WordPress Plugin Vulnerabilities
86 vulnerabilities related to WordPress Plugin
- PoC2026-08-03CVE-2025-6389: Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func
- PoC2026-07-31CVE-2026-3296: Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection
- PoC2026-05-09CVE-2026-40308: My Calendar WordPress Plugin - Information Disclosure
- 2026-04-30WordPress Plugin Mayosis Core /wp-content/plugins/mayosis-core/library/wave-audio/peaks/remote_dl.php 文件读取漏洞 （CVE-2025-1565）
- PoC2026-04-16CVE-2025-14124: Team WordPress Plugin (TLP Team) <= 5.0.9 - SQL Injection
- PoC2026-04-16CVE-2026-6203: User Registration & Membership WordPress plugin - Open Redirect
- PoC2026-04-09CVE-2025-68043: LottieFiles WordPress Plugin <= 3.0.0 - Missing Authorization
- PoC2026-04-09CVE-2026-4020: Gravity SMTP WordPress Plugin - Sensitive Information Exposure
- PoC2026-03-05CVE-2024-9765: EKC Tournament Manager WordPress plugin - Path Traversal
- PoC2026-02-24CVE-2025-4652: Broadstreet WordPress plugin - Reflected XSS
- PoC2026-01-24wp-wpstatistics-log: WordPress Plugin WP Statistics Error Log Disclosure
- PoC2026-01-16wp-better-wp-security-fpd: WordPress Plugin iThemes Security - Full Path Disclosure
- PoC2026-01-16wp-duracelltomi-google-tag-manager-fpd: WordPress Plugin Google Tag Manager - Full Path Disclosure
- PoC2026-01-16wp-intuitive-custom-post-order-fpd: WordPress Plugin Intuitive Custom Post Order - Full Path Disclosure
- PoC2026-01-16wp-megamenu-fpd: WordPress Plugin Max Mega Menu (megamenu) - Full Path Disclosure
- PoC2026-01-16wp-newsletter-fpd: WordPress Plugin Newsletter - Full Path Disclosure
- PoC2026-01-16wp-really-simple-captcha-fpd: WordPress Plugin Really Simple CAPTCHA - Full Path Disclosure
- PoC2026-01-16wp-ssl-insecure-content-fixer-fpd: WordPress Plugin SSL Insecure Content Fixer - Full Path Disclosure
- PoC2026-01-08wp-enable-media-replace-log: WordPress Plugin Enable Media Replace - Log File Exposure
- PoC2026-01-08wordpress-imsanity-fpd: WordPress Plugin Imsanity - Full Path Disclosure
- PoC2026-01-08wp-iwp-client-fpd: WordPress Plugin InfiniteWP Client - Full Path Disclosure
- PoC2026-01-08wp-toc-plus-fpd: WordPress Plugin Table of Contents Plus - Full Path Disclosure
- PoC2026-01-08wp-better-wp-security-fpd: WordPress Plugin iThemes Security - Full Path Disclosure
- PoC2026-01-08wp-duracelltomi-google-tag-manager-fpd: WordPress Plugin Google Tag Manager - Full Path Disclosure
- PoC2026-01-08wp-intuitive-custom-post-order-fpd: WordPress Plugin Intuitive Custom Post Order - Full Path Disclosure
- PoC2026-01-08wp-megamenu-fpd: WordPress Plugin Max Mega Menu (megamenu) - Full Path Disclosure
- PoC2026-01-08wp-newsletter-fpd: WordPress Plugin Newsletter - Full Path Disclosure
- PoC2026-01-08wp-ssl-insecure-content-fixer-fpd: WordPress Plugin SSL Insecure Content Fixer - Full Path Disclosure
- PoC2025-11-11CVE-2025-4302: Stop User Enumeration WordPress plugin - Authentication Bypass
- 2025-10-14WordPress plugin WP JobHunt 跨站脚本漏洞
- 2025-09-19Wordpress Plugin Depicter /wp-admin/admin-ajax.php depicter-lead-list SQL 注入漏洞（CVE-2025-2011）
- 2025-09-19Wordpress Plugin Depicter /wp-admin/admin-ajax.php depicter-lead-list SQL 注入漏洞（CVE-2025-2011）
- 2025-09-02WordPress plugin Events Addon for Elementor 跨站脚本漏洞
- 2025-09-02WordPress plugin Related Posts Lite 跨站请求伪造漏洞
- 2025-09-02WordPress plugin TablePress 跨站脚本漏洞
- 2025-09-02WordPress plugin Ocean Extra 跨站脚本漏洞
- 2025-09-01CVE-2019-19985: WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download
- 2025-08-21WordPress Plugin email-subscribers /wp-admin/admin-post.php advanced_filter SQL 注入漏洞（CVE-2024-2876）
- 2025-08-21WordPress Plugin email-subscribers /wp-admin/admin-post.php advanced_filter SQL 注入漏洞（CVE-2024-2876）
- 2025-08-08WordPress Plugin NotificationX /wp-json/notificationx/v1/analytics SQL 注入漏洞 （CVE-2024-1698）
- 2025-08-08WordPress Plugin NotificationX /wp-json/notificationx/v1/analytics SQL 注入漏洞 （CVE-2024-1698）
