WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
drm-protected-video-streaming
Published
2024-12-26
Title
drm-protected-video-streaming <= 4.2.1 - Reflected XSS
Slug
droip
Published
2024-08-26
Title
Droip < 2.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Change
Slug
droip
Published
2024-08-26
Title
Droip < 2.5.2 - Unauthenticated Arbitrary File Deletion
Slug
droip
Published
2025-07-24
Title
Droip < 2.5.2 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
droip
Published
2025-07-24
Title
Droip < 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Many Actions
Slug
droit-dark-mode
Published
2023-11-07
Title
Droit Dark Mode <= 1.1.2 - Cross-Site Request Forgery
Slug
droit-elementor-addons
Published
2024-01-08
Title
Droit Elementor Addons <= 3.1.5 - Cross-Site Request Forgery
Slug
droit-elementor-addons
Published
2024-03-07
Title
Droit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
drop-caps
Published
2025-04-24
Title
Drop Caps <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
drop-in-image-slideshow-gallery
Published
2024-11-08
Title
drop in image slideshow gallery <= 12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
drop-shadow-boxes
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
drop-shadow-boxes
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
drop-shadow-boxes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
drop-shadow-boxes
Published
2023-05-15
Title
Drop Shadow Boxes < 1.7.11 - Contributor+ Cross-Site Scripting
Slug
drop-shadow-boxes
Published
2023-11-20
Title
Drop Shadow Boxes < 1.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
drop-shadow-boxes
Published
2024-11-15
Title
Drop Shadow Boxes < 1.7.15 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
drop-uploader-for-contact-form-7-dragdrop-file-uploader-addon
Published
2025-06-24
Title
Drop Uploader for CF7 - Drag&Drop File Uploader Addon <= 2.4.1 - Unauthenticated Arbitrary File Upload
Slug
dropbox-folder-share
Published
2023-09-15
Title
Dropbox Folder Share <= 1.9.7 - Unauthenticated Server-Side Request Forgery via 'link'
Slug
dropbox-folder-share
Published
2023-09-12
Title
Dropbox Folder Share <= 1.9.7 - Unauthenticated Remote Code Execution via LFI
Slug
dropdown-and-scrollable-text
Published
2021-09-09
Title
Dropdown and scrollable Text < 2.1 - Reflected Cross-Site Scripting
Slug
dropdown-category-list
Published
2025-12-11
Title
Category Dropdown List <= 1.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
dropdown-content
Published
2025-04-24
Title
Dropdown Content <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dropdown-menu-widget
Published
2014-08-01
Title
Dropdown Menu Widget 1.9.1 - Script Insertion CSRF
Slug
dropdown-menu-widget
Published
2022-03-14
Title
Dropdown Menu Widget <= 1.9.7 - Subscriber+ Arbitrary Settings Update to Stored XSS
Slug
dropdown-multisite-selector
Published
2024-03-25
Title
Dropdown Multisite selector < 0.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode