StaffList

stafflist · plugin

Known security vulnerabilities for StaffList. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

latest Nov 27, 2025

Vulnerabilities

CVE-2024-13749
StaffList <= 3.2.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium 6.1
CVE-2025-32255
WordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerability
Medium 5.3
CVE-2025-12185
StaffList <= 3.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium 4.4
CVE-2025-32232
WordPress StaffList plugin <= 3.2.7 - Broken Access Control vulnerability
Medium 4.3