WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dsidxpress
Published
2014-04-25
Title
Dsidxpress < 2.1.1 - XSS
Slug
dsp_dating
Published
2022-07-18
Title
WPDating < 7.4.0 - Multiple Unauthenticated SQLi
Slug
dsubscribers
Published
2017-07-06
Title
DSubscribers <= 1.2 - Authenticated SQL Injection
Slug
dt-directory-lite-addon
Published
2026-10-31
Title
DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update
Slug
dt-lms-lite
Published
2026-09-11
Title
DT LMS < 1.2 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via Multiple AJAX Actions
Slug
dt-lms-lite
Published
2026-10-31
Title
DT LMS <= 1.2 - Unauthenticated Arbitrary Course Completion Revocation
Slug
dt-reservation-plugin
Published
2025-10-21
Title
Reservation < 1.7 - Reflected Cross-Site Scripting
Slug
dt-reservation-plugin
Published
2026-01-13
Title
Reservation <= 1.7 - Missing Authorization to Unauthenticated Settings Update
Slug
dt-the7-core
Published
2025-12-05
Title
The7 Elements < 2.7.12 - Authenticated (Contributor+) Local File Inclusion
Slug
dtabs
Published
2022-03-01
Title
dTabs <= 1.4 - Reflected Cross-Site Scripting
Slug
dtc-documents
Published
2024-12-12
Title
DTC Documents <= 1.1.05 - Cross-Site Request Forgery
Slug
dtracker
Published
2017-03-09
Title
DTracker 1.5 - Multiple Unauthenticated Blind SQL Injections
Slug
dtracker
Published
2017-03-13
Title
Dtracker <= 1.5 - Unauthorised Contract Creation
Slug
dts-simple-share
Published
2024-07-09
Title
Wordpress Simple Share Plugin <=0.5.3 - Admin+ XSS
Slug
duitku-social-payment-gateway
Published
2024-02-26
Title
Duitku Payment Gateway < 2.11.7 - Missing Authorization via check_duitku_response
Slug
duitku-social-payment-gateway
Published
2026-08-18
Title
Duitku Payment Gateway <= 2.11.14 - Unauthenticated Information Exposure
Slug
dukapress
Published
2014-11-24
Title
DukaPress <= 2.5.3 - Unauthenticated Path Traversal
Slug
dukapress
Published
2015-08-22
Title
DukaPress <= 2.5.9 - Unauthenticated Blind SQL Injection
Slug
dukapress
Published
2026-02-18
Title
DukaPress <= 3.2.4 - Reflected XSS
Slug
duofaq-responsive-flat-simple-faq
Published
2021-12-14
Title
duoFAQ <= 1.4.8 - Reflected Cross-Site Scripting
Slug
duogeek-blocks
Published
2024-11-08
Title
DuoGeek Blocks 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
duoshuo
Published
2025-08-07
Title
多说社会化评论框 <= 1.2 - Reflected Cross-Site Scripting
Slug
duoshuo
Published
2025-08-23
Title
多说社会化评论框 <= 1.2 - Cross-Site Request Forgery to Settings Update
Slug
duoshuo
Published
2026-07-07
Title
多说社会化评论框 <= 1.2 - Unauthenticated Privilege Escalation via api.php 'option'/'value' Parameters
Slug
dupeoff
Published
2023-02-13
Title
DupeOff <= 1.6 - Admin+ Stored XSS