WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
delete-duplicate-posts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
delete-duplicate-posts
Published
2023-11-13
Title
Delete Duplicate Posts < 4.9 - Missing Authorization via AJAX Actions
Slug
delete-me
Published
2023-10-23
Title
Delete Me < 3.1 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
delete-old-orders
Published
2022-03-01
Title
Delete Old Orders <= 0.2 - Reflected Cross-Site Scripting
Slug
delete-old-posts-programmatically
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
delete-old-posts-programmatically
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
delete-original-image
Published
2025-03-11
Title
Delete Original Image <= 0.4 - Cross-Site Request Forgery
Slug
delete-post-revision
Published
2025-04-01
Title
Delete Post Revision <= 1.1 - Reflected Cross-Site Scripting
Slug
delete-post-revisions-on-single-click
Published
2023-11-27
Title
Delete Post Revisions In WordPress <= 4.6 - Cross-Site Request Forgery
Slug
delete-usermetas
Published
2023-10-19
Title
Delete Usermetas < 1.2.0 - Cross-Site Request Forgery
Slug
delhivery-logistics-courier
Published
2024-01-16
Title
Delhivery Logistics Courier <= 1.0.107 - Authenticated (Subscriber+) SQL Injection
Slug
delicious-recipes
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
delicious-recipes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
delicious-recipes
Published
2024-08-26
Title
Delicious Recipes – WordPress Recipe Plugin < 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
delicious-recipes
Published
2024-09-10
Title
WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) < 1.7.0 - Improper Path Validation to Authenticated (Subscriber+) Arbitrary File Move and Read
Slug
delicious-recipes
Published
2025-07-16
Title
WP Delicious < 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
delicious-recipes
Published
2025-09-03
Title
WP Delicious < 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
delicious-recipes
Published
2025-10-31
Title
Delicious Recipes < 1.9.1 - Authenticated (Contributor+) Arbitrary File Upload
Slug
delicious-recipes
Published
2025-11-09
Title
WP Delicious < 1.9.2 - Missing Authorization
Slug
delightful-downloads
Published
2014-08-01
Title
Delightful Downloads 1.3.1.1 - meta-boxes.php dedo_meta_boxes_save Function Multiple Action Authorization Bypass
Slug
delightful-downloads
Published
2014-08-01
Title
Delightful Downloads 1.3.1.1 - includes/functions.php User-Agent HTTP Header Stored XSS
Slug
delightful-downloads
Published
2017-05-11
Title
Delightful Downloads <= 1.6.6 - Unauthenticated Path Traversal
Slug
delivery-and-pickup-scheduling-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
delivery-drivers-for-vendors
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
delivery-drivers-for-vendors
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting