WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dokan-pro
Published
2026-06-23
Title
Dokan Pro < 5.0.5 - Unauthenticated Privilege Escalation
Slug
dokan-pro
Published
2026-06-30
Title
Dokan Pro < 5.0.5 - Vendor+ Privilege Escalation via update_capabilities REST Endpoint
Slug
dokan-pro
Published
2026-07-23
Title
Dokan Pro <= 5.0.2 - Authenticated (Subscriber+) SQL Injection
Slug
dokan-pro
Published
2026-07-23
Title
Dokan Pro <= 5.0.0 - Unauthenticated Stored Cross-Site Scripting
Slug
dokan-pro
Published
2026-07-23
Title
Dokan Pro <= 5.0.3 - Missing Authorization
Slug
dokan-pro
Published
2026-07-23
Title
Dokan Pro <= 5.0.2 - Authenticated (Subscriber+) PHP Object Injection
Slug
dokme
Published
2025-03-24
Title
دکمه، شبکه اجتماعی خرید <= 2.0.6 - Authenticated (Administrator+) SQL Injection
Slug
doko-box-builder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
doleads-integrator
Published
2026-06-16
Title
DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE
Slug
doliconnect
Published
2025-09-22
Title
Doliconnect < 9.6.2 - Cross-Site Request Forgery
Slug
doliconnect
Published
2025-08-23
Title
Doliconnect < 9.4.2 - Reflected Cross-Site Scripting
Slug
dollie
Published
2024-12-03
Title
Dollie Hub – Build Your Own WordPress Cloud Platform < 6.2.1 - Authenticated (Contributor+) Post Disclosure
Slug
dologin
Published
2023-08-28
Title
DoLogin Security < 3.7 - IP Spoofing
Slug
dologin
Published
2023-08-28
Title
DoLogin Security < 3.7 - Unauthenticated Stored Cross-Site Scripting
Slug
dologin
Published
2023-09-21
Title
DoLogin Security < 3.7.1 - Subscriber+ IP Address leak
Slug
dologin
Published
2023-10-24
Title
DoLogin Security < 3.8 - Missing Authorization via REST Endpoints
Slug
dologin
Published
2026-07-07
Title
DoLogin Security < 4.4 - Unauthenticated Authentication Bypass via Insufficient Randomness via 'dologin' Parameter Weak PRNG Token
Slug
domain-check
Published
2021-12-28
Title
Domain Check < 1.0.17 - Reflected Cross-Site Scripting
Slug
domain-for-sale
Published
2025-06-05
Title
Domain For Sale < 3.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via class_name Parameter
Slug
domain-for-sale
Published
2026-09-13
Title
Domain For Sale – Landing Page Per Domain, Domain Mapping, Offers & Listings < 3.5.2 - Missing Authorization
Slug
domain-mapping-system
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
domain-mapping-system
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
domain-replace
Published
2022-04-26
Title
Domain Replace <= 1.3.8 - Reflected Cross-Site Scripting
Slug
domain-sharding
Published
2024-10-30
Title
Domain Sharding <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
domain-theme
Published
2025-03-11
Title
Domain Theme <= 1.3 - Cross-Site Request Forgery