https://wordsec.net/vulnerabilities/plugins/norse-runes-oracle/norse-rune-oracle-plugin-142-cross-site-request-forgery-to-stored-cross-site-scripting 2025-01-07T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/wp-donimedia-carousel/wp-donimedia-carousel-101-authenticated-subscriber-arbitrary-file-upload 2024-10-28T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/addons-for-visual-composer/wpbakery-page-builder-addons-by-livemesh-394-missing-authorization-to-authenticated-subscriber-stored-cross-site-scripting 2026-05-26T17:33:39.000Z https://wordsec.net/vulnerabilities/plugins/addons-for-elementor/livemesh-addons-for-elementor-90-authenticated-contributor-stored-cross-site-scripting 2026-02-13T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/gs-woocommerce-products-slider/gs-products-slider-for-woocommerce-158-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-01-30T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/rs-wp-books-showcase/rs-wp-book-showcase-6740-authenticated-contributor-stored-cross-site-scripting 2025-05-07T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/football-pool/football-pool-2113-authenticated-contributor-stored-cross-site-scripting 2024-01-08T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/auto-load-next-post/auto-load-next-post-1514-cross-site-request-forgery 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/multiple-votes-in-one-page/multiple-votes-in-one-page-104-authenticated-contributor-stored-cross-site-scripting 2024-11-08T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/participants-database/participants-database-2783-missing-authorization-to-unauthenticated-arbitrary-record-update-sensitive-information-exposure-via-id-parameter 2026-07-23T14:30:26.000Z https://wordsec.net/vulnerabilities/plugins/arconix-faq/arconix-faq-195-reflected-cross-site-scripting 2025-04-10T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/gdpr-compliant-recaptcha-for-all-forms/invisible-anti-spam-captcha-51-unauthenticated-stored-cross-site-scripting-via-action-parameter 2026-08-14T15:08:15.000Z https://wordsec.net/vulnerabilities/plugins/wp-clone-any-post-type/wp-clone-any-post-type-36-missing-authorization 2025-04-01T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/school-management/school-management-9150-unauthenticated-arbitrary-file-upload 2024-11-22T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/usc-e-shop/welcart-e-commerce-21122-authenticated-editor-stored-cross-site-scripting-via-order_mail 2025-10-21T17:22:23.000Z https://wordsec.net/vulnerabilities/plugins/woocommerce-box-office/woocommerce-box-office-122-missing-authorization 2024-01-31T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/wp-affiliate-platform/wp-affiliate-platform-651-cross-site-request-forgery-to-stored-cross-site-scripting 2024-06-22T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/simple-file-list/simple-file-list-327-arbitrary-file-download 2019-05-23T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/media-library-organizer/media-library-organizer-204-213-missing-authorization 2026-09-28T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/gtranslate/translate-wordpress-with-gtranslate-298-translate-wordpress-google-language-translator-6013-missing-authorization-to-sensitive-information-disclosure 2022-03-07T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/visual-recent-posts/visual-recent-posts-123-reflected-cross-site-scripting 2024-12-12T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/calendar/calendar-138-reflected-cross-site-scripting 2016-11-08T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/jet-popup/jetpopup-2011-missing-authorization 2025-04-15T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/bus-ticket-booking-with-seat-reservation/bus-ticket-booking-with-seat-reservation-523-reflected-cross-site-scripting 2023-08-01T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/free-comments-for-wordpress-vuukle/vuukle-comments-reactions-share-bar-revenue-3431-cross-site-request-forgery-bypass 2021-07-05T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/formidable/formidable-forms-67-html-injection 2024-01-08T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/cm-pop-up-banners/cm-pop-up-banners-1510-authenticated-subscriber-sql-injection-via-getstatistics 2023-05-03T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/synved-shortcodes/wordpress-shortcodes-1636-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-02-13T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/darkmysite/darkmysite-advanced-dark-mode-plugin-for-wordpress-128-cross-site-request-forgery 