WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dokan-lite
Published
2026-01-19
Title
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 4.2.5 - Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Disclosure
Slug
dokan-lite
Published
2026-03-16
Title
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 4.2.5 - Missing Authorization
Slug
dokan-pro
Published
2024-06-11
Title
Dokan Pro < 3.11.0 - Unauthenticated SQL Injection
Slug
dokan-pro
Published
2025-05-16
Title
Dokan Pro <= 3.14.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dokan-pro
Published
2025-08-25
Title
Dokan Pro < 4.0.6 - Authenticated (Vendor+) Privilege Escalation
Slug
dokan-pro
Published
2025-12-15
Title
dokan pro < 4.2.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Slug
dokme
Published
2025-03-24
Title
دکمه، شبکه اجتماعی خرید <= 2.0.6 - Authenticated (Administrator+) SQL Injection
Slug
doko-box-builder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
doliconnect
Published
2025-09-22
Title
Doliconnect < 9.6.2 - Cross-Site Request Forgery
Slug
doliconnect
Published
2025-08-23
Title
Doliconnect < 9.4.2 - Reflected Cross-Site Scripting
Slug
dollie
Published
2024-12-03
Title
Dollie Hub – Build Your Own WordPress Cloud Platform < 6.2.1 - Authenticated (Contributor+) Post Disclosure
Slug
dologin
Published
2023-08-28
Title
DoLogin Security < 3.7 - IP Spoofing
Slug
dologin
Published
2023-08-28
Title
DoLogin Security < 3.7 - Unauthenticated Stored Cross-Site Scripting
Slug
dologin
Published
2023-09-21
Title
DoLogin Security < 3.7.1 - Subscriber+ IP Address leak
Slug
dologin
Published
2023-10-24
Title
DoLogin Security < 3.8 - Missing Authorization via REST Endpoints
Slug
domain-check
Published
2021-12-28
Title
Domain Check < 1.0.17 - Reflected Cross-Site Scripting
Slug
domain-for-sale
Published
2025-06-05
Title
Domain For Sale < 3.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via class_name Parameter
Slug
domain-mapping-system
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
domain-mapping-system
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
domain-replace
Published
2022-04-26
Title
Domain Replace <= 1.3.8 - Reflected Cross-Site Scripting
Slug
domain-sharding
Published
2024-10-30
Title
Domain Sharding <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
domain-theme
Published
2025-03-11
Title
Domain Theme <= 1.3 - Cross-Site Request Forgery
Slug
dominion-domain-checker-wpbakery-addon
Published
2025-01-10
Title
Dominion – Domain Checker for WPBakery <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dominokit
Published
2025-11-03
Title
DominoKit <= 1.1.0 - Missing Authorization to Unauthenticated Settings Update
Slug
don8
Published
2023-06-03
Title
Don8 <= 0.4 - Admin+ Stored XSS