WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
display-remote-posts-block
Published
2025-05-07
Title
Display Remote Posts Block < 1.1.1 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
display-template-name
Published
2025-03-11
Title
Display Template Name <= 1.7.1 - Cross-Site Request Forgery
Slug
display-terms-shortcode
Published
2024-10-31
Title
Display Terms Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
display-widgets
Published
2015-08-11
Title
Display Widgets <= 2.03 - Authenticated Cross-Site Scripting (XSS)
Slug
display-widgets
Published
2017-09-10
Title
Display Widgets 2.6.0-2.6.3.1 - Backdoored
Slug
displayproduct
Published
2025-03-25
Title
Product Catalog – Catalog for WordPress <= 1.0.4 - Unauthenticated SQL Injection
Slug
disqus-comment-system
Published
2014-06-20
Title
Disqus <= 2.75 - Remote Code Execution (RCE)
Slug
disqus-comment-system
Published
2011-12-11
Title
Disqus Comment System <= 2.68 - Reflected Cross-Site Scripting (XSS)
Slug
disqus-comment-system
Published
2014-08-01
Title
Disqus Blog Comments < 2.7.8 - Blind SQL Injection
Slug
disqus-comment-system
Published
2014-09-17
Title
Disqus < 2.79 - Cross-Site Request Forgery (CSRF)
Slug
disqus-comment-system
Published
2014-08-12
Title
Disqus <= 2.75 - Cross-Site Scripting (XSS) & CSRF
Slug
disqus-conditional-load
Published
2023-03-21
Title
Disqus Conditional Load < 11.1.2 - Admin+ Stored Cross-Site Scripting
Slug
disqus-popular-posts
Published
2025-01-31
Title
Disqus Popular Posts <= 2.1.1 - Reflected Cross-Site Scripting
Slug
distance-based-shipping-calculator
Published
2024-11-20
Title
Distance Based Shipping Calculator < 2.0.24 - Subscriber+ SQL Injection
Slug
distance-based-shipping-calculator
Published
2025-01-03
Title
Distance Based Shipping Calculator < 2.0.22 - Reflected Cross-Site Scripting
Slug
distance-based-shipping-calculator
Published
2025-02-14
Title
Distance Based Shipping Calculator < 2.0.23 - Missing Authorization
Slug
distance-based-shipping-calculator
Published
2025-02-14
Title
Distance Based Shipping Calculator < 2.0.23 - Missing Authorization to Unauthenticated Settings Update
Slug
distance-rate-shipping-for-woocommerce
Published
2025-02-03
Title
Distance Rate Shipping For WooCommerce <= 1.3.4 - Authenticated (Subscriber+) SQL Injection
Slug
distancr
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ditty-news-ticker
Published
2022-02-09
Title
Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)
Slug
ditty-news-ticker
Published
2023-02-20
Title
Ditty < 3.0.33 - Contributor+ Stored XSS
Slug
ditty-news-ticker
Published
2023-08-29
Title
Ditty < 3.1.25 - Reflected XSS
Slug
ditty-news-ticker
Published
2023-11-13
Title
Ditty < 3.1.25 - Missing Authorization via save_ditty_permissions_check
Slug
ditty-news-ticker
Published
2024-04-16
Title
Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.32 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
ditty-news-ticker
Published
2024-05-06
Title
Ditty < 3.1.36 - Author+ Stored XSS