2024-10-24T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/forms-signature-formidable-online-contract-automation/formidable-forms-signature-online-contract-automation-201-unauthenticated-insecure-direct-object-reference 2026-07-28T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/ultimate-blocks/ultimate-blocks-330-authenticated-contributor-stored-cross-site-scripting 2025-05-19T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/userpro/userpro-4920-privilege-escalation 2019-01-03T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/post-grid-carousel-ultimate/post-grid-slider-carousel-ultimate-with-shortcode-gutenberg-block-elementor-widget-1610-authenticated-contributor-local-file-inclusion 2025-01-23T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/xili-dictionary/xili-dictionary-2125-reflected-cross-site-scripting 2025-03-27T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/optimate-ads/optimate-ads-103-authenticated-subscriber-stored-cross-site-scripting 2025-02-03T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/mainwp-child-reports/mainwp-child-reports-207-admin-sql-injection 2021-09-20T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/radius-blocks/radius-blocks-221-authenticated-contributor-stored-cross-site-scripting-via-subheadingtagname-parameter 2025-08-14T20:13:25.000Z https://wordsec.net/vulnerabilities/plugins/optional-email/optional-email-1311-unauthenticated-privilege-escalation-to-account-takeover 2026-01-06T19:57:29.000Z https://wordsec.net/vulnerabilities/plugins/geo-mashup/geo-mashup-11312-authenticated-contributor-stored-cross-site-scripting 2024-09-16T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/ai-wp-writer/ai-wp-writer-3844-cross-site-request-forgery 2025-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/wp-event-solution/eventin-event-calendar-tickets-registration-booking-woocommerce-4123-authenticated-subscriber-privilege-escalation-via-map_meta_cap-filter 2026-09-14T17:13:14.000Z https://wordsec.net/vulnerabilities/plugins/elementskit-lite/elementskit-lite-303-unauthenticated-sensitive-information-exposure 2024-01-08T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/gamipress/gamipress-256-cross-site-request-forgery-to-user-earnings-deletion 2023-02-14T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/rt-mega-menu/rt-mega-menu-mega-menu-builder-for-elementor-gutenberg-151-authenticated-subscriber-stored-cross-site-scripting 2026-07-27T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/paid-member-subscriptions/paid-member-subscriptions-2151-unauthenticated-sql-injection 2025-07-03T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/wp-google-places-review-slider/wp-google-review-slider-155-authenticated-admin-stored-cross-site-scripting 2025-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/ulisting/ulisting-166-unauthenticated-options-changes-via-wp_route 2021-01-28T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/taxonomy-discounts-woocommerce/taxonomyterm-and-role-based-discounts-for-woocommerce-51-cross-site-request-forgery-to-settings-update 2025-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/email-subscribers/email-subscribers-newsletters-422-unauthenticated-option-creation 2019-11-13T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/accordions-wp/accordion-26-authenticated-editor-stored-cross-site-scripting-via-accordion-settings 2023-11-15T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/hospital-doctor-directory/hospital-doctor-directory-139-authenticated-subscriber-privilege-escalation 2026-01-22T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/shareaholic/shareaholic-978-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2023-11-14T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/advanced-popups/advanced-popups-123-authenticated-author-stored-cross-site-scripting-via-notification-button-link-field 2026-09-15T15:27:04.000Z https://wordsec.net/vulnerabilities/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-wordpress-plugin-for-online-courses-and-education-3730-missing-authorization 2026-06-26T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/wp-download-codes/wp-download-codes-254-reflected-cross-site-scripting 2025-01-16T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/browser-and-operating-system-finder/browser-and-operating-system-finder-12-missing-authorization 2022-06-02T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/if-menu/if-menu-0191-missing-authorization-to-license-key-update 