Rio Darmawan

Plugin

Order Delivery Date for WP e-Commerce <= 1.2 Commerce plugin <= 1.2 Cross Site Scripting (XSS) vulnerability

Plugin

Order Delivery Date for WP e-Commerce <= 1.2 Commerce plugin <= 1.2 Cross Site Request Forgery (CSRF) vulnerability

Plugin

wpCentral <= 1.5.7 Cross Site Request Forgery (CSRF) vulnerability

Plugin

WP Custom Post Template <= 1.0 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Outbound Link Manager <= 1.2 Cross Site Request Forgery (CSRF) vulnerability

Plugin

UniConsent Cookie Consent CMP for GDPR / CCPA <= 1.4.2 Cross Site Scripting (XSS)

Plugin

Locations <= 4.0 Cross Site Scripting (XSS)

Plugin

Swifty Bar, sticky bar by WPGens <= 1.2.10 Cross Site Scripting (XSS) vulnerability

Plugin

Insert Estimated Reading Time <= 1.2 Cross Site Scripting (XSS)

Plugin

Back To The Top Button <= 2.1.5 Cross Site Scripting (XSS)

Plugin

wordpress publish post email notification <= 1.0.2.2 Cross Site Scripting (XSS)

Plugin

Responsive Gallery Grid <= 2.3.10 Cross Site Request Forgery (CSRF) vulnerability

Plugin

HollerBox <= 2.3.2 Cross Site Scripting (XSS)

Plugin

Better Elementor Addons <= 1.3.5 Broken Access Control vulnerability

Plugin

authLdap <= 2.5.9 Cross Site Scripting (XSS) vulnerability

Plugin

authLdap <= 2.5.8 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Multi-column Tag Map <= 17.0.26 column Tag Map plugin <= 17.0.26 Broken Access Control vulnerability

Plugin

Remove/hide Author, Date, Category Like Entry-Meta <= 2.1 Meta plugin <= 2.1 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Snap Pixel <= 1.5.7 Cross Site Scripting (XSS)

Plugin

MakeStories (for Google Web Stories) <= 2.8.0 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Easy Coming Soon <= 2.3 Cross Site Scripting (XSS) vulnerability

Plugin

Social Share Boost <= 4.5 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.24.1 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Landing Page Builder <= 1.5.1.2 Cross Site Scripting (XSS)

Plugin

Slimstat Analytics <= 5.0.8 Cross Site Scripting (XSS) vulnerability

Plugin

Fitness calculators plugin <= 2.0.7 Cross Site Scripting (XSS)

Plugin

Schedule Posts Calendar <= 5.2 Cross Site Scripting (XSS)

Plugin

WxSync <= 2.7.23 Cross Site Scripting (XSS)

Plugin

wSecure Lite <= 2.5 Cross Site Scripting (XSS)

Plugin

Slider Carousel – Responsive Image Slider <= 1.5.1 Broken Access Control vulnerability

Plugin

Client Portal : SuiteDash Direct Login <= 1.7.6 Cross Site Scripting (XSS)

Plugin

Post Affiliate Pro <= 1.25.0 Cross Site Scripting (XSS)

Plugin

Audio Player with Playlist Ultimate <= 1.2.2 Cross Site Scripting (XSS)

Plugin

WRC Pricing Tables <= 2.3.9 Cross Site Scripting (XSS)

Plugin

Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.4.8 Cross Site Scripting (XSS)

Plugin

Exifography <= 1.3.1 Cross Site Scripting (XSS)

Plugin

wpShopGermany IT-RECHT KANZLEI <= 1.7 RECHT KANZLEI plugin <= 1.7 Cross Site Scripting (XSS) vulnerability

Plugin

Custom Field For WP Job Manager <= 1.1 Cross Site Scripting (XSS)

Plugin

Social Share Boost <= 4.4 Cross Site Scripting (XSS) vulnerability

Plugin

oAuth Twitter Feed for Developers <= 2.3.0 Cross Site Scripting (XSS) vulnerability

