WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dyslexiefont
Published
2023-05-11
Title
Dyslexiefont Free <= 1.0.0 - CSRF
Slug
dzs-ajaxer-lite-dynamic-page-load
Published
2025-01-16
Title
DZS Ajaxer Lite – Ajaxify Your WordPress Site and Comment <= 1.04 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
dzs-enable-debug
Published
2025-01-07
Title
Admin debug wordpress – enable debug <= 1.0.13 - Cross-Site Request Forgery
Slug
dzs-restaurantmenu
Published
2025-07-17
Title
FoodMenu <= 1.20 - Reflected Cross-Site Scripting
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - ajax.php source Parameter Reflected XSS
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - upload.php File Upload Remote Code Execution
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery 3.1.3 - Remote File Disclosure
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - preview_allchars.swf logoLink Parameter Reflected XSS
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - deploy/preview_skin_overlay.swf logoLink Parameter Reflected XSS
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - deploy/preview.swf logoLink Parameter Reflected XSS
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - preview_skin_rouge.swf logoLink Parameter Reflected XSS
Slug
dzs-videogallery
Published
2014-09-27
Title
DZS Video Gallery Plugin - RCE & More
Slug
dzs-videogallery
Published
2016-03-11
Title
DZS Videogallery Plugin <= 8.60 - Multiple Vulnerabilities
Slug
dzs-videogallery
Published
2025-05-22
Title
DZS Video Gallery < 12.40 - Reflected Cross-Site Scripting
Slug
dzs-videogallery
Published
2025-05-21
Title
DZS Video Gallery < 12.40 - Authenticated (Subscriber+) PHP Object Injection
Slug
dzs-videogallery
Published
2025-05-20
Title
DZS Video Gallery < 12.40 - Unauthenticated PHP Object Injection
Slug
dzs-videogallery
Published
2026-01-12
Title
DZS Video Gallery < 12.40 - Authenticated (Subscriber+) SQL Injection
Slug
dzs-wootable
Published
2025-07-04
Title
WooCommerce Shop Page Builder <= 2.27.7 - Missing Authorization
Slug
dzs-wootable
Published
2025-07-17
Title
WooCommerce Shop Page Builder <= 2.27.7 - Reflected Cross-Site Scripting
Slug
dzs-zoomsounds
Published
2015-06-01
Title
ZoomSounds < 3.0 - Remote File Upload
Slug
dzs-zoomsounds
Published
2021-06-24
Title
ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload
Slug
dzs-zoomsounds
Published
2021-08-31
Title
DZS Zoomsounds < 6.50 - Unauthenticated Arbitrary File Download
Slug
dzs-zoomsounds
Published
2025-03-04
Title
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection
Slug
dzs-zoomsounds
Published
2025-04-04
Title
ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
dzs-zoomsounds
Published
2025-04-07
Title
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download