Known vulnerabilities in the For Wordpress plugin

46 security advisories have been published for the For Wordpress plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

For Wordpress - SQL Injection (CVE-2026-15602) MEDIUM 2026-08-16
For Wordpress - Cross-Site Scripting (XSS) (CVE-2026-16597) HIGH 2026-07-29
For Wordpress - Broken Access Control (CVE-2026-9017) MEDIUM 2026-07-11
For Wordpress - Cross-Site Scripting (XSS) (CVE-2026-13040) HIGH 2026-07-03
For Wordpress - Broken Access Control (CVE-2026-11592) MEDIUM 2026-07-02
For Wordpress - Cross-Site Scripting (XSS) (CVE-2026-12142) HIGH 2026-07-01
For Wordpress - Security Vulnerability (CVE-2026-12408) MEDIUM 2026-07-01
For Wordpress - Broken Access Control (CVE-2026-12404) MEDIUM 2026-06-27
For Wordpress - SQL Injection (CVE-2026-7046) MEDIUM 2026-05-15
For Wordpress - Cross-Site Scripting (XSS) (CVE-2026-5063) HIGH 2026-05-03
For Wordpress - Security Vulnerability (CVE-2026-1947) HIGH 2026-03-16
For Wordpress - Broken Access Control (CVE-2026-1948) MEDIUM 2026-03-16
For Wordpress - Cross-Site Scripting (XSS) (CVE-2026-1189) MEDIUM 2026-01-24
For Wordpress - Broken Access Control (CVE-2026-0820) MEDIUM 2026-01-17
For Wordpress - Cross-Site Scripting (XSS) (CVE-2025-14128) MEDIUM 2026-01-07
For Wordpress - Cross-Site Scripting (XSS) (CVE-2025-13728) MEDIUM 2025-12-15
For Wordpress - SQL Injection (CVE-2025-10738) CRITICAL 2025-12-13
For Wordpress - Information Disclosure (CVE-2025-13006) MEDIUM 2025-12-05
For Wordpress - Cross-Site Scripting (XSS) (CVE-2025-12417) MEDIUM 2025-12-05
For Wordpress - Broken Access Control (CVE-2025-10740) MEDIUM 2025-10-24
For Wordpress - SQL Injection (CVE-2025-10185) MEDIUM 2025-10-11
For Wordpress - SQL Injection (CVE-2025-10003) MEDIUM 2025-09-06
For Wordpress - Arbitrary File Upload (CVE-2025-7050) HIGH 2025-08-05
For Wordpress - Cross-Site Request Forgery (CSRF) (CVE-2025-5019) MEDIUM 2025-06-06
For Wordpress - Cross-Site Scripting (XSS) (CVE-2025-5532) MEDIUM 2025-06-04
For Wordpress - Cross-Site Scripting (XSS) (CVE-2025-5531) MEDIUM 2025-06-04
For Wordpress - PHP Object Injection (CVE-2025-4803) HIGH 2025-05-21
For Wordpress - Privilege Escalation (CVE-2024-13677) HIGH 2025-02-18
For Wordpress - SQL Injection (CVE-2024-13596) MEDIUM 2025-01-30
For Wordpress - Broken Access Control (CVE-2024-13370) MEDIUM 2025-01-25

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.