WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dsgvo
Published
2025-01-16
Title
EU DSGVO Helper <= 1.0.6.1 - Reflected Cross-Site Scripting
Slug
dsgvo-all-in-one-for-wp
Published
2021-05-07
Title
DSGVO All in one for WP < 4.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
dsgvo-all-in-one-for-wp
Published
2022-09-12
Title
DSGVO All in one for WP < 4.2 - Admin+ Stored Cross-Site Scripting
Slug
dsgvo-all-in-one-for-wp
Published
2024-03-13
Title
DSGVO All in one for WP < 4.4 - Cross-Site Request Forgery
Slug
dsgvo-all-in-one-for-wp
Published
2024-08-26
Title
DSGVO All in one for WP < 4.6 - Contributor+ Stored XSS
Slug
dsgvo-all-in-one-for-wp
Published
2025-02-03
Title
DSGVO All in one for WP < 4.7 - Cross-Site Request Forgery to Account Deletion
Slug
dsgvo-all-in-one-for-wp
Published
2026-07-08
Title
DSGVO All in one for WP < 5.0 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
Slug
dsgvo-google-web-fonts-gdpr
Published
2026-04-07
Title
DSGVO Google Web Fonts GDPR <= 1.1 - Unauthenticated Arbitrary File Upload via 'fonturl' Parameter
Slug
dsgvo-leaflet-map
Published
2026-03-23
Title
DSGVO snippet for Leaflet Map and its Extensions < 3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'unset' Attribute
Slug
dsgvo-youtube
Published
2024-04-16
Title
DSGVO Youtube < 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dsgvo-youtube
Published
2025-04-11
Title
DSGVO Youtube < 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dsidxpress
Published
2014-04-25
Title
Dsidxpress < 2.1.1 - XSS
Slug
dsp_dating
Published
2022-07-18
Title
WPDating < 7.4.0 - Multiple Unauthenticated SQLi
Slug
dsubscribers
Published
2017-07-06
Title
DSubscribers <= 1.2 - Authenticated SQL Injection
Slug
dt-reservation-plugin
Published
2025-10-21
Title
Reservation < 1.7 - Reflected Cross-Site Scripting
Slug
dt-reservation-plugin
Published
2026-01-13
Title
Reservation <= 1.7 - Missing Authorization to Unauthenticated Settings Update
Slug
dt-the7-core
Published
2025-12-05
Title
The7 Elements < 2.7.12 - Authenticated (Contributor+) Local File Inclusion
Slug
dtabs
Published
2022-03-01
Title
dTabs <= 1.4 - Reflected Cross-Site Scripting
Slug
dtc-documents
Published
2024-12-12
Title
DTC Documents <= 1.1.05 - Cross-Site Request Forgery
Slug
dtracker
Published
2017-03-09
Title
DTracker 1.5 - Multiple Unauthenticated Blind SQL Injections
Slug
dtracker
Published
2017-03-13
Title
Dtracker <= 1.5 - Unauthorised Contract Creation
Slug
dts-simple-share
Published
2024-07-09
Title
Wordpress Simple Share Plugin <=0.5.3 - Admin+ XSS
Slug
duitku-social-payment-gateway
Published
2024-02-26
Title
Duitku Payment Gateway < 2.11.7 - Missing Authorization via check_duitku_response
Slug
dukapress
Published
2014-11-24
Title
DukaPress <= 2.5.3 - Unauthenticated Path Traversal
Slug
dukapress
Published
2015-08-22
Title
DukaPress <= 2.5.9 - Unauthenticated Blind SQL Injection