2024-12-06T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/wp-3dflick-slideshow/3d-flick-slideshow-22-arbitrary-file-upload 2012-06-01T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/googmonify/googmonify-051-cross-site-request-forgery-to-cross-site-scripting 2015-08-23T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/order-delivery-date-for-woocommerce/order-delivery-date-for-woocommerce-3210-cross-site-request-forgery-to-notice-dismissal 2024-04-12T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/yith-slider-for-page-builders/yith-slider-for-page-builders-1011-missing-authorization 2025-12-24T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/falcon/falcon-wordpress-optimizations-tweaks-2100-missing-authorization 2026-07-23T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/auto-youtube-importer/auto-youtube-importer-103-cross-site-request-forgery 2023-02-03T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/social-testimonials-and-reviews-widget/social-proof-testimonials-and-reviews-by-repuso-520-authenticated-contributor-stored-cross-site-scripting 2025-01-14T21:08:00.000Z https://wordsec.net/vulnerabilities/plugins/m1downloadlist/m1downloadlist-019-authenticated-contributor-stored-cross-site-scripting 2025-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/badgearoo/badgearoo-1014-reflected-cross-site-scripting 2025-02-14T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/fv-wordpress-flowplayer/fv-player-75567211-authenticated-contributor-server-side-request-forgery 2026-11-02T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/yop-poll/yop-poll-642-ip-spoofing-via-x-forwarded-for-header 2022-07-11T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/woocommerce-shipping-canada-post/woocommerce-canada-post-shipping-283-cross-site-request-forgery 2023-11-14T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/real-time-validation-for-gravity-forms/real-time-validation-for-gravity-forms-170-unauthenticated-local-file-inclusion 2025-05-30T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/acf-link-picker-field/advanced-custom-fields-link-picker-field-128-reflected-cross-site-scripting 2025-04-11T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/enteraddons/enter-addons-ultimate-template-builder-for-elementor-219-authenticated-contributor-post-disclosure 2024-11-22T15:09:31.000Z https://wordsec.net/vulnerabilities/plugins/demo-importer-plus/demo-importer-plus-208-missing-authorization-to-authenticated-subscriber-site-reset-and-privilege-escalation 2025-12-17T21:19:54.000Z https://wordsec.net/vulnerabilities/plugins/easy-table-of-contents/easy-table-of-contents-20452-missing-authorization-via-eztoc_reset_options_to_default 2023-03-21T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/happyforms/happyforms-1259-reflected-cross-site-scripting 2023-11-27T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/recipe-card-blocks-by-wpzoom/recipe-card-blocks-by-wpzoom-280-reflected-cross-site-scripting 2021-08-24T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/easy-testimonials/easy-testimonials-1361-authenticated-stored-cross-site-scripting 2016-07-31T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/wp-event-manager/event-manager-341-authenticated-subscriber-insecure-direct-object-reference 2026-11-02T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/bookingpress-appointment-booking/bookingpress-1011-sql-injection 2022-02-28T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/siteimprove/siteimprove-206-cross-site-request-forgery 2024-04-11T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/tablepress/tablepress-242-authenticated-author-stored-cross-site-scripting 2024-10-11T20:34:39.000Z https://wordsec.net/vulnerabilities/plugins/download-manager/download-manager-3324-cross-site-request-forgery 2025-09-26T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/count-per-day/count-per-day-355-unauthenticated-stored-cross-site-scripting 2016-08-05T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/popup-more/popup-more-popups-232-authenticated-administrator-stored-cross-site-scripting 2024-05-14T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/woocommerce-one-page-checkout/woocommerce-one-page-checkout-230-authenticated-contributor-local-file-inclusion-via-woocommerce_one_page_checkout 2023-08-10T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/ays-popup-box/popup-box-412-cross-site-request-forgery 2024-05-03T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/fileorganizer/fileorganizer-and-fileorganizer-pro-106-authenticated-stored-cross-site-scripting 