WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
download-plugin
Published
2021-10-19
Title
Download Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation
Slug
download-plugin
Published
2021-11-11
Title
Download Plugin < 2.0.0 - Subscriber+ Website Download
Slug
download-plugin
Published
2023-05-24
Title
Download < 2.0.5 - Cross-Site Request Forgery (CSRF)
Slug
download-plugin
Published
2024-10-22
Title
Download Plugin < 2.2.1 - Missing Authorization to Authenticated (Subscriber+) User Metadata and Comment Download
Slug
download-plugin
Published
2025-07-03
Title
Download Plugin < 2.2.9 - Authenticated (Administrator+) Arbitrary File Upload
Slug
download-plugins-dashboard
Published
2019-10-02
Title
Download Plugins and Themes from Dashboard < 1.6.0 - Unauthenticated Stored XSS
Slug
download-plugins-dashboard
Published
2024-05-17
Title
Download Plugins and Themes from Dashboard < 1.8.6 - Authenticated (Admin+) Arbitrary File Download
Slug
download-plugins-dashboard
Published
2024-08-15
Title
Download Plugins and Themes from Dashboard < 1.8.8 - Cross-Site Request Forgery
Slug
download-plugins-dashboard
Published
2024-10-10
Title
Download Plugins and Themes in ZIP from Dashboard < 1.9.2 - Reflected Cross-Site Scripting
Slug
download-plugins-dashboard
Published
2025-12-16
Title
Download Plugins and Themes from Dashboard < 1.9.7 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival
Slug
download-shortcode
Published
2014-08-01
Title
Download Shortcode - "file" Arbitrary File Disclosure
Slug
download-theme
Published
2023-05-24
Title
Download < 1.1.0 - Cross-Site Request Forgery
Slug
download-zip-attachments
Published
2015-06-10
Title
Download Zip Attachments <= 1.0 - Arbitrary File Download
Slug
downloader-tiktok
Published
2021-04-13
Title
Video Downloader for TikTok < 1.4 - Server Side Request Forgery (SSRF) & Local File Inclusion (LFI)
Slug
downloadmanager
Published
2024-04-12
Title
Download Manager < 3.2.83 - Unauthenticated Password Protected File Bypass
Slug
downloads-manager
Published
2014-08-01
Title
Download Manager 0.2 - Arbitrary File Upload Exploit
Slug
dp-addthis
Published
2024-10-31
Title
(dp) AddThis <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dp-alterminator-missing-alt-manager
Published
2025-03-11
Title
DP ALTerminator - Missing ALT manager <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
dp-intro-tours
Published
2024-12-03
Title
Intro Tour Tutorial DeepPresentation < 6.5.3 - Reflected Cross-Site Scripting
Slug
dp-maintenance-mode-lite
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
dp-thumbnail
Published
2014-08-01
Title
DP Thumbnail 1.0 - Shell Upload
Slug
dpepress
Published
2025-05-20
Title
DPEPress <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dpt-oauth-client
Published
2022-10-21
Title
OAuth Client by DigitialPixies <= 1.1.0 - Admin+ Stored Cross-Site Scripting
Slug
dpt-oauth-client
Published
2022-10-21
Title
OAuth Client by DigitialPixies <= 1.1.0 - CSRF
Slug
dr-affiliate
Published
2024-12-14
Title
Dr Affiliate <= 1.2.3 - Authenticated (Subscriber+) SQL Injection