Plotly
wp-plotly · plugin
Known security vulnerabilities for Plotly. Find out in seconds which version runs on your site with WP Lens.
2 known vulnerabilities
1 exploitable without logging in · latest Jan 15, 2020
Listed on wordpress.org · latest 1.0.2 · last updated Jul 10, 2015 · 100+ installs
Not updated since Jul 10, 2015. A component left without updates for over two years should not be expected to patch new vulnerabilities.
wordpress.org status checked on Oct 2, 2026
Vulnerabilities
- Medium 6.1
CVE-2015-9347unauthenticated · needs a click
The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors.
- Medium 5.4
CVE-2015-5484login required
Cross-site scripting (XSS) vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitra
The access label is read from the record's own text (e.g. “subscriber+”: subscriber and above). When the text names no role, CVSS decides between “login required” and “high privilege”; no role name is invented. “Needs a click”: the attack depends on a logged-in user following a link (CSRF, reflected XSS).