce-shop-page-builder-2277-reflected-cross-site-scripting 2025-07-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-school-registration/easy-school-registration-398-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-api-for-wp/custom-api-for-wp-422-unauthenticated-sql-injection 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/salient-shortcodes/salient-shortcodes-153-authenticated-contributor-local-file-inclusion-via-shortcode 2024-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/highlight-focus/highlight-focus-11-authenticated-administrator-stored-cross-site-scripting 2022-10-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-invoice/easy-invoice-209-unauthenticated-stored-cross-site-scripting 2025-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/activitypub/activitypub-0170-authenticated-subscriber-insecure-direct-object-reference-to-sensitive-post-title-exposure 2023-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/laposta-signup-basic/laposta-signup-basic-141-cross-site-request-forgery 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lbg-vp2-html5-rightside/html5-video-player-with-playlist-multiple-skins-535-reflected-cross-site-scripting 2026-01-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/embed-calendly-scheduling/embed-calendly-36-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mappress-google-maps-for-wordpress/mappress-maps-for-wordpress-2948-authenticated-contributor-stored-cross-site-scripting 2025-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-icon-badge/ns-product-icon-badge-124-reflected-cross-site-scripting-via-php_self 2026-05-26T17:24:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-tabs-for-wpbakery/responsive-tabs-for-wpbakery-page-builder-11-authenticatedcontributor-stored-cross-site-scripting-via-shortcode 2023-05-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/leadinfo/leadinfo-11-missing-authorization-to-unauthenticated-settings-change 2025-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wicked-folders/wicked-folders-21816-missing-authorization-via-ajax_save_state 2023-02-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-field-template/custom-field-template-265-authenticated-contributor-stored-cross-site-scripting 2024-08-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-shipos-delivery/deliver-via-shipos-for-woocommerce-302-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/calj/calj-15-authenticated-subscriber-arbitrary-settings-modification-via-save-obtained-key-action 2026-04-21T19:08:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/1.0/wordpress-mu-10-cross-site-scripting 2007-08-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advanced-access-manager/advanced-access-manager-661-authenticated-information-disclosure 2020-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rsvpmaker-volunteer-roles/rsvpmaker-volunteer-roles-151-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-polls/wp-polls-271-sql-injection 2019-08-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/food-and-drink-menu/five-star-restaurant-menu-and-food-ordering-2410-unauthenticated-php-object-injection 2023-10-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jet-popup/jetpopup-20201-authenticated-contributor-insecure-direct-object-reference 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/intelly-related-posts/inline-related-posts-380-authenticated-contributor-stored-cross-site-scripting 2025-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ithemelandco-woo-report/woocommerce-report-151-cross-site-request-forgery-to-arbitrary-options-update 2024-11-04T19:57:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wc-order-limit-lite/order-limit-for-woocommerce-200-missing-authorization 2024-04-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-checker-real-time/responsive-check-003-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-05-26T17:22:02.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weather-layer/weather-layer-421-authenticated-administrator-stored-cross-site-scripting 2025-03-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-property-listings-xml-csv-import/import-into-easy-property-listings-221-cross-site-request-forgery 2025-12-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-slimstat/slimstat-analytics-392-cross-site-scripting 2015-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/google-map-professional/google-map-professional-10-reflected-cross-site-scripting 2025-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-media-download/easy-media-download-115-contributor-stored-cross-site-scripting 2021-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fastpicker/fastpicker-an-order-picker-and-order-management-system-oms-for-woocommerce-on-steroids-102-cross-site-request-forgery-via-settings-save 2026-06-08T15:05:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woolementor/codesigner-woocommerce-builder-for-elementor-customize-checkout-shop-email-products-more-441-unauthenticated-php-object-injection 2024-06-12T19:54:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/brook/brook-290-unauthenticated-local-file-inclusion 2026-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-gmail-smtp/gmail-smtp-107-cross-site-request-forgery 2025-12-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simplified/simplified-plugin-106-unauthenticated-arbitrary-file-upload 2025-01-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/garagesale/garagesale-123-cross-site-scripting 2014-05-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/citations-tools/citations-tools-032-authenticated-contributor-stored-cross-site-scripting-via-code-shortcode-attribute 2026-02-13T16:19:01.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-student-results/easy-student-results-228-missing-authorization-to-sensitive-information-disclosure 2022-07-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/lifterlms/lifterlms-wordpress-lms-plugin-for-elearning-751-missing-authorization-via-process_review 2024-02-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/morkva-ua-shipping/morkva-ua-shipping-179-authenticated-administrator-stored-cross-site-scripting-via-weight-kg-field 2026-03-03T12:44:45.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/prowess/prowess-23-authenticated-contributor-local-file-inclusion 2026-01-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/redirect-by-cookie/redirect-by-cookie-106-reflected-cross-site-scripting 2022-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ifolders/ifolders-150-authenticated-administrator-stored-cross-site-scripting 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/html-forms/html-forms-simple-wordpress-forms-plugin-1333-cross-site-request-forgery 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-event-solution/eventin-4028-reflected-cross-site-scripting 2025-06-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bitcoin-lightning-publisher/bitcoin-lightning-publisher-for-wordpress-141-reflected-cross-site-scripting 2024-12-23T16:50:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-pdf-invoices-packing-slips/woocommerce-pdf-invoices-packing-slips-491-missing-authorization 2025-12-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/revolution_video_player/revolution-video-player-with-bottom-playlist-292-reflected-cross-site-scripting 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/goodlayers-core/goodlayers-core-212-authenticated-subscriber-stored-cross-site-scripting-via-svg-upload 2025-01-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/proteccion-datos-rgpd/proteccin-de-datos-rgpd-068-missing-authorization 2026-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/w3-total-cache/w3-total-cache-plugin-0973-reflected-cross-site-scripting 2019-05-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ewww-image-optimizer/ewww-image-optimizer-720-unauthenticated-sensitive-information-exposure-via-debug-log 2023-11-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-easycart/shopping-cart-ecommerce-store-510-cross-site-request-forgery-to-stored-cross-site-scripting 2021-08-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/just-highlight/just-highlight-103-authenticated-administrator-stored-cross-site-scripting-via-highlight-color-setting 2025-11-24T19:13:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-posts-widget/ultimate-posts-widget-230-authenticated-administrator-stored-cross-site-scripting 2024-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/loginpress/loginpress-custom-login-page-customizer-162-missing-authorization-to-settings-changes 2022-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-wp-security/ithemes-security-344-cross-site-scripting 2012-08-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-statistics/wp-statistics-1315-unauthenticated-stored-cross-site-scripting-via-platform 2022-02-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-product-catalogue/ultimate-product-catalog-4211-cross-site-scripting 2017-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/flexible-shipping-ups/woocommerce-ups-shipping-live-rates-and-access-points-224-cross-site-request-forgery 2024-04-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/weluka-lite/weluka-lite-103-authenticated-contributor-stored-cross-site-scripting 2025-05-14T14:26:35.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/elementskit-lite/elementskit-elementor-addons-327-authenticated-contributor-stored-cross-site-scripting-via-video-widget 2024-09-24T23:43:47.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kkprogressbar/kkprogressbar2-free-1142-cross-site-request-forgery-to-stored-cross-site-scripting 2024-05-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ultimate-csv-importer/wp-ultimate-csv-importer-640-arbitrary-file-upload 2022-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/traveler/traveler-316-missing-authorization-in-several-ajax-actions 2024-12-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/user-submitted-posts/user-submitted-posts-enable-users-to-submit-posts-from-the-front-end-20230811-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-09-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-database-backup/wp-database-backup-52-unauthenticated-os-command-injection 2019-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-css-js-php/custom-css-js-php-207-cross-site-request-forgery-bypass 2021-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-fusion-lite/wp-fusion-lite-34124-authenticated-contributor-remote-code-execution 2024-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-eMember/wp-emember-1065-cross-site-request-forgery 2024-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/product-import-export-for-woo/product-import-export-for-woocommerce-250-directory-traversal-to-authenticated-administrator-limited-arbitrary-file-deletion-via-admin_log_page-function 2025-03-25T23:22:17.