Kwetsbare plugins Joomla! en Wordpress
Kwetsbare plugins afgelopen maand
-
JoomGallery (com_joomgallery) 4.0.0 to 4.4.1 - Unauthenticated File Upload via the TUS Endpoint (no fixed version released)
15 september 2026
-
J2Store / J2Commerce (com_j2store) 4.1.7 (Joomla 5 / 6 branch) - Unauthenticated Blind SQL Injection, Arbitrary File Read, Order Status Tampering, Forgeable Order Token and Missing CSRF Protection (6 CVEs)
15 september 2026
-
J2Store / J2Commerce (com_j2store) 4.0.22 (Joomla 4 branch) - Unauthenticated Blind SQL Injection, Arbitrary File Read, Order Status Tampering, Forgeable Order Token and Missing CSRF Protection (6 CVEs)
15 september 2026
-
J2Store / J2Commerce (com_j2store) 3.3.22 (Joomla 3 branch) - Unauthenticated Blind SQL Injection, Arbitrary File Read, Order Status Tampering, Forgeable Order Token and Missing CSRF Protection (6 CVEs)
15 september 2026
-
SP Page Builder (com_sppagebuilder) 6.8.0 to 6.9.0 - CVE-2026-78375 Author-level SQL Injection (full database read, CVSS 8.6), CVE-2026-79700 and CVE-2026-79701 Unauthenticated Captcha Bypass, plus three authorisation flaws - fixed in 6.9.1
14 september 2026
-
Snippets (snippets) 1.0.0 to below 7.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 1.0.0 to below 7.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 1.0.0 to below 7.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 1.0.0 to below 7.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 1.0.0 to below 7.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Tabs & Accordions (tabsaccordions) 3.0.0 to below 3.1.0 - Authenticated Stored XSS via Crafted data-rlta-alias Attributes
13 september 2026
-
Tabs & Accordions (tabsaccordions) 3.0.0 to below 3.1.0 - Authenticated Stored XSS via Crafted data-rlta-alias Attributes
13 september 2026
-
Tabs & Accordions (tabsaccordions) 3.0.0 to below 3.1.0 - Authenticated Stored XSS via Crafted data-rlta-alias Attributes
13 september 2026
-
Conditional Content (conditionalcontent) 7.0.0 to below 8.0.0 - Authenticated PHP Code Execution via Inline Condition Rules
13 september 2026
-
Conditional Content (conditionalcontent) 7.0.0 to below 8.0.0 - Authenticated PHP Code Execution via Inline Condition Rules
13 september 2026
-
Conditional Content (conditionalcontent) 7.0.0 to below 8.0.0 - Authenticated PHP Code Execution via Inline Condition Rules
13 september 2026
-
Advanced Module Manager (advancedmodules) 12.0.0 to below 12.1.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Advanced Module Manager (advancedmodules) 12.0.0 to below 12.1.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Advanced Module Manager (advancedmodules) 12.0.0 to below 12.1.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Advanced Module Manager (advancedmodules) 12.0.0 to below 12.1.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
ReReplacer (rereplacer) 16.0.0 to below 16.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
ReReplacer (rereplacer) 16.0.0 to below 16.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
ReReplacer (rereplacer) 16.0.0 to below 16.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
ReReplacer (rereplacer) 16.0.0 to below 16.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Content Templater (contenttemplater) 14.0.0 to below 14.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Content Templater (contenttemplater) 14.0.0 to below 14.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Content Templater (contenttemplater) 14.0.0 to below 14.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Content Templater (contenttemplater) 14.0.0 to below 14.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Content Templater (contenttemplater) 14.0.0 to below 14.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Quick Index (quickindex) 5.0.0 to below 5.0.5 - Authenticated Stored XSS via Crafted Index Class Options
13 september 2026
-
Quick Index (quickindex) 5.0.0 to below 5.0.5 - Authenticated Stored XSS via Crafted Index Class Options
13 september 2026
-
Snippets (snippets) 10.0.0 to below 11.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 10.0.0 to below 11.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 10.0.0 to below 11.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 10.0.0 to below 11.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 10.0.0 to below 11.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Modals (modals) 16.0.0 to below 17.0.0 - Authenticated Stored XSS via JavaScript URLs and JavaScript Events
13 september 2026
-
Modals (modals) 16.0.0 to below 17.0.0 - Authenticated Stored XSS via JavaScript URLs and JavaScript Events
13 september 2026
-
Modals (modals) 16.0.0 to below 17.0.0 - Authenticated Stored XSS via JavaScript URLs and JavaScript Events
