WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dicom-support
Published
2025-03-24
Title
DICOM Support < 0.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
did-prestashop-display
Published
2025-10-10
Title
Did Prestashop Display <= 1.0.30 - Cross-Site Request Forgery
Slug
different-home-for-logged-in-logged-out
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
different-menus-in-different-pages
Published
2024-04-29
Title
Different Menu in Different Pages < 2.4.0 - Subscriber+ Menu Duplication
Slug
different-shipping-and-billing-address-for-woocommerce
Published
2025-01-03
Title
Multiple Shipping And Billing Address For Woocommerce < 1.3 - Unauthenticated SQL Injection
Slug
different-shipping-and-billing-address-for-woocommerce
Published
2025-03-03
Title
Multiple Shipping And Billing Address For Woocommerce < 1.5 - Unauthenticated SQL Injection
Slug
different-shipping-and-billing-address-for-woocommerce
Published
2025-03-28
Title
Multiple Shipping And Billing Address For Woocommerce < 1.6 - Unauthenticated PHP Object Injection
Slug
digg-digg
Published
2014-08-01
Title
Digg Digg 5.3.4 - Setting Manipulation CSRF
Slug
digipass
Published
2024-11-11
Title
DigiPass <= 0.3.0 - Unauthenticated Arbitrary File Download
Slug
digiproveblog
Published
2022-07-07
Title
Copyright Proof <= 4.16 - Reflected Cross-Site-Scripting
Slug
digirisk
Published
2023-11-02
Title
Digirisk 6.0.0.0 - Reflected Cross-Site Scripting
Slug
digiseller
Published
2025-10-14
Title
Digiseller < 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
digital-climate-strike-wp
Published
2021-01-21
Title
Digital Climate Strike WP <= 1.0.0 - Redirect to Malicious Website due to Compromised JS Asset
Slug
digital-events-calendar
Published
2025-09-10
Title
Digital Events Calendar <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via column Parameter
Slug
digital-license-manager
Published
2025-03-24
Title
Digital License Manager < 1.7.4 - Reflected Cross-Site Scripting via remove_query_arg Function
Slug
digital-lottery
Published
2024-10-14
Title
Digital Lottery <= 3.0.5 - Unauthenticated Arbitrary File Upload
Slug
digital-marketing-agency-templates-for-elementor
Published
2025-06-12
Title
Digital Marketing and Agency Templates Addons for Elementor <= 1.1.1 - Cross-Site Request Forgery to Import
Slug
digital-publications-by-supsystic
Published
2021-02-08
Title
Digital Publications by Supsystic < 1.6.12 - Authenticated Path Traversal
Slug
digital-publications-by-supsystic
Published
2021-02-08
Title
Digital Publications by Supsystic < 1.7.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
digital-publications-by-supsystic
Published
2022-07-21
Title
Digital Publications by Supsystic < 1.7.4 - Admin+ Stored Cross-Site Scripting
Slug
digital-publications-by-supsystic
Published
2023-12-08
Title
Digital Publications by Supsystic < 1.7.7 - Cross-Site Request Forgery via AJAX action
Slug
digital-publications-by-supsystic
Published
2024-04-11
Title
Digital Publications by Supsystic < 1.7.8 - Cross-Site Request Forgery
Slug
digital-publications-by-supsystic
Published
2024-04-29
Title
Digital Publications by Supsystic < 1.7.8 - Missing Authorization
Slug
digital-river-global-commerce
Published
2024-06-25
Title
Various Plugins <= Various Version - Use of Polyfill.io
Slug
digitimber-cpanel-integration
Published
2025-01-31
Title
DigiTimber cPanel Integration < 1.4.8 - Cross-Site Request Forgery to Stored Cross-site Scripting