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/aruba-hispeed-cache/aruba-hispeed-cache-304-cross-site-request-forgery-to-plugin-settings-reset 2026-04-09T12:50:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-product-addon/ppom-for-woocommerce-3206-reflected-cross-site-scripting 2023-05-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seo-monster/seo-monster-333-cross-site-request-forgery-to-stored-cross-site-scripting 2025-09-10T18:50:58.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/kubio/kubio-ai-page-builder-235-reflected-cross-site-scripting 2025-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ulike/wp-ulike-most-advanced-wordpress-marketing-toolkit-469-authenticated-contributor-sql-injection-via-shortcodes 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/media-library-plus/media-library-folders-822-authenticated-subscriber-second-order-sql-injection 2024-08-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-amazon-affiliates-light-version/wzone-lite-31-cross-site-request-forgery 2022-09-30T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sherk-custom-post-type-displays/sherk-custom-post-type-displays-121-authenticated-contributor-stored-cross-site-scripting-via-title-shortcode-attribute 2026-03-20T15:09:43.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/jquery-news-ticker/jquery-news-ticker-31-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-12-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/responsive-addons-for-elementor/responsive-addons-for-elementor-208-missing-authorization 2026-01-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-404-pro/custom-404-pro-372-unauthenticated-sql-injection 2023-04-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/service-booking-manager/appointment-booking-plugin-for-woocommerce-wpbookingly-all-in-one-service-manager-129-missing-authorization 2026-05-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quiz-master-next/quiz-and-survey-master-qsm-1112-authenticated-admin-sql-injection-via-order-and-limit-parameters 2026-06-05T10:44:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rsvp/rsvp-and-event-management-2713-missing-authorization 2025-01-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/learnpress/learnpress-wordpress-lms-plugin-4293-missing-authorization-to-unauthenticated-database-table-manipulation 2025-10-17T18:38:36.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/qc-simple-link-directory/simple-link-directory-1481-reflected-cross-site-scripting 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fancy-product-designer/fancy-product-designer-617-reflected-cross-site-scripting 2024-04-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-travel/wp-travel-770-missing-authorization-via-multiple-ajax-actions 2023-11-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/roi-calculator/roi-calculator-10-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bulletin-announcements/announcement-notification-banner-bulletin-360-missing-authorization-checks 2023-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/miniorange-login-with-eve-online-google-facebook/oauth-single-sign-on-sso-oauth-client-62612-authentication-bypass-via-get_resource_owner_from_id_token 2025-10-03T14:11:31.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hurrytimer/hurrytimer-an-scarcity-and-urgency-countdown-timer-for-wordpress-woocommerce-2142-authenticated-author-stored-cross-site-scripting 2026-01-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-content-shortcode/custom-content-shortcode-402-authenticated-contributor-local-file-inclusion-via-shortcode 2023-02-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-bannerize-pro/wp-bannerize-pro-1100-authenticated-editor-server-side-request-forgery 2025-09-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/slider-wd/slider-by-10web-responsive-image-slider-1254-reflected-cross-site-scripting 2024-04-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/social-pug/grow-social-1182-reflected-cross-site-scripting 2021-07-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woocommerce-dropshipping/woocommerce-dropshipping-premium-524-missing-authorization 2026-06-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/advance-search/wp-advanced-search-116-authenticated-administrator-sql-injection 2024-04-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ipanorama-360-virtual-tour-builder-lite/ipanorama-360-wordpress-virtual-tour-builder-183-missing-authorization 2024-07-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-mobile-friendly-image-gallery-1821-reflected-cross-site-scripting-via-thumb_url 2024-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/events-made-easy/events-made-easy-2314-authenticated-subscriber-sql-injection-via-search_name 2023-03-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/additional-order-filters-for-woocommerce/additional-order-filters-for-woocommerce-122-cross-site-request-forgery 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpmarketplace/wp-marketplace-complete-shopping-cart-ecommerce-solution-121-arbitrary-file-upload 2012-04-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/vikbooking/vikbooking-hotel-booking-engine-pms-1512-cross-site-request-forgery-in-savetranslationstay-function 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visualizer/visualizer-tables-and-charts-manager-for-wordpress-379-authenticated-contributor-phar-deserialization 