WordPress Plugin Vulnerabilities | Page 39 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

duplicate-variations-for-woocommerce

Published

2022-02-28

Title

Unauthorised AJAX Calls via Freemius

Slug

duplicate-variations-for-woocommerce

Published

2023-07-18

Title

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Slug

duplicate-wp-page-post

Published

2020-04-25

Title

Duplicate Page and Post < 2.5.7 & WP Post Page Clone < 1.1 - SQL Injections due to Duplicated Snippets

Slug

duplicate-wp-page-post

Published

2022-07-20

Title

Duplicate Page and Post Plugin < 2.8 - Admin+ Stored Cross-Site Scripting

Slug

duplicate-wp-page-post

Published

2025-09-09

Title

Duplicate Page and Post <= 2.9.5 - Authenticated (Contributor+) SQL Injection via meta_key Parameter

Slug

duplicate-wp-page-post

Published

2026-05-27

Title

Duplicate Page and Post <= 2.9.5 - Authenticated (Contributor+) SQL Injection

Slug

Published

2014-08-01

Title

Duplicator - installer.cleanup.php package Parameter XSS

Slug

Published

2015-02-19

Title

Duplicator 0.5.8 - Privilege Escalation

Slug

Published

2015-04-10

Title

Duplicator < 0.5.16 - SQL Injection & CSRF

Slug

Published

2015-08-15

Title

Duplicator < 0.5.28 - Authenticated Cross-Site Scripting (XSS)

Slug

Published

2016-02-10

Title

Duplicator <= 1.1.3 - Cross-Site Request Forgery (CSRF)

Slug

Published

2017-11-07

Title

Duplicator <= 1.2.28 – Unauthenticated Stored Cross-Site Scripting (XSS)

Slug

Published

2018-03-15

Title

Duplicator <= 1.2.32 - Cross-Site Scripting (XSS)

Slug

Published

2018-09-05

Title

Duplicator < 1.2.42 - Unauthenticated Arbitrary Code Execution

Slug

Published

2020-02-19

Title

Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download

Slug

Published

2022-08-01

Title

Duplicator < 1.4.7 - Unauthenticated Backup Download

Slug

Published

2022-08-01

Title

Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure

Slug

Published

2023-12-04

Title

Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure

Slug

Published

2023-12-15

Title

Duplicator < 1.3.0 - Unauthenticated RCE

Slug

Published

2023-12-27

Title

Duplicator < 1.5.7.1 - Settings Removal via CSRF

Slug

Published

2024-07-10

Title

Duplicator < 1.5.10 - Full Path Disclosure

Slug

Published

2020-02-19

Title

Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download

Slug

Published

2023-05-22

Title

Duplicator Pro < 4.5.11.1 - Unauthenticated Reflected XSS

Slug

Published

2023-12-04

Title

Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure

Slug

duracelltomi-google-tag-manager

Published

2022-05-19

Title

Google Tag Manager for WordPress < 1.15.1 - Reflected Cross-Site Scripting