2024-04-23T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/logmytrip/logmytrip-19-unauthenticated-sql-injection 2026-07-24T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/site-is-offline-plugin/site-offline-or-coming-soon-166-cross-site-request-forgery-to-settings-update-and-cross-site-scripting 2022-06-06T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/relevanssi-premium/relevanssi-4245-free-and-2276-premium-unauthenticated-stored-cross-site-scripting-via-excerpt-highlights 2025-05-30T14:49:18.000Z https://wordsec.net/vulnerabilities/plugins/final-tiles-grid-gallery-lite/image-photo-gallery-final-tiles-grid-3616-authenticated-contributor-stored-cross-site-scripting 2026-10-14T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/accelerated-mobile-pages/amp-for-wp-10931-authenticatedcontributor-arbitrary-post-deletion-via-amppb_remove_saved_layout_data 2024-02-06T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1364-unauthenticated-local-file-inclusion 2025-03-14T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/awesome-support/awesome-support-616-insufficient-authorization-via-wpas_can_delete_attachments 2024-03-12T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/infility-global/infility-global-2127-authenticated-subscriber-sql-injection 2025-05-29T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/css-hero/css-hero-403-reflected-cross-site-scripting 2019-12-02T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/participants-database/participants-database-2763-authenticated-contributor-stored-cross-site-scripting 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/simple-buttons-creator/simple-buttons-creator-104-unauthenticated-stored-cross-site-scripting-via-add-button 2024-03-25T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/exchange-addon-custom-url-tracking/exchange-addon-custom-url-tracking-110-reflected-cross-site-scripting 2015-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/joomsport-sports-league-results-management/joomsport-579-authenticated-administrator-sql-injection-via-order-parameter 2026-08-04T18:43:21.000Z https://wordsec.net/vulnerabilities/plugins/news-kit-elementor-addons/news-kit-elementor-addons-121-authenticated-contributor-sensitive-information-exposure-via-canvas-menu-elementor-template 2024-10-21T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/s2member/s2member-pro-241114-unauthenticated-remote-code-execution 2024-12-02T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/bus-ticket-booking-with-seat-reservation/bus-ticket-booking-with-seat-reservation-535-authenticated-administrator-stored-cross-site-scripting 2024-08-28T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/sola-newsletters/nifty-newsletters-4023-cross-site-request-forgery-to-stored-cross-site-scripting 2021-07-31T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/gf-constant-contact/gravity-forms-constant-contact-112-unauthenticated-php-object-injection 2025-08-08T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/sitemap/sitemap-43-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2022-12-27T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/seo-booster/seo-booster-731-authenticated-administrator-sql-injection-via-sort_field-parameter 2026-07-15T15:20:07.000Z https://wordsec.net/vulnerabilities/plugins/wp_roknewspager/roknewspager-117-path-disclosure 2013-09-17T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/generateblocks/generateblocks-135-authenticated-contributor-stored-cross-site-scripting 2021-11-01T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/mapsvg/mapsvg-8613-authenticated-contributor-privilege-esclation 2025-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/wp-icommerce/wp-icommerce-the-first-interactive-ecommerce-for-wordpress-111-authenticated-admin-sql-injection 2021-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/woo-social-login/woocommerce-social-login-262-unauthenticated-php-object-injection 2024-06-14T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/wp-product-feed-manager/woocommerce-google-feed-manager-280-missing-authorization-to-authenticated-contributor-arbitrary-file-deletion 2024-08-22T16:29:45.000Z https://wordsec.net/vulnerabilities/plugins/wpfront-user-role-editor/wpfront-user-role-editor-320-reflected-cross-site-scripting 2021-11-23T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/accounting-for-woocommerce/accounting-for-woocommerce-168-authenticated-administrator-stored-cross-site-scripting 2025-03-11T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/user-registration/user-registration-membership-411-unauthenticated-privilege-escalation 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/yith-woocommerce-wishlist/yith-woocommerce-wishlist-4100-unauthenticated-insecure-direct-object-reference-to-unauthenticated-wishlist-rename 2025-11-18T14:26:06.000Z https://wordsec.net/vulnerabilities/plugins/flexi-product-slider-grid/flexi-product-slider-and-grid-for-woocommerce-105-authenticated-contributor-local-file-inclusion-via-theme-shortcode-attribute 2026-02-13T18:20:45.000Z https://wordsec.net/vulnerabilities/plugins/propertyshift/propertyshift-100-reflected-cross-site-scripting 2024-11-04T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/current-book/current-book-101-authenticated-stored-cross-site-scripting 2021-07-14T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/wp-user-frontend/user-frontend-ai-powered-frontend-posting-user-directory-profile-membership-user-registration-432-missing-authorization-to-authenticated-subscriber-subscription-pack-cancellation 2026-06-08T20:48:06.000Z https://wordsec.net/vulnerabilities/plugins/ultimate-product-catalogue/ultimate-product-catalog-wordpress-catalog-plugin-5025-cross-site-request-forgery 2022-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/ultimate-maps-by-supsystic/ultimate-maps-by-supsystic-150-missing-authorization 2026-08-18T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/bug-library/bug-library-203-reflected-cross-site-scripting 2021-09-09T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/booking-calendar-contact-form/booking-calendar-contact-form-1023-shortcode-sql-injection 2016-02-08T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/wp-file-upload/wordpress-file-upload-300-arbitrary-file-upload 2015-07-02T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/so-widgets-bundle/siteorigin-widgets-bundle-1583-authenticated-contributor-stored-cross-site-scripting 2024-02-12T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/ultimate-dashboard/ultimate-dashboard-387-missing-authorization-to-authenticated-subscriber-plugin-modules-activationdeactivation 2025-03-25T11:05:19.000Z https://wordsec.net/vulnerabilities/plugins/td-subscription/tagdiv-opt-in-builder-17-authenticated-subscriber-sql-injection-via-subscriptioncouponid-parameter 2025-04-29T19:47:32.000Z https://wordsec.net/vulnerabilities/plugins/searchpro/berqwp-all-in-one-optimization-for-core-web-vitals-cache-cdn-images-css-javascript-4115-missing-authorization 2026-09-16T18:10:00.000Z https://wordsec.net/vulnerabilities/plugins/collapsing-categories/collapsing-categories-309-authenticated-contributor-sql-injection 2026-02-16T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/prague-plugins/prague-228-unauthenticated-stored-cross-site-scripting 2026-01-27T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/woocommerce-products-filter/husky-products-filter-for-woocommerce-professional-1352-authenticated-contributor-sql-injection 2024-03-14T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/simple-events-calendar/simple-events-calendar-136-authenticated-admin-sql-injection 2017-11-03T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/peer-publish/peer-publish-10-cross-site-request-forgery 2025-11-24T19:07:03.000Z https://wordsec.net/vulnerabilities/plugins/vikwidgetsloader/vikwidgetsloader-collection-of-widgets-1123-authenticated-contributor-stored-cross-site-scripting 2026-11-04T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/vikbooking/vikbooking-hotel-booking-engine-pms-1817-unauthenticated-stored-cross-site-scripting-via-guestsdocuments-parameter 2026-11-06T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/jetwidgets-for-elementor/jetwidgets-for-elementor-1021-authenticated-author-stored-cross-site-scripting-via-animated-box-animation_effect-setting 2026-06-30T16:01:32.000Z https://wordsec.net/vulnerabilities/plugins/woocommerce-checkout-manager/woocommerce-checkout-manager-730-missing-authorization 2023-11-09T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/piotnet-addons-for-elementor-pro/piotnet-addons-for-elementor-pro-7170-unauthenticated-arbitrary-file-upload-via-form-file-upload 2026-05-18T18:28:38.000Z https://wordsec.net/vulnerabilities/plugins/yummly-rich-recipes/yummly-rich-recipes-42-cross-site-request-forgery 2025-03-24T00:00:00.000Z https://wordsec.net/vulnerabilities/plugins/imember360/imember360-39001-missing-authorization-and-sensitive-data-exposure 2014-04-28T00:00:00.000Z