Plugin

WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 2.2.5 CSV Injection vulnerability

Plugin

MojoPlug Slide Panel <= 1.1.2 Cross Site Scripting (XSS) vulnerability

Plugin

Smoothscroller <= 1.0.0 Cross Site Scripting (XSS) vulnerability

Plugin

breadcrumb simple <= 1.3 Cross Site Scripting (XSS)

Plugin

Disable WordPress Update Notifications <= 2.4.0 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Call Now Icon Animate <= 0.1.0 Cross Site Scripting (XSS) vulnerability

Plugin

Button Generator – easily Button Builder <= 2.3.5 Cross Site Request Forgery (CSRF) vulnerability

Plugin

UTM Tracker <= 1.3.1 Cross Site Scripting (XSS) vulnerability

Plugin

Easy Admin Menu <= 1.3 Cross Site Scripting (XSS)

Plugin

MailChimp Subscribe Forms <= 4.0.9.1 Cross Site Scripting (XSS)

Plugin

WP htaccess Control <= 3.5.1 Cross Site Scripting (XSS) vulnerability

Plugin

WP Register Profile With Shortcode <= 3.5.8 Cross Site Scripting (XSS) vulnerability

Plugin

itemprop WP for SERP/SEO Rich snippets <= 3.5.201706131 Cross Site Scripting (XSS) vulnerability

Plugin

DevBuddy Twitter Feed <= 4.0.0 Cross Site Scripting (XSS)

Plugin

Easy Hide Login <= 1.0.7 Cross Site Scripting (XSS) vulnerability

Plugin

I Recommend This <= 3.8.3 Cross Site Scripting (XSS) vulnerability

Plugin

EZP Maintenance Mode <= 1.0.1 Cross Site Scripting (XSS) vulnerability

Plugin

SparkPost <= 3.2.5 Cross Site Scripting (XSS) vulnerability

Plugin

White Label Branding for Elementor Page Builder <= 1.0.2 Cross Site Scripting (XSS) vulnerability

Plugin

WP Original Media Path <= 2.4.0 Cross Site Scripting (XSS) vulnerability

Plugin

Panorama – WordPress Project Management Plugin <= 1.5 Cross Site Scripting (XSS) vulnerability

Plugin

Semalt Blocker <= 1.1.3 Cross Site Scripting (XSS) vulnerability

Plugin

Fantastic Content Protector Free <= 2.6 Broken Access Control vulnerability

Plugin

Newsletters <= 4.8.8 Cross Site Request Forgery (CSRF) vulnerability

Plugin

SimpleModal Contact Form (SMCF) <= 1.2.9 Cross Site Scripting (XSS) vulnerability

Plugin

Optin Forms <= 1.3.2 Cross Site Scripting (XSS) vulnerability

Plugin

Enhanced WP Contact Form <= 2.2.3 Cross Site Scripting (XSS) vulnerability

Plugin

Premmerce Redirect Manager <= 1.0.10 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Premmerce Redirect Manager <= 1.0.11 Cross Site Scripting (XSS) vulnerability

Plugin

Custom More Link Complete <= 1.4.1 Cross Site Scripting (XSS) vulnerability

Plugin

Review Stream <= 1.6.5 Cross Site Scripting (XSS)

Plugin

Pagination by BestWebSoft <= 1.2.2 Cross Site Scripting (XSS) vulnerability

Plugin

Team Member <= 4.4 Cross Site Scripting (XSS) vulnerability

Plugin

VigilanTor <= 1.3.10 Cross Site Scripting (XSS) vulnerability

Plugin

Slideshow Gallery <= 1.7.6 Cross Site Request Forgery (CSRF) vulnerability

Plugin

SMTP2GO <= 1.4.2 Cross Site Scripting (XSS) vulnerability

Plugin

Modern Footnotes <= 1.4.15 Cross Site Scripting (XSS) vulnerability

Plugin

Google XML Sitemap for Images <= 2.1.3 Cross Site Request Forgery (CSRF) vulnerability