2022-07-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/smart-flv/smart-flv-10-cross-site-scripting 2013-02-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventprime-event-calendar-management/eventprime-events-calendar-bookings-and-tickets-342-missing-authorization-to-authenticated-subscriber-attendee-list-retrieval 2024-02-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/easy-login-woocommerce/loginsignup-popup-294-authenticated-administrator-stored-cross-site-scripting 2025-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/dt-the7/the7-ultimate-wordpress-woocommerce-theme-1291-authenticated-contributor-stored-cross-site-scripting-via-the7_fancy_title_css 2025-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quick-event-manager/quick-event-manager-974-cross-site-request-forgery 2023-01-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/charitydonation-thermometer/charity-thermometer-112-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-cross-site-scripting-in-oembed 2017-09-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/woo-wallet/terawallet-for-woocommerce-1324-cross-site-request-forgery-via-admin_options 2023-02-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tutor/tutor-lms-153-cross-site-request-forgery 2020-02-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/admin-post-navigation/admin-post-navigation-21-unauthenticated-full-path-disclosure 2024-07-26T13:08:57.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/nifty-coming-soon-and-under-construction-page/coming-soon-maintenance-mode-page-157-cross-site-request-forgery-bypass 2020-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blog-settings/blog-settings-10-reflected-cross-site-scripting-via-page-parameter 2026-05-04T14:07:42.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/streamweasels-twitch-integration/streamweasels-twitch-integration-186-authenticated-contributor-stored-cross-site-scripting-via-sw-twitch-embed-shortcode 2024-10-18T20:37:40.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-contact-form-3422-stored-cross-site-scripting 2020-02-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happyfiles-pro/happyfiles-pro-181-missing-authorization 2023-03-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wibiya/wibiya-toolbar-20-cross-site-request-forgery-to-stored-cross-site-scripting 2025-02-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visitor-maps-extended-referer-field/visitor-maps-extended-referer-field-126-reflected-cross-site-scripting 2026-02-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/happy-elementor-addons/happy-addons-for-elementor-3203-missing-authorization 2025-12-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/agecheckernet/age-verification-for-your-checkout-page-verify-your-customers-identity-1200-reflected-cross-site-scripting 2025-01-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/eventon-lite/eventon-wordpress-virtual-event-calendar-plugin-454-pro-227-free-missing-authorization-via-get_virtual_users 2024-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/show-youtube-video/show-youtube-video-11-authenticated-contributor-stored-cross-site-scripting-via-id-shortcode-attribute 2026-03-06T18:47:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/fantastic-elasticsearch/fantastic-elasticsearch-410-reflected-cross-site-scripting 2025-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/general-options/general-options-110-authenticated-administrator-stored-cross-site-scripting-via-ad_contact_number-parameter 2026-05-19T12:04:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pdf-for-wpforms/pdf-for-wpforms-530-missing-authorization-to-authenticated-subscriber-arbitrary-shortcode-execution 2025-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tiny-carousel-horizontal-slider/tiny-carousel-horizontal-slider-81-authenticated-administrator-stored-cross-site-scripting 2023-09-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/multi-column-tag-map/multi-column-tag-map-17026-cross-site-request-forgery 2023-09-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/hr-press-lite/hr-press-lite-102-missing-authorization-to-authenticated-subscriber-sensitive-employee-information-exposure 2026-03-20T15:15:10.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tinymce-custom-styles/tinymce-custom-styles-113-authenticated-administrator-stored-cross-site-scripting 2023-06-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-cassify/wp-cassify-235-authenticated-contributor-stored-cross-site-scripting 2025-03-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpzoom-shortcodes/wpzoom-shortcodes-101-reflected-cross-site-scripting 2024-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/request-a-quote/request-a-quote-238-csv-injection 2022-06-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpbrutalai/wp-brutal-ai-201-reflected-cross-site-scripting 2023-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/omnipress/omnipress-167-authenticated-contributor-local-file-inclusion 2026-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ultimate-instagram-feed/ultimate-instagram-feed-wordpress-plugin-131-cross-site-scripting 2017-11-06T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/quotes-llama/quotes-llama-310-authenticated-contributor-stored-cross-site-scripting 2025-03-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/theme-builder-for-elementor/theme-builder-for-elementor-123-cross-site-request-forgery 2025-07-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/envira-gallery-lite/envira-gallery-1124-authenticated-author-stored-cross-site-scripting-via-arrows-parameter 2026-05-13T14:42:15.