Plugin icon

WPMasterToolKit (WPMTK) – All in one plugin

wpmastertoolkit

Vulnerabilities:

5

Last Updated:

May 7, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-01-15
Title
WPMasterToolKit < 2.14.1 - Missing Authorization
Fixed in
Fixed in 2.14.1
CVSS
4.3 (medium)
Published
2025-12-11
Title
WPMasterToolKit (WPMTK) < 2.13.1 - Authenticated (Contributor+) Code Injection
Fixed in
Fixed in 2.13.1
CVSS
5.3 (medium)
Published
2025-04-23
Title
WPMasterToolKit (WPMTK) – All in one plugin < 2.6.0 - Authenticated (Administrator+) to Arbitrary File Read and Write
Fixed in
Fixed in 2.6.0
CVSS
7.2 (high)
Published
2024-12-30
Title
WPMasterToolKit < 1.14.0 - Authenticated (Admin+) Arbitrary File Download
Fixed in
Fixed in 1.14.0
CVSS
4.9 (medium)
Published
2024-12-30
Title
WPMasterToolKit < 1.14.0 - Authenticated (Admin+) Arbitrary File Upload
Fixed in
Fixed in 1.14.0
CVSS
7.2 (high)