13 september 2026
-
Users Anywhere (usersanywhere) 2.0.0 to below 2.1.0 - Authenticated Stored and Reflected XSS via Unescaped Request Input
13 september 2026
-
Users Anywhere (usersanywhere) 2.0.0 to below 2.1.0 - Authenticated Stored and Reflected XSS via Unescaped Request Input
13 september 2026
-
Articles Anywhere (articlesanywhere) 19.0.0 to below 20.0.0 - Authenticated Stored and Reflected XSS via Unescaped Request Input and JavaScript Events
13 september 2026
-
Articles Anywhere (articlesanywhere) 19.0.0 to below 20.0.0 - Authenticated Stored and Reflected XSS via Unescaped Request Input and JavaScript Events
13 september 2026
-
Articles Anywhere (articlesanywhere) 19.0.0 to below 20.0.0 - Authenticated Stored and Reflected XSS via Unescaped Request Input and JavaScript Events
13 september 2026
-
DPCases (com_dpcases) below 3.8.1 - Authenticated Stored XSS and Path Traversal
10 september 2026
-
DPCases (com_dpcases) below 3.8.1 - Authenticated Stored XSS and Path Traversal
10 september 2026
-
DPMedia below 1.21.1 - Media Reference Disclosure, Path Traversal and OAuth CSRF
10 september 2026
-
DPMedia below 1.21.1 - Media Reference Disclosure, Path Traversal and OAuth CSRF
10 september 2026
-
DPAttachments (com_dpattachments) below 5.8.1 - Unauthenticated Attachment Download, Stored XSS and Path Traversal
10 september 2026
-
DPAttachments (com_dpattachments) below 5.8.1 - Unauthenticated Attachment Download, Stored XSS and Path Traversal
10 september 2026
Laatst geüpdatet plugins
-
bbPress 2.6.17
16 september 2026
-
MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings 7.2.1
16 september 2026
-
Premium Starter Templates 4.7.7
16 september 2026
-
Category AJAX Filter – Posts, Custom Post Types & Product Filter 3.0.5
16 september 2026
-
WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons 4.7.1
16 september 2026
-
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons 8.8.4
16 september 2026
-
SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO 3.1.0
16 september 2026
-
Event Single Page Builder For The Events Calendar 1.9.3
16 september 2026
-
User Activity Tracking and Log 4.3.1
16 september 2026
-
Presto Player 4.5.1
16 september 2026
-
Discount Rules for WooCommerce – Disco | Dynamic Pricing, Conditions, Bulk, Bundle, BOGO 1.4.16
16 september 2026
-
Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator 1.6.4
16 september 2026
-
HTML5 Video Player – embed fast, responsive videos with ease 2.13.1
16 september 2026
-
Essential Addons for Elementor 6.8.4
16 september 2026
-
BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot 4.9.2
16 september 2026
-
Text To Speech TTS Accessibility 2.3.15
16 september 2026
-
Events Shortcodes For The Events Calendar 2.8.4
16 september 2026
-
GetAutoSEO AI Tool 1.3.110
16 september 2026
-
XT Ajax Add To Cart for WooCommerce 1.1.10
16 september 2026
-
XT Quick View for WooCommerce 2.1.11
16 september 2026
-
XT Floating Cart for WooCommerce 2.8.12
16 september 2026
-
Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress 5.9.36
16 september 2026
-
WC Fields Factory 4.1.11
16 september 2026
-
Easy Parallax 2.3
16 september 2026
-
bSlider – Build Sliders That Bring Your Content to Life 2.2.1
16 september 2026
-
Formidable Abandonment 1.2
16 september 2026
-
Themify – WooCommerce Product Filter 1.5.8
16 september 2026
-
Repeater Fields for Gravity Forms 3.2.0
16 september 2026
-
WPIDE – File Manager & Code Editor 3.5.9
16 september 2026
-
WP Cloud Plugins - Dropbox (Out-of-the-Box) 3.10
16 september 2026
-
Proclaim 10.7.0
16 september 2026
-
Product Badge, Label, Countdown Timer for WooCommerce – Sale Booster 7.6.0
16 september 2026
-
WP Docs 2.3.4
16 september 2026
-
JCE Language fr-FR 2.9.99.11
16 september 2026
-
Newsletters - By Tribulant 4.18.1
16 september 2026
-
Connect Matomo – Analytics Dashboard for WordPress 1.1.12
16 september 2026
-
Export/Import Media – CSV Media Library Import & Export 1.8.2
16 september 2026
-
Simply Schedule Appointments 1.6.12.29
16 september 2026
-
SpeakOut! Email Petitions 4.6.6
16 september 2026
-
ConveyThis 65
15 september 2026
-
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 2.13.1
15 september 2026
-
WCPOS – Point of Sale (POS) plugin for WooCommerce 1.10.15
15 september 2026
-
Cookies Policy Notification Bar (pro version) 5.1.0
15 september 2026
-
SpicePress 3.8.3
15 september 2026
-
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments 4.8.0
15 september 2026
-
Agile Store Locator 1.8.6
15 september 2026
-
Booking Calendar 11.8.2
15 september 2026
-
Product Table & List Builder for WooCommerce – Create WooCommerce Product Table Layout 5.6.9
15 september 2026
-
WPGraphQL 2.23.0
15 september 2026
-
Sell Downloads 1.2.4
15 september 2026