Filter
AND
-Infinity
0

Software

wordpress
479
wordpress import and export users and customers
8
wordpress gallery plugin
6
wordpress element pack pro
4
wordpress modal window
4
wordpress move addons for elementor
4
wordpress ajax contact form
3
wordpress armember
3
wordpress bear plugin
3
wordpress better elementor addons
3
wordpress booking calendar
3
wordpress bookingpress
3
wordpress content blocks
3
wordpress easy paypal & stripe buy now button
3
wordpress elementinvader addons for elementor plugin
3
wordpress embed pdf viewer
3
wordpress eventin
3
wordpress football pool
3
wordpress ideapush
3
wordpress jobs
3
wordpress sunshine photo cart
3
wordpress 12 step meeting list
2
wordpress accept stripe payments
2
wordpress accordion
2
wordpress ai engine
2
wordpress author avatars list/block
2
wordpress automatically hierarchic categories in menu
2
wordpress ba book everything
2
wordpress beacon for help scout
2
wordpress black widgets for elementor
2
wordpress blix
2
wordpress blossomthemes email newsletter plugin
2
wordpress call now button
2
wordpress captcha
2
wordpress classified listing – classified ads & business directory plugin
2
wordpress contact form plugin
2
wordpress countdown timer
2
wordpress custom woocommerce checkout fields editor
2
wordpress database backup
2
wordpress debug tool
2
wordpress distance based shipping calculator
2
wordpress distance based shipping calculator plugin
2
wordpress e2pdf plugin
2
wordpress easy elementor addons
2
wordpress easy portfolio
2
wordpress enhanced text widget
2
wordpress essential addons for elementor
2
wordpress fastly plugin
2
wordpress forex calculators
2
wordpress form maker
2

WP ULikeWordPress WP ULike plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability

EPSS
0.04%
First published (updated )

NotFound GPX ViewerWordPress GPX Viewer plugin <= 2.2.11 - Path Traversal vulnerability

First published (updated )

WordPress Affiliate Links Manager PluginWordPress Affiliate Links Manager Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

First published (updated )

NotFound Social LinksWordPress Social Links plugin <= 1.0.11 - Stored Cross-Site Scripting vulnerability

First published (updated )

WordPress RJ QuickchartsWordPress RJ Quickcharts plugin <= 0.6.1 - Cross Site Scripting (XSS) vulnerability

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

NotFound Like dislike plus counterWordPress Like dislike plus counter plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

First published (updated )

NotFound UniTimetableWordPress UniTimetable plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

First published (updated )

WordPress Woo Update Variations In CartWordPress Woo Update Variations In Cart plugin <= 0.0.9 - Cross Site Scripting (XSS) vulnerability

First published (updated )

WordPress WAH FormsWordPress WAH Forms plugin <= 1.0 - Sensitive Data Exposure vulnerability

First published (updated )

WordPressWordPress WP Journal plugin <= 1.1 - Broken Access Control vulnerability

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WordPress Interactive Page HierarchyWordPress Interactive Page Hierarchy plugin <= 1.0.1 - Broken Access Control vulnerability

First published (updated )

WordPress DZS Ajaxer LiteWordPress DZS Ajaxer Lite plugin <= 1.04 - Cross Site Scripting (XSS) vulnerability

First published (updated )

ts-treeWordPress ts-tree plugin 0.1.1 - <= Arbitrary Content Deletion vulnerability

First published (updated )

NotFound RSVP MEWordPress RSVP ME plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability

First published (updated )

radSLIDEWordPress radSLIDE plugin <= 2.1 - Broken Access Control to Stored Cross-Site Scripting vulnerability

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

silverplugins217 Build Private Store For WoocommerceWordPress Build Private Store For Woocommerce plugin <= 1.0 - Broken Access Control vulnerability

EPSS
0.04%
First published (updated )

Christmasify!Christmasify! <= 1.5.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

EPSS
0.05%
First published (updated )

Essential Addons for ElementorWordPress Essential Addons for Elementor plugin <= 5.9.15 - Cross Site Scripting (XSS) vulnerability

First published (updated )

Sectona SpectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass Vulnerability

First published (updated )

Sectona SpectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing Vulnerability

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Sync Post With Other SiteSync Post With Other Site <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update

EPSS
0.05%
First published (updated )

WordPress Organization ChartOrganization chart <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description Parameters

EPSS
0.07%
First published (updated )

WordPress Front End Users PluginFront End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode

First published (updated )

WordPress Media UploaderURL Media Uploader <= 1.0.0 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebinding

First published (updated )

WordPress Forex CalculatorsForex Calculators <= 1.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WordPress Product Catalog SimpleProduct Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcode

First published (updated )

WordPress Wp Social Login and Register Social CounterWp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Update

First published (updated )

WordPress User Registration & MembershipUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting

First published (updated )

WordPress Portfolio GalleryWordPress Portfolio Builder – Portfolio Gallery <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

First published (updated )

Iptanus WordPress File UploadWordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203