Plugin

CF7 Invisible reCAPTCHA <= 1.3.3 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Reusable Blocks Extended <= 0.9 Cross Site Request Forgery (CSRF) vulnerability

Plugin

GiveWP <= 2.25.1 Cross Site Request Forgery (CSRF) via give_cache_flush vulnerability

Plugin

CformsII <= 15.0.4 Cross Site Request Forgery (CSRF) vulnerability

Plugin

FareHarbor for WordPress <= 3.6.6 Cross Site Scripting (XSS) vulnerability

Plugin

Elegant Custom Fonts <= 1.0 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Classic Editor and Classic Widgets <= 1.2.5 Cross Site Request Forgery (CSRF) vulnerability

Plugin

New Adman <= 1.6.8 Cross Site Scripting (XSS) vulnerability

Plugin

New Adman <= 1.6.8 Cross Site Request Forgery (CSRF) vulnerability

Plugin

CPO Content Types <= 1.1.0 Cross Site Scripting (XSS) vulnerability

Plugin

Blog Floating Button <= 1.4.12 Cross Site Request Forgery (CSRF) vulnerability

Plugin

JCH Optimize <= 3.2.2 Cross Site Scripting (XSS) vulnerability

Plugin

Add Expires Headers & Optimized Minify <= 2.7 Cross Site Request Forgery (CSRF) vulnerability

Plugin

WpStream – Live Streaming, Video on Demand, Pay Per View <= 4.4.10 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Button Generator – easily Button Builder <= 2.3.3 Cross Site Scripting (XSS) vulnerability

Plugin

Rus-To-Lat <= 0.3 ToLat plugin <= 0.3 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Advanced Text Widget <= 2.1.2 Broken Access Control vulnerability

Plugin

Advanced Text Widget <= 2.1.2 Cross Site Scripting (XSS) vulnerability

Plugin

WP No External Links <= 1.0.2 Cross Site Scripting (XSS) vulnerability

Plugin

XML Sitemap Generator for Google <= 1.3.3 Cross Site Request Forgery (CSRF) vulnerability

Plugin

WP TFeed <= 1.6.9 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Social Auto Poster <= 2.1.4 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Quiz And Survey Master <= 8.0.10 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Dashboard Widgets Suite <= 3.2.1 Cross Site Scripting (XSS) vulnerability

Plugin

Publish to Schedule <= 4.5.4 Cross Site Scripting (XSS) vulnerability

Plugin

For the visually impaired <= 0.58 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Etsy Shop <= 3.0.3 Cross Site Request Forgery (CSRF) vulnerability

Plugin

WPMobile.App <= 11.18 Cross Site Scripting (XSS) vulnerability

Plugin

Accordions <= 2.3.0 Cross Site Scripting (XSS)

Plugin

Client Portal – Private user pages and login <= 1.1.8 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Auto Affiliate Links <= 6.3.0.2 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Feed Them Social <= 3.0.2 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Bing Site Verification plugin using Meta Tag <= 1.0 Cross Site Scripting (XSS) vulnerability

Plugin

Circles Gallery <= 1.0.10 Cross Site Scripting (XSS) vulnerability

Plugin

Sponsors Carousel <= 4.02 Cross Site Scripting (XSS) vulnerability

Plugin

Stock market charts from finviz <= 1.0.1 Cross Site Scripting (XSS) vulnerability

Plugin

WordPress Custom Settings <= 1.0 Cross Site Scripting (XSS) vulnerability

Plugin

Exquisite PayPal Donation <= v2.0.0 Cross Site Scripting (XSS) vulnerability

Plugin

Sitemap Index <= 1.2.3 Cross Site Scripting (XSS) vulnerability

Plugin

Clio Grow <= 1.0.0 Cross Site Scripting (XSS) Vulnerability

Plugin

Publish to Schedule <= 4.4.2 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Zeno Font Resizer <= 1.7.9 Cross Site Scripting (XSS) vulnerability

Plugin

Get URL Cron <= 1.4.7 Broken Access Control via geturlcron_action_handle vulnerability

