WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ditty-news-ticker
Published
2024-05-07
Title
Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.39 - Authenticated (Contributor+) PHP Object Injection
Slug
ditty-news-ticker
Published
2024-06-22
Title
Ditty < 3.1.43 - Author+ Stored XSS
Slug
ditty-news-ticker
Published
2024-07-15
Title
Ditty < 3.1.45 - Author+ Stored XSS
Slug
ditty-news-ticker
Published
2024-08-02
Title
Ditty 3.1.39-3.1.45 - Author+ Stored XSS
Slug
ditty-news-ticker
Published
2024-10-31
Title
Ditty < 3.1.47 - Author+ Stored XSS
Slug
ditty-news-ticker
Published
2024-11-14
Title
Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.52 - Author+ Stored XSS
Slug
ditty-news-ticker
Published
2025-08-18
Title
Ditty < 3.1.58 - Unauthenticated SSRF
Slug
ditty-news-ticker
Published
2025-09-26
Title
Ditty < 3.1.59 - Contributor+ Stored XSS
Slug
divebook
Published
2020-12-09
Title
DiveBook <= 1.1.4 - Improper Authorisation Check
Slug
divebook
Published
2020-12-09
Title
DiveBook <= 1.1.4 - Unauthenticated Reflected XSS
Slug
divebook
Published
2020-12-09
Title
DiveBook <= 1.1.4 - Unauthenticated SQL Injection
Slug
divelogs-widget
Published
2025-12-11
Title
Divelogs Widget < 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
divi-booster
Published
2026-02-18
Title
Divi Booster < 5.0.2 - Unauthenticated PHP Object Injection
Slug
divi-builder
Published
2016-02-18
Title
ElegantThemes - Privilege Escalation
Slug
divi-builder
Published
2018-10-30
Title
ElegantThemes (Divi, Extra, divi-builder) - Authenticated Stored Cross-Site Scripting (XSS)
Slug
divi-builder
Published
2020-01-02
Title
ElegantThemes (Divi, Extra, divi-builder < 4.0.10) - Authenticated Code Injection
Slug
divi-builder
Published
2020-08-03
Title
Elegant Themes (Divi 3.0 - 4.5.2, Extra 2.0 - 4.5.2, Divi Builder 2.0 - 4.5.2) - Authenticated Arbitrary File Upload
Slug
divi-builder
Published
2024-05-09
Title
Elegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
divi-builder
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Slug
dj-email-publish
Published
2021-09-09
Title
DJ EmailPublish <= 1.7.2 - Reflected Cross-Site Scripting
Slug
dk-pdf
Published
2024-09-30
Title
DK PDF < 1.9.7 - Reflected Cross-Site Scripting
Slug
dk-pdf
Published
2026-01-15
Title
DK PDF – WordPress PDF Generator < 2.3.1 - Authenticated (Author+) Server-Side Request Forgery
Slug
dk-pricr-responsive-pricing-table
Published
2023-02-07
Title
Responsive Pricing Table < 5.1.7 - Contributor+ Stored XSS
Slug
dk-pricr-responsive-pricing-table
Published
2023-10-16
Title
Responsive Pricing Table < 5.1.8 - Admin+ Stored Cross-Site Scriping
Slug
dk-pricr-responsive-pricing-table
Published
2024-02-26
Title
Responsive Pricing Table < 5.1.11 - Author+ Stored XSS