Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

PluginOps — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting PluginOps. AI-powered Chinese analysis, POCs, and references for each vulnerability.

PluginOps develops WordPress management tools focused on plugin operations and security monitoring. The platform has recorded 15 CVEs, primarily involving remote code execution, cross-site scripting, and privilege escalation vulnerabilities. Historically, these issues often stem from insufficient input validation and improper access controls in plugin management functions. While no major public security incidents have been documented, the consistent presence of critical vulnerabilities in their plugin ecosystem suggests ongoing challenges in secure development practices. The company's core value proposition centers on automating plugin updates and security scanning, though their own history of vulnerabilities highlights the complex security landscape surrounding third-party WordPress integrations.

CVE ID Title CVSS Severity Published
CVE-2026-27536 WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability — MailChimp Subscribe Forms CWE-79 7.1 High 2026-08-13
CVE-2026-57337 WordPress Landing Page Builder plugin <= 1.5.3.5 - Cross Site Scripting (XSS) vulnerability — Landing Page Builder CWE-79 7.1 High 2026-06-29
CVE-2026-24620 WordPress Landing Page Builder plugin <= 1.5.3.4 - Cross Site Scripting (XSS) vulnerability — Landing Page Builder CWE-79 5.9 Medium 2026-01-23
CVE-2025-62107 WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability — Feather Login Page CWE-352 4.3 Medium 2025-12-22
CVE-2025-60126 WordPress Testimonial Slider Plugin <= 3.5.8.6 - Local File Inclusion Vulnerability — Testimonial Slider CWE-98 8.8 High 2025-09-26
CVE-2025-30581 WordPress Top Bar plugin <= 3.3 - Broken Access Control Vulnerability — Top Bar CWE-862 5.3 Medium 2025-03-24
CVE-2025-22727 WordPress MailChimp Subscribe Form plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability — MailChimp Subscribe Forms CWE-79 6.5 Medium 2025-01-21
CVE-2024-51858 WordPress Social Locker plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability — Social Locker CWE-79 6.5 Medium 2024-11-19
CVE-2024-43211 WordPress MailChimp Subscribe Form plugin <=4.0.9.9 - Stored Cross-Site Scripting vulnerability — MailChimp Subscribe Forms CWE-79 5.9 Medium 2024-11-01
CVE-2024-43345 WordPress Landing Page Builder plugin <= 1.5.2.0 - Local File Inclusion vulnerability — Landing Page Builder CWE-22 7.5 High 2024-08-19
CVE-2024-34752 WordPress Landing Page Builder <= 1.5.1.8 - Cross Site Scripting (XSS) vulnerability — Landing Page Builder CWE-79 7.1 High 2024-05-17
CVE-2024-31923 WordPress Feather Login Page plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability — Feather Login Page CWE-352 4.3 Medium 2024-04-15
CVE-2024-30452 WordPress Landing Page Builder plugin <= 1.5.1.7 - Cross Site Scripting (XSS) vulnerability — Landing Page Builder CWE-79 5.9 Medium 2024-03-29
CVE-2023-32517 WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.3 is vulnerable to Open Redirection — MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder CWE-601 4.7 Medium 2023-12-29
CVE-2023-48325 WordPress Landing Page Builder Plugin <= 1.5.1.5 is vulnerable to Open Redirection — Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages CWE-601 4.7 Medium 2023-12-07
CVE-2023-40675 WordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS) — Landing Page Builder CWE-79 5.9 Medium 2023-09-27
CVE-2023-33328 WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.1 is vulnerable to Cross Site Scripting (XSS) — MailChimp Subscribe Form CWE-79 5.9 Medium 2023-05-28

This page lists every published CVE security advisory associated with PluginOps. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.