CROWD-SOURCED
VULNERABILITIES DATABASE
Vulnerabilities Crowdsourced from WordPress security researchers and the amazing public databases of –
MP3 Sticky Player (Arbitrary File Read/Download) < 8.0
PROTECTED
LA-Studio Element Kit for Elementor ( Local File Inclusion ) < 1.4.3
PROTECTED
WPGYM (Privilege Escalation) < 67.2.0
PROTECTED
Sky Addons for Elementor (Cross-Site Request Forgery) < 2.6.2
PROTECTED
Activity Log Monitor & Record User Changes (Cross-Site Scripting) < 2.11.2
PROTECTED
Grid View Gallery (PHP Object Injection)
PROTECTED
Contact Form 7 Email Add on (Local File Inclusion)
PROTECTED
Tutor LMS (SQL Injection) < 2.7.7
PROTECTED
Image Optimizer, Resizer and CDN - Sirv (Arbritary Option Deletion) < 7.3.1
PROTECTED
Clone (PHP Object Injection) < 2.4.7
PROTECTED
WooCommerce Product Table Lite (Arbitrary Shortcode Execution) < 3.8.7
PROTECTED
My Contador lesr (Missing Authorization) < 2.1
PROTECTED
WPB Popup for Contact Form 7 (Arbitrary Shortcode Execution) < 1.7.6
PROTECTED
GamiPress (Arbitrary Shortcode Execution) < 7.1.6
PROTECTED
Classified Listing (Arbitrary Option Update) < 3.1.16
PROTECTED
Login using WordPress Users (Authenticated SQL Injection) < 1.15.7
PROTECTED
Blogger 301 Redirect (Unauthenticated SQL Injection)
PROTECTED
PostX (Arbitrary Plugin Installation/Activation) < 4.1.17
PROTECTED
3D FlipBook, PDF Viewer, PDF Embedder (Authenticated Arbitrary File Upload)
PROTECTED
PDF Generator Addon for Elementor Page Builder ( Unauthenticated Arbitrary File Download)
PROTECTED
Crowdsourced Patches for Crowdsourced Vulnerabilities.
© 2025. All rights reserved.