WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dn-cookie-notice
Published
2025-04-01
Title
Simple Fixed Notice <= 1.6 - Cross-Site Request Forgery
Slug
dn-footer-contacts
Published
2024-06-18
Title
DN Footer Contacts < 1.6.3 - Admin+ Stored XSS
Slug
dn-footer-contacts
Published
2025-04-01
Title
DN Footer Contacts <= 1.8 - Cross-Site Request Forgery
Slug
dn-popup
Published
2024-08-12
Title
DN Popup <= 1.2.2 - Settings Update via CSRF
Slug
dn-shipping-by-weight
Published
2024-12-06
Title
DN Shipping by Weight for WooCommerce < 1.2 - Settings Update via CSRF
Slug
dn-shipping-by-weight
Published
2025-04-10
Title
DN Shipping by Weight for WooCommerce < 1.2.1 - Reflected Cross-Site Scripting
Slug
dn-sitemap-control
Published
2025-01-16
Title
DN Sitemap Control <= 1.0.6 - Reflected Cross-Site Scripting
Slug
dnui-delete-not-used-image-wordpress
Published
2023-01-18
Title
DNUI <= 2.8.1 - Deletion of images through CSRF
Slug
do-spaces-sync
Published
2025-08-14
Title
DigitalOcean Spaces Sync <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
do-that-task
Published
2024-11-11
Title
Do That Task <= 1.5.5 - Unauthenticated Arbitrary File Upload
Slug
doaj-export
Published
2025-09-22
Title
DOAJ Export <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
dobsondev-shortcodes
Published
2025-04-01
Title
DobsonDev Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
doccheck-login
Published
2025-07-03
Title
DocCheck Login < 1.1.6 - Unauthorized Post Access
Slug
doccure
Published
2025-10-31
Title
Doccure Core < 1.5.4 - Unauthenticated Privilege Escalation
Slug
docket-cache
Published
2021-08-30
Title
Docket Cache < 21.08.02 - Reflected Cross-Site Scripting
Slug
docket-cache
Published
2025-04-17
Title
Docket Cache < 24.07.03 - Unauthenticated Local File Inclusion
Slug
docket-cache
Published
2025-12-24
Title
Docket Cache < 24.07.04 - Unauthenticated Local File Inclusion
Slug
docket-cache
Published
2026-01-07
Title
Docket Cache < 24.07.05 - Missing Authorization
Slug
docodoco-store-locator
Published
2025-10-14
Title
DocoDoco Store Locator <= 1.0.1 - Authenticated (Editor+) Arbitrary File Upload
Slug
docollipics-faustball-de
Published
2024-04-30
Title
Tabellen von faustball.com < 2.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
docpro
Published
2025-03-23
Title
Docpro <= 2.0.1 - Unauthenticated Local File Inclusion
Slug
docspress
Published
2025-06-05
Title
DocsPress < 2.5.3 - Missing Authorization
Slug
doctor-appointment-booking
Published
2025-02-21
Title
Doctor Appointment Booking <= 1.0.0 - Authenticated (Subscriber+) SQL Injection
Slug
doctor-appointment-booking
Published
2025-02-21
Title
Doctor Appointment Booking <= 1.0.0 - Authenticated (Subscriber+) Local File Inclusion
Slug
doctor-listing
Published
2023-03-06
Title
Multiple e-plugins - Subscriber+ Privilege Escalation