Kwetsbare plugins Joomla! en Wordpress
Kwetsbare plugins afgelopen maand
-
JoomGallery (com_joomgallery) 4.0.0 to 4.4.1 - Unauthenticated File Upload via the TUS Endpoint (no fixed version released)
15 september 2026
-
J2Store / J2Commerce (com_j2store) 4.1.7 (Joomla 5 / 6 branch) - Unauthenticated Blind SQL Injection, Arbitrary File Read, Order Status Tampering, Forgeable Order Token and Missing CSRF Protection (6 CVEs)
15 september 2026
-
J2Store / J2Commerce (com_j2store) 4.0.22 (Joomla 4 branch) - Unauthenticated Blind SQL Injection, Arbitrary File Read, Order Status Tampering, Forgeable Order Token and Missing CSRF Protection (6 CVEs)
15 september 2026
-
J2Store / J2Commerce (com_j2store) 3.3.22 (Joomla 3 branch) - Unauthenticated Blind SQL Injection, Arbitrary File Read, Order Status Tampering, Forgeable Order Token and Missing CSRF Protection (6 CVEs)
15 september 2026
-
SP Page Builder (com_sppagebuilder) 6.8.0 to 6.9.0 - CVE-2026-78375 Author-level SQL Injection (full database read, CVSS 8.6), CVE-2026-79700 and CVE-2026-79701 Unauthenticated Captcha Bypass, plus three authorisation flaws - fixed in 6.9.1
14 september 2026
-
Snippets (snippets) 1.0.0 to below 7.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 1.0.0 to below 7.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 1.0.0 to below 7.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 1.0.0 to below 7.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 1.0.0 to below 7.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Tabs & Accordions (tabsaccordions) 3.0.0 to below 3.1.0 - Authenticated Stored XSS via Crafted data-rlta-alias Attributes
13 september 2026
-
Tabs & Accordions (tabsaccordions) 3.0.0 to below 3.1.0 - Authenticated Stored XSS via Crafted data-rlta-alias Attributes
13 september 2026
-
Tabs & Accordions (tabsaccordions) 3.0.0 to below 3.1.0 - Authenticated Stored XSS via Crafted data-rlta-alias Attributes
13 september 2026
-
Conditional Content (conditionalcontent) 7.0.0 to below 8.0.0 - Authenticated PHP Code Execution via Inline Condition Rules
13 september 2026
-
Conditional Content (conditionalcontent) 7.0.0 to below 8.0.0 - Authenticated PHP Code Execution via Inline Condition Rules
13 september 2026
-
Conditional Content (conditionalcontent) 7.0.0 to below 8.0.0 - Authenticated PHP Code Execution via Inline Condition Rules
13 september 2026
-
Advanced Module Manager (advancedmodules) 12.0.0 to below 12.1.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Advanced Module Manager (advancedmodules) 12.0.0 to below 12.1.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Advanced Module Manager (advancedmodules) 12.0.0 to below 12.1.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Advanced Module Manager (advancedmodules) 12.0.0 to below 12.1.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
ReReplacer (rereplacer) 16.0.0 to below 16.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
ReReplacer (rereplacer) 16.0.0 to below 16.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
ReReplacer (rereplacer) 16.0.0 to below 16.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
ReReplacer (rereplacer) 16.0.0 to below 16.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Content Templater (contenttemplater) 14.0.0 to below 14.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Content Templater (contenttemplater) 14.0.0 to below 14.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Content Templater (contenttemplater) 14.0.0 to below 14.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Content Templater (contenttemplater) 14.0.0 to below 14.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Content Templater (contenttemplater) 14.0.0 to below 14.2.0 - Authenticated Information Disclosure via Condition Set Labels
13 september 2026
-
Quick Index (quickindex) 5.0.0 to below 5.0.5 - Authenticated Stored XSS via Crafted Index Class Options
13 september 2026
-
Quick Index (quickindex) 5.0.0 to below 5.0.5 - Authenticated Stored XSS via Crafted Index Class Options
13 september 2026
-
Snippets (snippets) 10.0.0 to below 11.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 10.0.0 to below 11.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 10.0.0 to below 11.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 10.0.0 to below 11.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Snippets (snippets) 10.0.0 to below 11.0.0 - Authenticated Stored XSS via Snippet Variable Overrides
13 september 2026
-
Modals (modals) 16.0.0 to below 17.0.0 - Authenticated Stored XSS via JavaScript URLs and JavaScript Events
13 september 2026
-
Modals (modals) 16.0.0 to below 17.0.0 - Authenticated Stored XSS via JavaScript URLs and JavaScript Events
13 september 2026
-
Modals (modals) 16.0.0 to below 17.0.0 - Authenticated Stored XSS via JavaScript URLs and JavaScript Events
13 september 2026
-
