WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
donations-block
Published
2024-07-09
Title
Donation Block for PayPal <= 2.1.0 - Unauthenticated Stored XSS
Slug
donations-block
Published
2025-01-07
Title
Donation Block For PayPal <= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
donations-for-woocommerce
Published
2023-06-21
Title
Potent Donations for WooCommerce < 1.1.10 - Cross-Site Request Forgery
Slug
doneren-met-mollie
Published
2021-01-22
Title
Doneren met Mollie < 2.8.5 - Unauthorised CSV Export leading to Sensitive Data Disclosure
Slug
doneren-met-mollie
Published
2024-03-25
Title
Doneren met Mollie < 2.10.3 - Unauthenticated Reflected Cross-Site Scripting via search
Slug
doneren-met-mollie
Published
2025-03-27
Title
Doneren met Mollie < 2.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
donorbox-donation-form
Published
2019-12-31
Title
Donorbox 7.1~7.1.1 - Stored Cross-Site Scripting via Shortcode
Slug
donorbox-donation-form
Published
2022-03-30
Title
Donorbox < 7.1.7 - Admin+ Stored Cross-Site Scripting
Slug
dont-break-the-code
Published
2024-11-04
Title
Don't Break The Code <= .3.1 - Reflected Cross-Site Scripting
Slug
dont-muck-my-markup
Published
2024-01-30
Title
Don't Muck My Markup <= 1.8 - Cross-Site Request Forgery
Slug
doofinder
Published
2024-11-04
Title
Doofinder <= 0.5.4 - Reflected Cross-Site Scripting
Slug
doofinder-for-woocommerce
Published
2023-11-29
Title
Doofinder for WooCommerce < 2.1.8 - Reflected Cross-Site Scripting
Slug
doofinder-for-woocommerce
Published
2023-12-27
Title
Doofinder for WooCommerce < 2.1.1 - Missing Authorization via multiple AJAX actions
Slug
doofinder-for-woocommerce
Published
2024-02-12
Title
Doofinder for WooCommerce < 2.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
dooodl
Published
2026-01-16
Title
Dooodl <= 2.3.0 - Reflected Cross-Site Scripting
Slug
dop-shortcodes
Published
2024-05-31
Title
DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode
Slug
doppler-form
Published
2025-04-04
Title
Doppler Forms < 2.6.0 - Contributor+ Stored XSS
Slug
doppler-form
Published
2025-04-10
Title
Doppler Forms < 2.4.7 - Missing Authorization
Slug
doppler-form
Published
2025-04-09
Title
Doppler Forms < 2.6.0 - Stored XSS via CSRF
Slug
doppler-form
Published
2025-10-08
Title
Doppler Forms < 2.6.0 - Subscriber+ Limited Plugin Installation
Slug
dorzki-notifications-to-slack
Published
2025-06-05
Title
Slack Notifications by dorzki <= 2.0.7 - Missing Authorization
Slug
dot-htmlphpxml-etc-pages
Published
2025-05-16
Title
Dot html,php,xml etc pages <= 1.0 - Reflected Cross-Site Scripting
Slug
dot-htmlphpxml-etc-pages
Published
2025-07-07
Title
Dot html,php,xml etc pages <= 1.0 - Reflected Cross-Site Scripting
Slug
double-opt-in-for-download
Published
2015-11-28
Title
Double Opt-In for Download <= 2.0.8 - SQL Injection
Slug
double-opt-in-for-download
Published
2016-06-06
Title
Double Opt-In for Download < 2.1.0 - Authenticated SQL Injection