WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
m-chart
Published
2023-01-19
Title
M Chart < 1.10 - Contributor+ Stored XSS
Slug
m-vslider
Published
2021-07-24
Title
M-vSlider <= 2.1.3 - Authenticated (admin+) SQL Injection
Slug
m-wp-popup
Published
2022-01-17
Title
Popup | Custom Popup Builder < 1.3.1 - Unauthenticated Denial of Service
Slug
m-wp-popup
Published
2022-06-14
Title
Custom Popup Builder <= 1.3.1 - Contributor+ Stored Cross-Site Scripting
Slug
m1downloadlist
Published
2025-03-03
Title
m1.DownloadList < 0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
m1downloadlist
Published
2025-04-04
Title
m1.DownloadList <= 0.24 - Contributor+ Sensitive Information Disclosure
Slug
m2wp
Published
2025-09-22
Title
Magento 2 WordPress Integration <= 1.4.2.1 - Admin+ Stored XSS
Slug
maan-elementor-addons
Published
2024-10-14
Title
Maan Addons For Elementor <= 1.0.1 - Authenticated (Contributor+) Local File Inclusion
Slug
maanstore-api
Published
2024-10-25
Title
MaanStore API <= 1.0.1 - Authentication Bypass
Slug
mabel-shoppable-images-lite
Published
2023-02-13
Title
Shoppable Images Lite < 1.2.4 - Arbitrary Post Deletion via CSRF
Slug
mac-dock-gallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
mac-dock-gallery
Published
2014-08-01
Title
Mac Photo Gallery - Two Security Bypass Security Issues
Slug
mac-dock-gallery
Published
2014-08-01
Title
Mac Photo Gallery - Multiple Script Insertion Vulnerabilities
Slug
mac-dock-gallery
Published
2014-08-01
Title
Mac Photo Gallery - upload-file.php File Upload
Slug
machform-shortcode
Published
2025-01-24
Title
MachForm Shortcode < 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
machic-core
Published
2023-12-07
Title
Machic Core <= 1.2.6 - Reflected Cross-Site Scripting
Slug
macme
Published
2025-01-16
Title
MACME <= 1.2 - Reflected Cross-Site Scripting
Slug
macro-admin-email-data-optin-calculator
Published
2025-04-15
Title
Macro Calculator with Admin Email Optin & Data <= 1.0 - Unauthenticated Information Disclosure
Slug
mad-mimi
Published
2025-04-25
Title
Mad Mimi for WordPress <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
madara-core
Published
2025-07-16
Title
Madara - Core < 2.2.4 - Unauthenticated Arbitrary File Deletion
Slug
magayo-lottery-results
Published
2025-02-17
Title
magayo Lottery Results <= 2.0.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
magazine-blocks
Published
2024-05-14
Title
Magazine Blocks < 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
magazine-blocks
Published
2024-10-01
Title
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid < 1.3.15 - Reflected Cross-Site Scripting
Slug
magazine-blocks
Published
2024-10-24
Title
Magazine Blocks < 1.3.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
magazine-blocks
Published
2024-12-30
Title
Magazine Blocks < 1.3.21 - Authenticated (Contributor+) Stored Cross-Site Scripting