Vulnerability Name CVE Severity
WordPress Plugin WassUp Real Time Analytics Cross-Site Scripting (1.9)
WordPress Plugin WassUp Real Time Analytics Unspecified Vulnerability (1.7.2)
WordPress Plugin WatchMan-Site7 Cross-Site Request Forgery (3.0.2)
WordPress Plugin WatchTowerHQ Privilege Escalation (3.6.16)
WordPress Plugin WatchTowerHQ Security Bypass (3.6.15)
WordPress Plugin WatuPRO Multiple Vulnerabilities (4.8.8.4)
WordPress Plugin WatuPRO SQL Injection (5.5.3.6)
WordPress Plugin Watu Quiz Cross-Site Scripting (2.4.9)
WordPress Plugin Watu Quiz Cross-Site Scripting (3.1.2.4)
WordPress Plugin Watu Quiz Cross-Site Scripting (3.1.2.5)
WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.8.1)
WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.8.2)
WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.9)
WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.9.2)
WordPress Plugin Watu Quiz Unspecified Vulnerability (2.6)
WordPress Plugin Wbcom Designs-BuddyPress Group Reviews Security Bypass (2.8.3)
WordPress Plugin WBW Currency Switcher for WooCommerce Cross-Site Scripting (1.6.5)
WordPress Plugin WC Duplicate Order Security Bypass (1.5)
WordPress Plugin WC Duplicate Order Unspecified Vulnerability (1.3)
WordPress Plugin WCFM-Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible SQL Injection (6.5.11)
WordPress Plugin WCFM-Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible Unspecified Vulnerability (6.5.12)
WordPress Plugin WCFM Membership-WooCommerce Memberships for Multivendor Marketplace Cross-Site Request Forgery (2.9.10)
WordPress Plugin WCFM Membership-WooCommerce Memberships for Multivendor Marketplace Insecure Direct Object Reference (2.10.7)
WordPress Plugin WCFM Membership-WooCommerce Memberships for Multivendor Marketplace Privilege Escalation (2.10.0)
WordPress Plugin Weather Effect-Christmas Santa Snow Falling Cross-Site Request Forgery (1.3.3)
WordPress Plugin Weather Effect-Christmas Santa Snow Falling Cross-Site Scripting (1.3.5)
WordPress Plugin Weather for us-animated weather widget Crypto Mining (1.8)
WordPress Plugin Weaver Show Posts Cross-Site Scripting (1.6)
WordPress Plugin Weaver Xtreme Theme Support Cross-Site Scripting (6.2.6)
WordPress Plugin Webapp builder (Free mobile apps native iPhone iOS & Android Winphone mobile apps) Arbitrary File Upload (2.0)
WordPress Plugin Web Application Firewall-website security Privilege Escalation (2.1.1)
WordPress Plugin Web Application Firewall-website security Unspecified Vulnerability (2.1.2)
WordPress Plugin WebARX Cross-Site Scripting (1.3.0)
WordPress Plugin Web Directory Free SQL Injection (1.6.9)
WordPress Plugin WebEngage Feedback, Survey and Notification Cross-Site Scripting (2.0.0)
WordPress Plugin Web Forms for Vtiger wordpress Lead capture and Contacts Sync Unspecified Vulnerability (1.0.0)
WordPress Plugin WebHotelier for WordPress Cross-Site Scripting (1.5)
WordPress Plugin Web Invoice-Invoicing and billing for WordPress Multiple SQL Injection Vulnerabilities (2.1.3)
WordPress Plugin WebLibrarian Cross-Site Scripting (3.4.8.6)
WordPress Plugin WebLibrarian Multiple Unspecified Vulnerabilities (2.6.3.1)
WordPress Plugin WebLibrarian SQL Injection (3.5.4)
WordPress Plugin Webmention Cross-Site Scripting (4.0.8)
WordPress Plugin WebP Converter for Media Cross-Site Request Forgery (1.0.2)
WordPress Plugin WebP Express Arbitrary File Disclosure (0.14.10)
WordPress Plugin WebP Express Cross-Site Scripting (0.14.4)
WordPress Plugin WebP Express Unspecified Vulnerability (0.14.21)
WordPress Plugin Websimon Tables Cross-Site Scripting (1.3.4)
WordPress Plugin Website FAQ 'website-faq-widget.php' SQL Injection (1.0)
WordPress Plugin Web Stories Server-Side Request Forgery (1.24.0)
WordPress Plugin Web to Print Online Designer Security Bypass (2.3.0)
WordPress Plugin Web Tripwire Arbitrary File Upload (0.1.1)
WordPress Plugin Wechat Broadcast Local/Remote File Inclusion (1.2.0)
WordPress Plugin Wechat Reward Cross-Site Request Forgery (1.7)
WordPress Plugin Weekly Schedule Cross-Site Scripting (3.4.2)
WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress CSV Injection (1.4.7)
WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress CSV Injection (1.6.3)
WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress Supply Chain Attack [Polyfill.io] (1.6.23)
WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress Unspecified Vulnerability (1.5.3)
WordPress Plugin Welcart e-Commerce Cross-Site Scripting (2.2.3)
WordPress Plugin Welcart e-Commerce Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.2.1)
WordPress Plugin Welcart e-Commerce Information Disclosure (2.2.7)
WordPress Plugin Welcart e-Commerce Multiple SQL Injection Vulnerabilities (1.5.2)
WordPress Plugin Welcart e-Commerce Multiple Vulnerabilities (1.3.12)
WordPress Plugin Welcart e-Commerce Multiple Vulnerabilities (1.4.17)
WordPress Plugin Welcart e-Commerce Multiple Vulnerabilities (1.8.2)
WordPress Plugin Welcart e-Commerce PHP Object Injection (1.9.3)
WordPress Plugin Welcart e-Commerce PHP Object Injection (1.9.9)
WordPress Plugin Welcart e-Commerce PHP Object Injection (1.9.35)
WordPress Plugin Welcart e-Commerce SQL Injection (2.0.0)
WordPress Plugin Welcome Announcement Multiple Cross-Site Scripting Vulnerabilities (1.0.5)
WordPress Plugin We�re Open! Cross-Site Scripting (1.41)
WordPress Plugin WF Cookie Consent Cross-Site Scripting (1.1.3)
WordPress Plugin White Label CMS Cross-Site Request Forgery (1.5)
WordPress Plugin White Label CMS Cross-Site Scripting (1.5.2)
WordPress Plugin White Label CMS Cross-Site Scripting (2.2.8)