Vulnerability Name CVE Severity
WordPress Plugin WPtouch 'wptouch_settings' Parameter Cross-Site Scripting (1.9.20)
WordPress Plugin WPtouch Arbitrary File Upload (3.4.6)
WordPress Plugin WPtouch Backdoor (1.9.28)
WordPress Plugin WPtouch Cross-Site Request Forgery (1.9.31)
WordPress Plugin WPtouch Cross-Site Scripting (3.7.5.3)
WordPress Plugin WPtouch Cross-Site Scripting (4.3.42)
WordPress plugin WPtouch insecure nonce generation
WordPress Plugin WPtouch Multiple Cross-Site Scripting Vulnerabilities (3.7.3)
WordPress Plugin WPtouch Open Redirect (3.4.9)
WordPress Plugin WPtouch Security Bypass (3.4.2)
WordPress Plugin WP Travel-Best Travel Booking, Tour Management Engine Cross-Site Request Forgery (4.4.6)
WordPress Plugin WP TripAdvisor Review Slider Cross-Site Scripting (11.8)
WordPress Plugin WP TripAdvisor Review Slider SQL Injection (10.7)
WordPress Plugin WP TripAdvisor Review Slider SQL Injection (12.6)
WordPress Plugin WP ULike Cross-Site Scripting (3.1)
WordPress Plugin WP ULike Multiple Vulnerabilities (3.1)
WordPress Plugin WP Ultimate Email Marketer Multiple Vulnerabilities (1.1.0)
WordPress Plugin WP Ultimate Exporter Cross-Site Scripting (1.0)
WordPress Plugin WP Ultimate Exporter SQL Injection (1.1)
WordPress Plugin WP Ultimate Recipe Cross-Site Scripting (3.12.6)
WordPress Plugin WP Unique Article Header Image Cross-Site Request Forgery (1.0)
WordPress Plugin WP Upload Restriction Multiple Vulnerabilities (2.2.3)
WordPress Plugin WPUpper Share Buttons Cross-Site Scripting (3.42)
WordPress Plugin WP User-Custom Registration Forms, Login and User Profile Multiple Vulnerabilities (7.0)
WordPress Plugin WP User Frontend-Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Arbitrary File Upload (2.3.10)
WordPress Plugin WP User Frontend-Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Supply Chain Attack [Polyfill.io] (4.0.7)
WordPress Plugin WP User Groups Cross-Site Request Forgery (2.0.0)
WordPress Plugin WP User Manager-User Profile Builder & Membership Security Bypass (2.6.2)
WordPress Plugin WP Users Exporter CSV Injection (1.4.2)
WordPress Plugin WP User Switch Security Bypass (1.0.2)
WordPress Plugin WP Vault Local File Inclusion (0.8.6.6)
WordPress Plugin WP Video Lightbox Cross-Site Scripting (1.7.4)
WordPress Plugin WP Video Lightbox Cross-Site Scripting (1.9.2)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) Cross-Site Scripting (6.4)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) Security Bypass (5.4)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) SQL Injection (4.7)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) SQL Injection (5.5)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) SQL Injection (5.7)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) SQL Injection (6.8.1)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) Unspecified Vulnerability (4.8)
WordPress Plugin WP VR-360 Panorama and Virtual Tour Builder For WordPress Cross-Site Request Forgery (8.2.7)
WordPress Plugin WP VR-360 Panorama and Virtual Tour Builder For WordPress Cross-Site Scripting (8.2.6)
WordPress Plugin WP w3all phpBB Multiple Unspecified Vulnerabilities (1.6.3)
WordPress Plugin WP Web Scraper Unspecified Vulnerability (2.4)
WordPress Plugin WP Whois Domain Cross-Site Scripting (1.0.0)
WordPress Plugin WP Widget Cache Cross-Site Scripting (0.26)
WordPress Plugin WP with Spritz Local/Remote File Inclusion (1.0)
WordPress Plugin WP Yelp Review Slider SQL Injection (7.0)
WordPress Plugin WP YouTube Live Cross-Site Scripting (1.7.21)
WordPress Plugin WP YouTube Live Cross-Site Scripting (1.8.2)
WordPress Plugin WPZOOM Portfolio Cross-Site Scripting (1.2.1)
WordPress Plugin Wrapper Link Elementor Malicious Code (1.0.3)
WordPress Plugin WR ContactForm SQL Injection (1.1.9)
WordPress Plugin wSecure Lite Remote Code Execution (2.3)
WordPress Plugin WTI Like Post Cross-Site Scripting (1.4.4)
WordPress Plugin WTI Like Post SQL Injection (1.4.2)
WordPress Plugin Wu-Rating Cross-Site Scripting (1.0 12319)
WordPress Plugin Wufoo Shortcode Cross-Site Scripting (1.47)
WordPress Plugin Wufoo Shortcode Cross-Site Scripting (1.50)
WordPress Plugin Wufoo Shortcode Cross-Site Scripting (1.51)
WordPress Plugin Wunderbar Basic Cross-Site Scripting (1.1.3)
WordPress Plugin XCloner-Backup and Restore Multiple Vulnerabilities (3.1.2)
WordPress Plugin XData Toolkit Arbitrary File Upload (1.9)
WordPress Plugin XEN Carousel Multiple Cross-Site Scripting Vulnerabilities (0.12.2)
WordPress Plugin Xerte Online 'save.php' Arbitrary File Upload (0.32)
WordPress Plugin XforWooCommerce Security Bypass (1.6.4)
WordPress Plugin Xhanch-My Twitter Cross-Site Request Forgery (2.7.6)
WordPress Plugin Xhanch-My Twitter Multiple Cross-Site Request Forgery Vulnerabilities (2.7.7)
WordPress Plugin xili-language Multiple Unspecified Vulnerabilities (2.17.0)
WordPress Plugin xili-tidy-tags Cross-Site Request Forgery (1.12.03)
WordPress Plugin Xllentech English Islamic Calendar SQL Injection (2.6.7)
WordPress Plugin XML File Export Import for Stamps.com and WooCommerce Cross-Site Request Forgery (1.1.8)
WordPress Plugin XML Sitemap & Google News feeds Cross-Site Scripting (3.9)
WordPress Plugin XML Sitemap & Google News feeds Cross-Site Scripting (4.5)
WordPress Plugin XO Event Calendar Cross-Site Scripting (2.3.6)