- PoC2025-08-01CVE-2011-5106: WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting
- PoC2025-08-01CVE-2012-1835: WordPress Plugin All-in-One Event Calendar 1.4 - Cross-Site Scripting
- PoC2025-08-01CVE-2012-4242: WordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2012-6499: WordPress Plugin Age Verification v0.4 - Open Redirect
- PoC2025-08-01CVE-2013-2287: WordPress Plugin Uploader 1.0.4 - Cross-Site Scripting
- PoC2025-08-01CVE-2013-4117: WordPress Plugin Category Grid View Gallery 2.3.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2013-4625: WordPress Plugin Duplicator < 0.4.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2014-4940: WordPress Plugin Tera Charts - Local File Inclusion
- PoC2025-08-01CVE-2014-5368: WordPress Plugin WP Content Source Control - Directory Traversal
- PoC2025-08-01CVE-2014-8799: WordPress Plugin DukaPress 2.5.2 - Directory Traversal
- PoC2025-08-01CVE-2015-4455: WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload
- PoC2025-08-01CVE-2016-10973: Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-24312: WordPress Plugin File Manager (wp-file-manager) Backup Disclosure
- PoC2025-08-01CVE-2020-36728: WordPress Plugin Adning Advertising < 1.5.6 - Arbitrary File Upload
- PoC2025-08-01CVE-2020-8615: Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery
- PoC2025-08-01CVE-2021-24215: Controlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation
- PoC2025-08-01CVE-2021-24286: WordPress Plugin Redirect 404 to Parent 1.3.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-24991: WooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-25008: The Code Snippets WordPress Plugin < 2.14.3 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-25085: WOOF WordPress plugin - Cross-Site Scripting
- PoC2025-08-01CVE-2021-39350: FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting
- PoC2025-08-01CVE-2022-0149: WooCommerce Stored Exporter WordPress Plugin < 2.7.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-0208: WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-0651: WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection
- PoC2025-08-01CVE-2022-25148: WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection
- PoC2025-08-01CVE-2023-2624: KiviCare WordPress Plugin - Cross-Site Scripting
- PoC2025-08-01CVE-2023-4596: WordPress Plugin Forminator 1.24.6 - Arbitrary File Upload
- PoC2025-08-01CVE-2024-10783: WordPress Plugin MainWP Child - Authentication Bypass
- PoC2025-08-01CVE-2024-1512: MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection
- PoC2025-08-01CVE-2024-2879: WordPress Plugin LayerSlider 7.9.11-7.10.0 - SQL Injection
- PoC2025-08-01seatreg-redirect: WordPress Plugin ‘SeatReg’ - Open Redirect
- PoC2025-08-01wp-email-subscribers-listing: WordPress Plugin Email Subscribers Listing
- PoC2025-08-01wp-gallery-file-upload: WordPress Plugin Gallery 3.06 - Arbitrary File Upload
- PoC2025-08-01wp-googlemp3-lfi: WordPress Plugin CodeArt Google MP3 Player - File Disclosure Download
- PoC2025-08-01wpml-xss: WordPress Plugin WPML Version < 4.6.1 Cross-Site Scripting
- 2025-04-03WordPress Plugin RepairBuddy /wp-admin/admin-ajax.php 文件上传漏洞（CVE-2024-51793）
- 2025-04-03WordPress Plugin RepairBuddy /wp-admin/admin-ajax.php 文件上传漏洞（CVE-2024-51793）
- 2025-04-01WordPress Plugin R+L Carrier Edition /wp-admin/admin-ajax.php SQL 注入漏洞（CVE-2024-13481）
- 2025-04-01WordPress Plugin R+L Carrier Edition /wp-admin/admin-ajax.php SQL 注入漏洞（CVE-2024-13481）
- 2024-11-29WordPress Plugin HTML5 Video Player 插件 id 参数 SQL 注入漏洞 （CVE-2024-1061）
- 2024-11-29WordPress Plugin HTML5 Video Player 插件 id 参数 SQL 注入漏洞 （CVE-2024-1061）
- 2023-06-08WordPress Plugin LearnPress archive-course 文件包含漏洞（CVE-2022-47615）
- 2023-06-08WordPress Plugin LearnPress archive-course 文件包含漏洞（CVE-2022-47615）
- 2023-06-01WordPress Plugin IWS SQL注入漏洞（CVE-2022-4117）
- 2023-06-01WordPress Plugin IWS SQL注入漏洞（CVE-2022-4117）