WordPress Plugin Vulnerabilities | Page 45 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2015-02-19

Title

Duplicator 0.5.8 - Privilege Escalation

Slug

Published

2015-04-10

Title

Duplicator < 0.5.16 - SQL Injection & CSRF

Slug

Published

2015-08-15

Title

Duplicator < 0.5.28 - Authenticated Cross-Site Scripting (XSS)

Slug

Published

2016-02-10

Title

Duplicator <= 1.1.3 - Cross-Site Request Forgery (CSRF)

Slug

Published

2017-11-07

Title

Duplicator <= 1.2.28 – Unauthenticated Stored Cross-Site Scripting (XSS)

Slug

Published

2018-03-15

Title

Duplicator <= 1.2.32 - Cross-Site Scripting (XSS)

Slug

Published

2018-09-05

Title

Duplicator < 1.2.42 - Unauthenticated Arbitrary Code Execution

Slug

Published

2020-02-19

Title

Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download

Slug

Published

2022-08-01

Title

Duplicator < 1.4.7 - Unauthenticated Backup Download

Slug

Published

2022-08-01

Title

Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure

Slug

Published

2023-12-04

Title

Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure

Slug

Published

2023-12-15

Title

Duplicator < 1.3.0 - Unauthenticated RCE

Slug

Published

2023-12-27

Title

Duplicator < 1.5.7.1 - Settings Removal via CSRF

Slug

Published

2024-07-10

Title

Duplicator < 1.5.10 - Full Path Disclosure

Slug

Published

2026-10-20

Title

Duplicator <= 1.5.17; Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection

Slug

Published

2026-10-23

Title

Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade

Slug

Published

2020-02-19

Title

Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download

Slug

Published

2023-05-22

Title

Duplicator Pro < 4.5.11.1 - Unauthenticated Reflected XSS

Slug

Published

2023-12-04

Title

Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure

Slug

Published

2026-10-20

Title

Duplicator <= 1.5.17; Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection

Slug

duracelltomi-google-tag-manager

Published

2022-05-19

Title

Google Tag Manager for WordPress < 1.15.1 - Reflected Cross-Site Scripting

Slug

duracelltomi-google-tag-manager

Published

2022-05-31

Title

GTM4WP < 1.15.2 - Admin+ Stored Cross-Site Scripting

Slug

duracelltomi-google-tag-manager

Published

2026-07-28

Title

GTM4WP < 1.22.4 - Unauthenticated Stored XSS via WooCommerce Billing Fields

Slug

dvk-social-sharing

Published

2024-10-11

Title

Social Sharing (by Danny) < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Slug

dvs-custom-notification

Published

2014-08-01

Title

DVS Custom Notification - Cross-Site Request Forgery