Plugin

WP BaiDu Submit <= 1.2.1 Cross Site Scripting (XSS) vulnerability

Plugin

Eyes Only: User Access Shortcode <= 1.8.2 Cross Site Scripting (XSS)

Plugin

Tapfiliate <= 3.0.12 Cross Site Scripting (XSS)

Plugin

FireCask Like & Share Button <= 1.1.5 Cross Site Scripting (XSS)

Plugin

Service Area Postcode Checker <= 2.0.8 Cross Site Scripting (XSS)

Plugin

Upload File Type Settings Plugin <= 1.1 Cross Site Scripting (XSS)

Plugin

WP资源下载管理 <= 1.3.9 Cross Site Scripting (XSS) vulnerability

Plugin

Sticky Ad Bar <= 1.3.1 Cross Site Scripting (XSS)

Plugin

WP Open Social <= 5.0 Cross Site Scripting (XSS)

Plugin

Feed Changer <= 0.2 Cross Site Scripting (XSS)

Plugin

Nooz <= 1.6.0 Cross Site Scripting (XSS)

Plugin

TinyMCE Custom Styles <= 1.1.2 Cross Site Scripting (XSS) vulnerability

Plugin

JSON Content Importer <= 1.3.15 Cross Site Scripting (XSS) vulnerability

Plugin

Easy Panorama <= 1.1.4 Cross Site Scripting (XSS) vulnerability

Plugin

Simple Yearly Archive <= 2.1.8 Cross Site Scripting (XSS) vulnerability

Plugin

WP Prayer <= 1.9.6 Cross Site Scripting (XSS)

Plugin

Opt-Out for Google Analytics <= 2.3.4 Out for Google Analytics plugin <= 2.3.4 Cross Site Scripting (XSS) vulnerability

Plugin

Shoppable Images Lite <= 1.2.3 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Schema – All In One Schema Rich Snippets <= 1.6.5 Cross Site Request Forgery (CSRF) vulnerability

Plugin

Announce from the Dashboard <= 1.5.1 Cross Site Scripting (XSS) vulnerability

Plugin

avalex <= 3.0.3 Cross Site Scripting (XSS)

Plugin

WP htpasswd <= 1.7 Cross Site Scripting (XSS)

Plugin

Advanced Social Pixel <= 2.1.1 Cross Site Scripting (XSS)

Plugin

bbPress Voting <= 2.1.11.0 Cross Site Scripting (XSS) vulnerability

Plugin

WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups <= 2.6.0 Cross Site Scripting (XSS)

Plugin

Modal Dialog <= 3.5.9 Cross Site Scripting (XSS) Vulnerability

Plugin

ProfilePress <= 4.5.3 Cross Site Scripting (XSS)

Plugin

User Registration <= 2.3.0 Cross Site Scripting (XSS)

Plugin

Bubble Menu – circle floating menu <= 3.0.1 Cross Site Request Forgery (CSRF)

Plugin

WP Time Slots Booking Form <= 1.1.81 Cross Site Scripting (XSS)

Plugin

Contact Us page - Contact people LITE <= 3.7.0 Cross Site Request Forgery (CSRF) Leading To Contact Creation Vulnerability

Plugin

WPFrom Email <= 1.8.8 Cross Site Scripting (XSS)

Plugin

Conversational Forms for ChatBot <= 1.1.6 Cross Site Scripting (XSS)

Plugin

Responsive Vertical Icon Menu <= 1.5.8 Cross Site Scripting (XSS)

Plugin

Interactive Polish Map <= 1.2 Cross Site Scripting (XSS) vulnerability

Plugin

WP Smart Preloader <= 1.15 Cross Site Scripting (XSS) vulnerability

Plugin

WP-CommentNavi <= 1.12.1 CommentNavi plugin <= 1.12.1 Cross Site Scripting (XSS)

Plugin

OOPSpam Anti-Spam <= 1.1.35 Spam plugin <= 1.1.35 Cross Site Scripting (XSS) vulnerability