WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
drop-shadow-boxes
Published
2024-11-15
Title
Drop Shadow Boxes < 1.7.15 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
drop-uploader-for-contact-form-7-dragdrop-file-uploader-addon
Published
2025-06-24
Title
Drop Uploader for CF7 - Drag&Drop File Uploader Addon <= 2.4.1 - Unauthenticated Arbitrary File Upload
Slug
dropbox-folder-share
Published
2023-09-15
Title
Dropbox Folder Share <= 1.9.7 - Unauthenticated Server-Side Request Forgery via 'link'
Slug
dropbox-folder-share
Published
2023-09-12
Title
Dropbox Folder Share <= 1.9.7 - Unauthenticated Remote Code Execution via LFI
Slug
dropdown-and-scrollable-text
Published
2021-09-09
Title
Dropdown and scrollable Text < 2.1 - Reflected Cross-Site Scripting
Slug
dropdown-category-list
Published
2025-12-11
Title
Category Dropdown List <= 1.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
dropdown-content
Published
2025-04-24
Title
Dropdown Content <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dropdown-menu-widget
Published
2014-08-01
Title
Dropdown Menu Widget 1.9.1 - Script Insertion CSRF
Slug
dropdown-menu-widget
Published
2022-03-14
Title
Dropdown Menu Widget <= 1.9.7 - Subscriber+ Arbitrary Settings Update to Stored XSS
Slug
dropdown-multisite-selector
Published
2024-03-25
Title
Dropdown Multisite selector < 0.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
dropdown-multisite-selector
Published
2025-03-28
Title
Dropdown Multisite selector < 0.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dropshipping-xox
Published
2019-06-15
Title
Dropshix < 4.0.14 - Arbitrary Product Import
Slug
dropshipping-xox
Published
2025-08-15
Title
Dropshix <= 4.0.14 - Admin+ Stored XSS
Slug
drozd-addons-for-elementor
Published
2024-11-13
Title
Drozd – Addons for Elementor <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
drp-coupon
Published
2014-08-01
Title
drp-coupon <= 2.1 - XSS in ZeroClipboard
Slug
drug-search
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
Slug
ds-cf7-math-captcha
Published
2024-09-05
Title
Contact Form 7 Math Captcha < 3.0.1 - Reflected XSS
Slug
ds-site-message
Published
2024-05-07
Title
DS Site Message < 1.14.5 - Stored XSS via CSRF
Slug
ds-suit
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
dsdownloadlist
Published
2024-10-28
Title
DS.DownloadList <= 1.3 - Unauthenticated PHP Object Injection
Slug
dse-divi-section-enhancer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
dsgnwrks-twitter-importer
Published
2025-01-16
Title
DsgnWrks Twitter Importer <= 1.1.4 - Reflected Cross-Site Scripting
Slug
dsgvo
Published
2025-01-16
Title
EU DSGVO Helper <= 1.0.6.1 - Reflected Cross-Site Scripting
Slug
dsgvo-all-in-one-for-wp
Published
2021-05-07
Title
DSGVO All in one for WP < 4.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
dsgvo-all-in-one-for-wp
Published
2022-09-12
Title
DSGVO All in one for WP < 4.2 - Admin+ Stored Cross-Site Scripting