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/popup-by-supsystic/popup-by-supsystic-1108-sensitive-information-disclosure 2022-04-18T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seraphinite-accelerator/seraphinite-accelerator-base-cache-only-22031-cross-site-request-forgery 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/mstore-api/mstore-api-396-cross-site-request-forgery-to-firebase-server-key-update 2023-06-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/football-live-scores/football-live-scores-15-missing-authorization 2022-06-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/optinly/optinly-1015-cross-site-request-forgery 2022-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/klaviyo/klaviyo-307-authenticated-administrator-stored-cross-site-scripting 2023-03-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wheel-of-life/wheel-of-life-118-missing-authorization 2024-09-25T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/all-in-one-wp-security-and-firewall/all-in-one-security-aios-547-unauthenticated-stored-cross-site-scripting-via-rest-api-request-path 2026-06-05T11:51:22.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/listingpro-lead-form/listingpro-lead-form-102-authenticated-contributor-stored-cross-site-scripting 2025-10-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/the-tooltip/the-tooltip-102-authenticated-contributor-stored-cross-site-scripting-via-shortcode-attributes 2026-01-08T21:20:51.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tochat-be/tochatbe-134-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/simple-meta-tags/simple-meta-tags-15-authenticated-contributor-stored-cross-site-scripting 2025-09-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/comment-attachment/comment-attachment-155-cross-site-scripting 2013-09-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bounce-handler-mailpoet/bounce-handler-mailpoet-3-1321-reflected-cross-site-scripting 2024-11-15T15:04:12.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/coub/coub-14-authenticated-contributor-stored-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/pj/pj-life-business-coaching-300-unauthenticated-local-file-inclusion 2026-02-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/pricing-table-addon-for-elementor/pricing-table-addon-for-elementor-100-authenticated-contributor-local-file-inclusion 2024-11-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/better-wp-security/better-wp-security-324-multiple-cross-site-scripting 2012-05-11T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/uss-upyun/uss-upyun-150-cross-site-request-forgery 2025-09-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-attractive-donations-system-easy-stripe-paypal-donations/wp-attractive-donations-system-129-cross-site-request-forgery 2025-09-22T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/element-ready-lite/elementsready-addons-for-elementor-610-authenticated-contributor-stored-cross-site-scripting 2024-06-05T15:36:55.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wpfunnels/wpfunnels-362-missing-authorization 2025-11-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/bdthemes-element-pack-lite/element-pack-elementor-addons-header-footer-template-library-dynamic-grid-carousel-remote-arrows-51012-missing-authorization 2024-12-21T12:54:05.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/web-cam/web-cam-30-authenticated-contributor-stored-cross-site-scripting-via-slug-parameter 2025-06-25T14:07:37.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/grid-plus/grid-plus-132-missing-authorization-to-authenticated-subscriber-grid-layout-addupdatedelete 2023-10-29T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cm-table-of-content/cm-table-of-contents-122-cross-site-request-forgery 2024-10-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/visualcomposer/visual-composer-website-builder-45110-authenticated-contributor-stored-cross-site-scripting 2025-05-19T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/intuitive-custom-post-order/intuitive-custom-post-order-313-cross-site-request-forgery 2023-01-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-time-slots-booking-form/time-slots-booking-form-1242-missing-authorization 2026-03-02T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/splash/splash-sport-club-wordpress-theme-for-basketball-football-hockey-443-authenticated-contributor-local-file-inclusion 2026-06-26T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/add-replace-affiliate-links-for-amazon/add-amp-replace-affiliate-links-for-amazon-106-authenticated-administrator-stored-cross-site-scripting 2025-06-27T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/photo-gallery/photo-gallery-by-10web-1343-authenticated-path-traversal 2017-06-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-books-gallery/wordpress-books-gallery-448-cross-site-request-forgery-leading-to-plugin-settings-changes 2023-02-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/chinchilla/chinchilla-116-unauthenticated-local-file-inclusion 2025-08-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/b2bking-wholesale-for-woocommerce/b2bking-4600-missing-authorization-to-authenticatedsubscriber-information-disclosure 