tplugins vulnerabilities (CVE)

CVE records published for tplugins, newest first. Follow to get an email when a new one appears.

2 results

4.3Medium

CVE-2026-4128 6 months ago

TP Restore Categories And Taxonomies <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Taxonomy Deletion via 'tpmcattt_delete_term' AJAX Action

tplugins TP Restore Categories And Taxonomies

The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. The delete_term() function, which handles the 'tpmcattt_delete_term' AJAX action, does not perform any capability…

6.4Medium

CVE-2025-5092 11 months ago

Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library

lightgalleryteam LightGallery WP; tplugins TP WooCommerce Product Gallery; vowelweb Ibtana – WordPress Website Builder; wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor

Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. Thi…