WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
donation-button
Published
2022-11-16
Title
Donation Button <= 4.0.0 - Contributor+ Stored XSS
Slug
donation-forms-by-givecloud
Published
2025-09-05
Title
Donation Forms WP by Givecloud < 1.0.10 - Contributor+ Stored XSS
Slug
donation-thermometer
Published
2022-09-07
Title
Donation Thermometer < 2.1.3 - Admin+ Stored Cross-Site Scripting
Slug
donation-thermometer
Published
2025-11-26
Title
Donation Thermometer < 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
donation-thermometer
Published
2026-06-26
Title
Donation Thermometer < 2.2.8 - Missing Authorization
Slug
donations-block
Published
2023-02-01
Title
Donation Block For PayPal < 2.1.0 - Contributor+ Stored XSS
Slug
donations-block
Published
2024-07-09
Title
Donation Block for PayPal <= 2.1.0 - Unauthenticated Stored XSS
Slug
donations-block
Published
2025-01-07
Title
Donation Block For PayPal <= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
donations-for-woocommerce
Published
2023-06-21
Title
Potent Donations for WooCommerce < 1.1.10 - Cross-Site Request Forgery
Slug
doneren-met-mollie
Published
2021-01-22
Title
Doneren met Mollie < 2.8.5 - Unauthorised CSV Export leading to Sensitive Data Disclosure
Slug
doneren-met-mollie
Published
2024-03-25
Title
Doneren met Mollie < 2.10.3 - Unauthenticated Reflected Cross-Site Scripting via search
Slug
doneren-met-mollie
Published
2025-03-27
Title
Doneren met Mollie < 2.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
donorbox-donation-form
Published
2019-12-31
Title
Donorbox 7.1~7.1.1 - Stored Cross-Site Scripting via Shortcode
Slug
donorbox-donation-form
Published
2022-03-30
Title
Donorbox < 7.1.7 - Admin+ Stored Cross-Site Scripting
Slug
dont-break-the-code
Published
2024-11-04
Title
Don't Break The Code <= .3.1 - Reflected Cross-Site Scripting
Slug
dont-muck-my-markup
Published
2024-01-30
Title
Don't Muck My Markup <= 1.8 - Cross-Site Request Forgery
Slug
doofinder
Published
2024-11-04
Title
Doofinder <= 0.5.4 - Reflected Cross-Site Scripting
Slug
doofinder-for-woocommerce
Published
2023-11-29
Title
Doofinder for WooCommerce < 2.1.8 - Reflected Cross-Site Scripting
Slug
doofinder-for-woocommerce
Published
2023-12-27
Title
Doofinder for WooCommerce < 2.1.1 - Missing Authorization via multiple AJAX actions
Slug
doofinder-for-woocommerce
Published
2024-02-12
Title
Doofinder for WooCommerce < 2.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
doofinder-for-woocommerce
Published
2026-03-13
Title
Doofinder for WooCommerce < 2.10.14 - Unauthenticated Information Exposure
Slug
dooodl
Published
2026-01-16
Title
Dooodl <= 2.3.0 - Reflected Cross-Site Scripting
Slug
dop-shortcodes
Published
2024-05-31
Title
DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode
Slug
doppler-form
Published
2025-04-04
Title
Doppler Forms < 2.6.0 - Contributor+ Stored XSS
Slug
doppler-form
Published
2025-04-10
Title
Doppler Forms < 2.4.7 - Missing Authorization