2023-06-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/cookiebot/cookie-banner-plugin-for-wordpress-cookiebot-cmp-by-usercentrics-441-missing-authorization-to-authenticated-subscriber-survey-submission 2025-03-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-krpano/wp-krpano-121-authenticated-contributor-stored-cross-site-scripting 2025-01-16T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/widget-logic/widget-logic-605-authenticated-contributor-remote-code-execution 2025-06-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/caldera-forms/caldera-forms-196-reflected-cross-site-scripting-via-cf-api 2022-03-28T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/count-per-day/count-per-day-355-reflected-cross-site-scripting 2016-08-04T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/customized-login/login-manager-design-login-page-view-login-activity-limit-login-attempts-205-authenticated-administrator-stored-cross-site-scripting-via-custom-url 2025-04-17T12:41:19.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sola-support-tickets/sola-support-ticket-318-missing-authorization-to-authenticated-subscriber-arbitrary-content-deletion 2025-06-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-meta-data-filter-and-taxonomy-filter/mdtf-meta-data-and-taxonomies-filter-1335-authenticated-contributor-sql-injection 2025-01-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-functions/custom-functions-plugin-11-cross-site-request-forgery-to-stored-cross-site-scripting 2025-04-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/support-x/crm-perks-wordpress-helpdesk-integration-zendesk-freshdesk-helpscout-115-reflected-cross-site-scripting 2024-11-23T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ulike/wp-ulike-468-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-10-12T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/ninja-forms/ninja-forms-386-cross-site-request-forgery 2024-07-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/gutenverse-form/gutenverse-form-231-missing-authorization 2025-12-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-user-frontend/wp-user-frontend-407-authenticated-administrator-sql-injection 2024-08-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/seers-cookie-consent-banner-privacy-policy/seers-811-missing-authorization-via-multiple-ajax-actions 2023-11-07T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/print-my-blog/print-my-blog-print-pdf-ebook-converter-3158-unprotected-ajax-actions 2022-06-20T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/dynamic-widgets/dynamic-widgets-151-cross-site-scripting 2012-05-15T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/miraculous/miraculous-209-unauthenticated-sql-injection 2025-09-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/js-multihotel/js-multi-hotel-221-cross-site-scripting 2014-03-31T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-custom-cursors/wp-custom-cursors-301-authenticated-administrator-sql-injection 2022-09-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-495-authenticated-stored-cross-site-scripting-via-generator-tag 2018-04-03T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/combo-wp-rewrite-slugs/combo-wp-rewrite-slugs-10-missing-authorization-to-authenticated-subscriber-settings-change 2024-11-08T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/custom-registration-form-builder-with-submission-manager/registrationmagic-6069-cross-site-request-forgery 2026-01-10T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/themes/hello-elementor/hello-elementor-300-cross-site-request-forgery-to-notice-dismissal 2024-04-05T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/opal-membership/opal-membership-124-authenticated-subscriber-information-disclosure 2024-08-09T15:03:14.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/saksh-escrow-system/saksh-escrow-system-24-authenticated-subscriber-sql-injection 2024-12-14T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/sirv/image-optimizer-resizer-and-cdn-sirv-720-authenticated-subscriber-server-side-request-forgery 2024-03-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/robo-gallery/robo-gallery-3221-authenticated-author-stored-cross-site-scripting 2024-10-21T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/rac/woocommerce-recover-abandoned-cart-2460-missing-authorization-to-unauthenticated-arbitrary-content-deletion 2025-11-09T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/beaver-builder-lite-version/beaver-builder-wordpress-page-builder-2805-authenticated-contributor-stored-cross-site-scripting-via-button 2024-04-01T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/tripplan/trip-plan-1010-authenticated-contributor-stored-cross-site-scripting 2024-10-24T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/wp-ecommerce-cvs-importer/swfupload-2201-cross-site-scripting 2012-11-09T20:12:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/getwid/getwid-gutenberg-blocks-204-captcha-bypass 2024-01-17T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/peepso-files/peepso-core-file-uploads-6460-insecure-direct-object-reference-to-unauthenticated-sensitive-information-exposure-via-file_download 2025-05-13T00:00:00.000Z monthly 0.5 https://wordsec.net/vulnerabilities/plugins/blocksy-companion/blocksy-companion-1881-authenticatedsubscriber-sensitive-information-exposure-via-blocksy_posts-shortcode 2023-04-10T00:00:00.000Z monthly 0.5