Vulnerability Name CVE Severity
WordPress Plugin Animal Captcha Cross-Site Scripting (1.6.2)
WordPress Plugin Animate It! Cross-Site Request Forgery (2.3.5) CVE-2019-17386
WordPress Plugin Animate It! Cross-Site Scripting (2.3.3) CVE-2019-17384
WordPress Plugin Animate It! Cross-Site Scripting (2.3.4) CVE-2019-17385
WordPress Plugin Annonces 'abspath' Parameter Remote File Include (1.2.0.0)
WordPress Plugin Annonces 'theme.php' Arbitrary File Upload (1.2.0.1)
WordPress Plugin AnnounceME Cross-Site Scripting (0.3.3)
WordPress Plugin Another WordPress Classifieds Arbitrary File Upload (3.3.2)
WordPress Plugin Another WordPress Classifieds Cross-Site Scripting (3.3.1) CVE-2014-9313
WordPress Plugin Another WordPress Classifieds Multiple Vulnerabilities (2.2.1) CVE-2014-10012 CVE-2014-10013
WordPress Plugin Another WordPress Classifieds Unspecified Vulnerability (1.8.9.4) CVE-2012-4874
WordPress Plugin Answer My Question Cross-Site Scripting (1.3)
WordPress Plugin Answer My Question Multiple Cross-Site Scripting Vulnerabilities (1.1)
WordPress Plugin Answer My Question SQL Injection (1.3)
WordPress Plugin Anthologize Cross-Site Scripting (0.7.7)
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Cross-Site Scripting (1.2.05.20)
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Cross-Site Scripting (4.15.22)
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Cross-Site Scripting (4.15.42)
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Cross-Site Scripting (4.15.49)
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Cross-Site Scripting (4.17.29)
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Local File Inclusion (4.18.63)
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Multiple Cross-Site Scripting Vulnerabilities (4.15.17)
WordPress Plugin Anti-Splog Cross-Site Scripting (2.1.7)
WordPress Plugin Anti Plagiarism Cross-Site Scripting (3.60) CVE-2016-1000128
WordPress Plugin Anti Spam Protection without CAPTCHA powered by Keypic Security Bypass (2.1.2)
WordPress Plugin AnyComment Cross-Site Scripting (0.0.32) CVE-2018-21001
WordPress Plugin AnyFont Cross-Site Scripting (2.2.3) CVE-2014-4515
WordPress Plugin AnyMind Widget Cross-Site Request Forgery (1.1) CVE-2022-2435
WordPress Plugin AnyVar Cross-Site Scripting (0.1.1) CVE-2017-6103
WordPress Plugin Aoi Tori Cross-Site Scripting (1.1) CVE-2021-24435
WordPress Plugin aoringo CAT setter Cross-Site Scripting (0.1.1)
WordPress Plugin aoringo LOG maker Cross-Site Scripting (0.1.3)
WordPress Plugin aoringo TAG upper Cross-Site Scripting (0.1.6)
WordPress Plugin A Page Flip Book 'pageflipbook_language' Parameter Local File Include (2.3) CVE-2012-6652
WordPress Plugin AP Companion includes Backdoor [Only if downloaded via the vendor website] (1.0.6) CVE-2021-24867
WordPress Plugin API Bearer Auth Cross-Site Scripting (20181229) CVE-2019-16332
WordPress Plugin Apocalypse Meow Security Bypass (21.2.7)
WordPress Plugin ApplyOnline-Application Form Builder and Manager Arbitrary File Disclosure (1.9.92)
WordPress Plugin ApplyOnline-Application Form Builder and Manager Cross-Site Scripting (1.9.94)
WordPress Plugin Appointment Booking Calendar-BirchPress Scheduler Unspecified Vulnerability (1.13.0)
WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress Arbitrary File Creation (1.1.5) CVE-2024-6467
WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress Insecure Direct Object Reference (1.0.30) CVE-2022-4340
WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress Security Bypass (1.1.5) CVE-2024-6660
WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress SQL Injection (1.0.10) CVE-2022-0739
WordPress Plugin Appointment Booking Calendar Cross-Site Scripting (1.3.18) CVE-2019-14791
WordPress Plugin Appointment Booking Calendar Cross-Site Scripting (1.3.34) CVE-2020-9371
WordPress Plugin Appointment Booking Calendar CSV Injection (1.3.34) CVE-2020-9372
WordPress Plugin Appointment Booking Calendar Multiple Vulnerabilities (1.1.7) CVE-2015-7319 CVE-2015-7320
WordPress Plugin Appointment Booking Calendar Multiple Vulnerabilities (1.1.24)
WordPress Plugin Appointment Booking Calendar SQL Injection (1.1.23)
WordPress Plugin Appointment Calendar Multiple Cross-Site Scripting Vulnerabilities (2.7.4)
WordPress Plugin Appointment Hour Booking-WordPress Booking Cross-Site Scripting (1.1.44) CVE-2019-13505
WordPress Plugin Appointment Hour Booking-WordPress Booking Cross-Site Scripting (1.3.15) CVE-2021-24673
WordPress Plugin Appointment Hour Booking-WordPress Booking Cross-Site Scripting (1.3.16) CVE-2021-24712
WordPress Plugin Appointment Scheduling for Zoom GoogleMeet and more-Wappointment Cross-Site Scripting (2.2.4)
WordPress Plugin Appointments Cross-Site Scripting (2.2.2.2)
WordPress Plugin Appointments PHP Object Injection (2.2.1)
WordPress Plugin Appointments Scheduler Cross-Site Scripting (1.5) CVE-2014-4579
WordPress Plugin Appointments Unspecified Vulnerability (2.2.2.1)
WordPress Plugin AppPresser-Mobile App Framework Cross-Site Scripting (1.1.4)
WordPress Plugin AppPresser-Mobile App Framework Security Bypass (4.3.0) CVE-2024-32776
WordPress Plugin AppPresser-Mobile App Framework Security Bypass (4.3.2) CVE-2024-4611
WordPress Plugin Apptivo Business Site CRM Multiple Cross-Site Scripting Vulnerabilities (1.2.9)
WordPress Plugin Apptivo eCommerce Multiple Cross-Site Scripting Vulnerabilities (1.1.5)
WordPress Plugin April's Super Functions Pack Cross-Site Scripting (1.4.7) CVE-2014-100026
WordPress Plugin Arabic Font Multiple Vulnerabilities (1.2)
WordPress Plugin ArcadePress 'upload.php' Arbitrary File Upload (0.65)
WordPress Plugin Archive Posts Sort Customize Cross-Site Scripting (1.5)
WordPress Plugin Archivist-Custom Archive Templates Multiple Vulnerabilities (1.7.4) CVE-2023-25448 CVE-2023-25490
WordPress Plugin arcResBookingWidget Multiple Vulnerabilities (1.0)
WordPress Plugin Are You a Human-The Fun Spam Blocker Cross-Site Scripting (1.4.32)
WordPress Plugin ARForms:Wordpress Form Builder Arbitrary File Deletion (3.5.1)
WordPress Plugin ARForms:Wordpress Form Builder Arbitrary File Deletion (3.7.1) CVE-2019-16902
WordPress Plugin ARI Adminer-WordPress Database Manager Cross-Site Request Forgery (1.1.13)
WordPress Plugin Arigato Autoresponder and Newsletter Cross-Site Scripting (2.3.1)