WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
display-a-meta-field-as-block
Published
2024-08-16
Title
Meta Field Block < 1.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
display-admin-page-on-frontend
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
display-admin-page-on-frontend
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
display-admin-page-on-frontend
Published
2025-09-22
Title
WP Frontend Admin < 1.22.8 - Contributor+ Stored XSS
Slug
display-custom-post
Published
2023-11-23
Title
Display Custom Post <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
display-during-conditional-shortcode
Published
2026-02-17
Title
Display During Conditional Shortcode < 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via message Parameter
Slug
display-future-posts
Published
2024-12-12
Title
Display Future Posts <= 0.2.3 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
display-medium-posts
Published
2024-10-03
Title
Display Medium Posts <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via display_medium_posts Shortcode
Slug
display-metadata
Published
2023-05-30
Title
Display post meta, term meta, comment meta, and user meta <= 1.0.0 - Contributor+ Stored XSS
Slug
display-pages-shortcode
Published
2025-11-20
Title
Display Pages Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
display-post-meta
Published
2025-03-20
Title
Display Post Meta <= 2.4.4 -Reflected Cross-Site Scripting
Slug
display-post-metadata
Published
2021-11-15
Title
Display Post Metadata < 1.5.0 - Contributor+ Stored Cross-Site Scripting
Slug
display-product-variations-dropdown-on-shop-page
Published
2025-04-04
Title
Display product variations dropdown on shop page <= 1.1.3 - Missing Authorization
Slug
display-remote-posts-block
Published
2025-05-07
Title
Display Remote Posts Block < 1.1.1 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
display-template-name
Published
2025-03-11
Title
Display Template Name <= 1.7.1 - Cross-Site Request Forgery
Slug
display-terms-shortcode
Published
2024-10-31
Title
Display Terms Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
display-widgets
Published
2015-08-11
Title
Display Widgets <= 2.03 - Authenticated Cross-Site Scripting (XSS)
Slug
display-widgets
Published
2017-09-10
Title
Display Widgets 2.6.0-2.6.3.1 - Backdoored
Slug
displayproduct
Published
2025-03-25
Title
Product Catalog – Catalog for WordPress <= 1.0.4 - Unauthenticated SQL Injection
Slug
disqus-comment-system
Published
2014-06-20
Title
Disqus <= 2.75 - Remote Code Execution (RCE)
Slug
disqus-comment-system
Published
2011-12-11
Title
Disqus Comment System <= 2.68 - Reflected Cross-Site Scripting (XSS)
Slug
disqus-comment-system
Published
2014-08-01
Title
Disqus Blog Comments < 2.7.8 - Blind SQL Injection
Slug
disqus-comment-system
Published
2014-09-17
Title
Disqus < 2.79 - Cross-Site Request Forgery (CSRF)
Slug
disqus-comment-system
Published
2014-08-12
Title
Disqus <= 2.75 - Cross-Site Scripting (XSS) & CSRF
Slug
disqus-conditional-load
Published
2023-03-21
Title
Disqus Conditional Load < 11.1.2 - Admin+ Stored Cross-Site Scripting