WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dropdown-multisite-selector
Published
2025-03-28
Title
Dropdown Multisite selector < 0.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dropshipping-xox
Published
2019-06-15
Title
Dropshix < 4.0.14 - Arbitrary Product Import
Slug
dropshipping-xox
Published
2025-08-15
Title
Dropshix <= 4.0.14 - Admin+ Stored XSS
Slug
drozd-addons-for-elementor
Published
2024-11-13
Title
Drozd – Addons for Elementor <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
drp-coupon
Published
2014-08-01
Title
drp-coupon <= 2.1 - XSS in ZeroClipboard
Slug
drug-search
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
Slug
ds-adrotator
Published
2026-09-10
Title
DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload
Slug
ds-cf7-math-captcha
Published
2024-09-05
Title
Contact Form 7 Math Captcha < 3.0.1 - Reflected XSS
Slug
ds-site-message
Published
2024-05-07
Title
DS Site Message < 1.14.5 - Stored XSS via CSRF
Slug
ds-suit
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
dsdownloadlist
Published
2024-10-28
Title
DS.DownloadList <= 1.3 - Unauthenticated PHP Object Injection
Slug
dse-divi-section-enhancer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
dsgnwrks-twitter-importer
Published
2025-01-16
Title
DsgnWrks Twitter Importer <= 1.1.4 - Reflected Cross-Site Scripting
Slug
dsgvo
Published
2025-01-16
Title
EU DSGVO Helper <= 1.0.6.1 - Reflected Cross-Site Scripting
Slug
dsgvo-all-in-one-for-wp
Published
2021-05-07
Title
DSGVO All in one for WP < 4.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
dsgvo-all-in-one-for-wp
Published
2022-09-12
Title
DSGVO All in one for WP < 4.2 - Admin+ Stored Cross-Site Scripting
Slug
dsgvo-all-in-one-for-wp
Published
2024-03-13
Title
DSGVO All in one for WP < 4.4 - Cross-Site Request Forgery
Slug
dsgvo-all-in-one-for-wp
Published
2024-08-26
Title
DSGVO All in one for WP < 4.6 - Contributor+ Stored XSS
Slug
dsgvo-all-in-one-for-wp
Published
2025-02-03
Title
DSGVO All in one for WP < 4.7 - Cross-Site Request Forgery to Account Deletion
Slug
dsgvo-all-in-one-for-wp
Published
2026-07-08
Title
DSGVO All in one for WP < 5.0 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
Slug
dsgvo-all-in-one-for-wp
Published
2026-10-28
Title
DSGVO All in one for WP <= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption
Slug
dsgvo-google-web-fonts-gdpr
Published
2026-04-07
Title
DSGVO Google Web Fonts GDPR <= 1.1 - Unauthenticated Arbitrary File Upload via 'fonturl' Parameter
Slug
dsgvo-leaflet-map
Published
2026-03-23
Title
DSGVO snippet for Leaflet Map and its Extensions < 3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'unset' Attribute
Slug
dsgvo-youtube
Published
2024-04-16
Title
DSGVO Youtube < 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dsgvo-youtube
Published
2025-04-11
Title
DSGVO Youtube < 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting