WordPress Plugin Vulnerabilities
Wordpress Plugin vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Missing Authorization Flaw in Revmakx WP Duplicate Plugin by WordPress
CVE-2025-24652WordpressWP Duplicate – WordPre...5.4MEDIUMTime-Based SQL Injection Vulnerability in GamiPress Plugin for WordPress
CVE-2024-13496WordpressGamipress – Gamificati...7.5HIGHArbitrary Shortcode Execution in GamiPress by GamiPress
CVE-2024-13495WordpressGamipress – Gamificati...7.3HIGHArbitrary Shortcode Execution in GamiPress Plugin for WordPress
CVE-2024-13499WordpressGamipress – Gamificati...7.3HIGHReflected XSS Vulnerability in TaxoPress WordPress Tag Cloud Plugin
CVE-2025-22735WordpressWordPress Tag Cloud Pl...7.1HIGHSQL Injection Vulnerability in NotFound Hero Mega Menu Plugin for WordPress
CVE-2024-49333WordpressHero Mega Menu - Respo...8.5HIGHSQL Injection Vulnerability in Hero Mega Menu Plugin for WordPress
CVE-2024-49303WordpressHero Mega Menu - Respo...8.5HIGHCross-site Scripting Vulnerability in Hero Mega Menu Plugin for WordPress
CVE-2024-49300WordpressHero Mega Menu - Respo...7.1HIGHSQL Injection Vulnerability in Super Socializer Plugin for WordPress
CVE-2024-13230WordpressSocial Share, Social L...5.3MEDIUMSQL Injection Vulnerability in Ultimate Member Plugin for WordPress
CVE-2025-0308WordpressUltimate Member – User...7.5HIGHInformation Exposure in Ultimate Member Plugin for WordPress
CVE-2025-0318WordpressUltimate Member – User...5.3MEDIUMStored Cross-Site Scripting Vulnerability in Quote Post Type Plugin by WordPress
CVE-2024-13386WordpressQuote-posttype-plugin6.4MEDIUMDirectory Traversal Vulnerability in Eventer Plugin for WordPress
CVE-2024-10799WordpressEventer - WordPress Ev...6.5MEDIUMArbitrary File Upload Vulnerability in Advanced File Manager for WordPress
CVE-2024-13333WordpressAdvanced File Manager ...7.5HIGHCross-Site Request Forgery Vulnerability in Nilesh Shiragave WordPress Gallery Plugin
CVE-2025-23842WordpressWordPress Gallery Plugin7.1HIGHCross-Site Request Forgery Discovered in Password Protect Plugin for WordPress
CVE-2025-23435WordpressPassword Protect Plugi...7.1HIGHReflected Cross-Site Scripting Vulnerability in UpdraftPlus Backup Plugin for WordPress
CVE-2025-0215WordpressUpdraftplus: WP Backup...6.1MEDIUMStored Cross-site Scripting Vulnerability in Octrace Studio WordPress HelpDesk Plugin
CVE-2025-22762WordpressWordPress Helpdesk & S...5.9MEDIUMDOM-Based Stored Cross-Site Scripting in HTML5 Video Player for WordPress
CVE-2024-13156WordpressHtml5 Video Player – M...6.4MEDIUMData Exposure Vulnerability in Appointment Booking Calendar Plugin for WordPress
CVE-2024-12274WordpressAppointment Booking Ca...👾🟡7.5HIGHPHP Object Injection Vulnerability in GiveWP Donation Plugin for WordPress
CVE-2024-12877WordpressGiveWP – Donation Plug...9.8CRITICALStored Cross-Site Scripting Vulnerability in WpRently Plugin for WooCommerce by WordPress
CVE-2024-12412WordpressRental And Booking Man...6.1MEDIUMSQL Injection Vulnerability in AI Scribe Plugin for WordPress
CVE-2024-12473WordpressAi Scribe – Seo Ai Wri...6.5MEDIUMData Modification Vulnerability in AI Scribe SEO Plugin by WordPress
CVE-2024-12606WordpressAi Scribe – Seo Ai Wri...4.3MEDIUMUnauthorized Data Modification in Bitly Plugin for WordPress
CVE-2024-12616WordpressBitly's WordPress...4.3MEDIUM