WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
duplicator
Published
2015-08-15
Title
Duplicator < 0.5.28 - Authenticated Cross-Site Scripting (XSS)
Slug
duplicator
Published
2016-02-10
Title
Duplicator <= 1.1.3 - Cross-Site Request Forgery (CSRF)
Slug
duplicator
Published
2017-11-07
Title
Duplicator <= 1.2.28 – Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
duplicator
Published
2018-03-15
Title
Duplicator <= 1.2.32 - Cross-Site Scripting (XSS)
Slug
duplicator
Published
2018-09-05
Title
Duplicator < 1.2.42 - Unauthenticated Arbitrary Code Execution
Slug
duplicator
Published
2020-02-19
Title
Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download
Slug
duplicator
Published
2022-08-01
Title
Duplicator < 1.4.7 - Unauthenticated Backup Download
Slug
duplicator
Published
2022-08-01
Title
Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
Slug
duplicator
Published
2023-12-04
Title
Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure
Slug
duplicator
Published
2023-12-15
Title
Duplicator < 1.3.0 - Unauthenticated RCE
Slug
duplicator
Published
2023-12-27
Title
Duplicator < 1.5.7.1 - Settings Removal via CSRF
Slug
duplicator
Published
2024-07-10
Title
Duplicator < 1.5.10 - Full Path Disclosure
Slug
duplicator-pro
Published
2020-02-19
Title
Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download
Slug
duplicator-pro
Published
2023-05-22
Title
Duplicator Pro < 4.5.11.1 - Unauthenticated Reflected XSS
Slug
duplicator-pro
Published
2023-12-04
Title
Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure
Slug
duracelltomi-google-tag-manager
Published
2022-05-19
Title
Google Tag Manager for WordPress < 1.15.1 - Reflected Cross-Site Scripting
Slug
duracelltomi-google-tag-manager
Published
2022-05-31
Title
GTM4WP < 1.15.2 - Admin+ Stored Cross-Site Scripting
Slug
dvk-social-sharing
Published
2024-10-11
Title
Social Sharing (by Danny) < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
dvs-custom-notification
Published
2014-08-01
Title
DVS Custom Notification - Cross-Site Request Forgery
Slug
dw-promobar
Published
2022-07-18
Title
DW Promobar <= 1.0.4 - Admin+ Stored Cross-Site Scripting
Slug
dw-question-answer
Published
2016-03-11
Title
DW Question & Answer <= 1.4.2.2 - Stored Cross-Site Scripting (XSS)
Slug
dw-question-answer
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Slug
dw-question-answer-pro
Published
2022-03-29
Title
DW Question & Answer Pro < 1.3.7 - Arbitrary Comment Edition via IDOR
Slug
dw-question-answer-pro
Published
2022-03-29
Title
DW Question & Answer Pro < 1.3.7 - Multiple CSRF
Slug
dwnldr
Published
2016-07-18
Title
Dwnldr 1.0 - Unauthenticated Stored Cross-Site Scripting (XSS)