Users Anywhere (usersanywhere) 2.0.0 to below 2.1.0 - Authenticated Stored and Reflected XSS via Unescaped Request Input
13 september 2026
-
Users Anywhere (usersanywhere) 2.0.0 to below 2.1.0 - Authenticated Stored and Reflected XSS via Unescaped Request Input
13 september 2026
-
Articles Anywhere (articlesanywhere) 19.0.0 to below 20.0.0 - Authenticated Stored and Reflected XSS via Unescaped Request Input and JavaScript Events
13 september 2026
-
Articles Anywhere (articlesanywhere) 19.0.0 to below 20.0.0 - Authenticated Stored and Reflected XSS via Unescaped Request Input and JavaScript Events
13 september 2026
-
Articles Anywhere (articlesanywhere) 19.0.0 to below 20.0.0 - Authenticated Stored and Reflected XSS via Unescaped Request Input and JavaScript Events
13 september 2026
-
DPCases (com_dpcases) below 3.8.1 - Authenticated Stored XSS and Path Traversal
10 september 2026
-
DPCases (com_dpcases) below 3.8.1 - Authenticated Stored XSS and Path Traversal
10 september 2026
-
DPMedia below 1.21.1 - Media Reference Disclosure, Path Traversal and OAuth CSRF
10 september 2026
-
DPMedia below 1.21.1 - Media Reference Disclosure, Path Traversal and OAuth CSRF
10 september 2026
-
DPAttachments (com_dpattachments) below 5.8.1 - Unauthenticated Attachment Download, Stored XSS and Path Traversal
10 september 2026
-
DPAttachments (com_dpattachments) below 5.8.1 - Unauthenticated Attachment Download, Stored XSS and Path Traversal
10 september 2026
Laatst geüpdatet plugins
-
Asset CleanUp: Page Speed Booster 1.4.0.6
16 september 2026
-
Enable Abilities for MCP 2.12.0
16 september 2026
-
User Submitted Posts – Enable Users to Submit Posts from the Front End 20260916
16 september 2026
-
Groundhogg — CRM, Newsletters, and Marketing Automation 4.8.2
16 september 2026
-
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels 8.0.23
16 september 2026
-
FluentAuth – Login Security, Two-Factor Authentication, Passkeys & Social Login 3.0.0
16 september 2026
-
Woodmart 8.6.1
16 september 2026
-
BlockStrap Page Builder – Bootstrap Blocks 0.1.59
16 september 2026
-
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP 1.2.74
16 september 2026
-
Payment forms, Buy now buttons, and Invoicing System | GetPaid 2.8.60
16 september 2026
-
GetPaid Stripe Payments 2.3.27
16 september 2026
-
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory 2.8.181
16 september 2026
-
Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA 3.1.10
16 september 2026
-
WPVibe – WordPress MCP Server. Connect Claude, ChatGPT & Any AI Agent via MCP 1.17.1
16 september 2026
-
HubSpot All-In-One Marketing – Forms, Popups, Live Chat 11.3.75
16 september 2026
-
Import and export users and customers 2.5.1
16 september 2026
-
Shapely 1.3.5
16 september 2026
-
NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization 1.20.1
16 september 2026
-
BerqWP – All-In-One Optimization for Core Web Vitals, Cache, CDN, Images, CSS & JavaScript 4.1.17
16 september 2026
-
Buckaroo Payments for WooCommerce 4.10.1
16 september 2026
-
Happy Elementor Addons Pro 4.0.0
16 september 2026
-
Sparkling 2.6.10
16 september 2026
-
Borlabs Cookie 3.4.4
16 september 2026
-
Satispay for WooCommerce 2.2.10
16 september 2026
-
BrikPanel: WooCommerce Dashboard, Abandoned Cart Recovery, Google Sheets Sync, Inventory Management & Bulk Editor 3.3.7
16 september 2026
-
InstaWP Connect – 1-click WP Staging & Migration 0.1.3.9
16 september 2026
-
Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo 0.9.81.13
16 september 2026
-
Strong Testimonials 3.3.8
16 september 2026
-
Unzer Payments 2.2.1
16 september 2026
-
SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) 2.15.9
16 september 2026
-
Simple History – Track, Log, and Audit WordPress Changes 5.33.0
16 september 2026
-
Smart COD for WooCommerce 1.9.1
16 september 2026
-
WCPOS – Point of Sale (POS) plugin for WooCommerce 1.10.16
16 september 2026
-
Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform 3.14.0
16 september 2026
-
FunnelKit Payment Gateway for Stripe WooCommerce 1.15.0
16 september 2026
-
Nuvei Payments for Woocommerce 3.15.1
16 september 2026
-
WooCommerce Shipping 2.4.0
16 september 2026
-
RO Single Sign On 2.3.1
16 september 2026
-
Translate for SPPB Pro 5 6.2
16 september 2026
-
Zineps Shipping for WooCommerce 1.3.31
16 september 2026
-
Simple Analytics 1.110
16 september 2026
-
Breeze Cache 2.5.17
16 september 2026
-
Nicepage 8.7.0
16 september 2026
-
Tagembed: Social Media Feeds and Customer Reviews Widget 7.8
16 september 2026
-
Reviews Feed Pro Elite 2.13.0
16 september 2026
-
Qi Addons For Elementor 1.11.1
16 september 2026
-
Unlimited Elements For Elementor 2.0.20
16 september 2026
-
Easy MCP AI – Connector for Claude, ChatGPT & SEO Data 1.7.17
16 september 2026
-
Smart COD for WooCommerce 1.9.0
16 september 2026
-
HappyAddons for Elementor – 157+ Elementor Widgets, GSAP Animations & Templates 3.50.0
16 september 2026