| AdMail – Multilingual Back in-Stock Notifier for WooCommerce |
Broken Access Control (BAC) |
| Advanced WooCommerce Product Sales Reporting |
SQL Injection (SQLi) |
| All push notification for WP |
Cross-Site Request Forgery (CSRF) and SQL Injection (SQLi) |
| AnalyticsWP |
Broken Access Control (BAC) |
| AnalyticsWP |
Private Data Exposure |
| AnalyticsWP |
SQL Injection (SQLi) |
| Booking Calendar and Notification |
Broken Authentication (BAC) |
| Booking Calendar and Notification |
SQL Injection (SQLi) |
| Capturly |
Local File Inclusion (LFi) |
| Confirm User Registration |
Cross-Site Scripting (XSS) |
| coreActivity: Activity Logging plugin for WordPress |
SQL Injection (SQLi) |
| Debug Log Manager |
Cross-Site Scripting (XSS) |
| Email Notifications for Updates |
Privilege Escalation (BAC) |
| Error Log Viewer |
SQL Injection (SQLi) |
| Feedify – Web Push Notifications |
Cross-Site Scripting (XSS) |
| History Log by click5 |
SQL Injection (SQLi) |
| List Last Changes |
Cross-Site Scripting (XSS) |
| Navegg Analytics |
Cross-Site Request Forgery (CSRF) |
| Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme |
Cross-Site Scripting (XSS) |
| RegistrationMagic |
Cross-Site Scripting (XSS) |
| ShareThis Dashboard for Google Analytics |
Cross-Site Request Forgery (CSRF) |
| Simple Download Counter |
Cross-Site Scripting (XSS) |
| Simple Fixed Notice |
Cross-Site Request Forgery (CSRF) |
| Site Notify |
Broken Access Control (BAC) |
| SMS Alert Order Notifications – WooCommerce |
Unauthenticated Account Takeover (BAC)/ Privilege Escalation (BAC) |
| Social Share Buttons & Analytics Plugin – GetSocial.io |
Broken Access Control (BAC) |
| Stop Registration Spam |
Cross-Site Scripting (XSS) |
| Subscribe to Download Lite |
Local File Inclusion (LFi) |
| Subscribe to Unlock Lite |
Local File Inclusion (LFi) |
| Task Scheduler |
Cross-Site Scripting (XSS) |
| Textmetrics |
Cross-Site Scripting (XSS) |
| Ultimate Push Notifications |
Cross-Site Scripting (XSS) |
| Ultimate Push Notifications |
SQL Injection (SQLi) |
| Uptime Robot Plugin for WordPress |
Cross-Site Request Forgery (CSRF) |
| Uptime Robot Plugin for WordPress |
Cross-Site Scripting (XSS) |
| Uptime Robot Plugin for WordPress |
SQL Injection (SQLi) |
| User Registration |
Authentication Bypass (BAC) |
| User Registration |
Insecure Direct Object Reference to User Password Update (BAC) |
| User Registration |
Insecure Direct Object Reference to Unauthenticated Membership Modification |
| User Registration |
Cross-Site Scripting (XSS) |
| WooCommerce Sales MIS Report |
Cross-Site Scripting (XSS) |
| WP Online Users Stats |
SQL Injection (SQLi) |
| WP Show Stats |
Cross-Site Request Forgery (CSRF) |
| WP Statistics |
Missing Authorization (BAC) to Arbitrary Plugin Settings Update |
