WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
meeting-scheduler-by-vcita
Published
2025-07-30
Title
Online Booking & Scheduling Calendar for WordPress by vcita < 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meeting-scheduler-by-vcita
Published
2025-08-14
Title
Online Booking & Scheduling Calendar for WordPress by vcita < 4.5.5 - Authenticated (Author+) Arbitrary File Upload
Slug
meeting-scheduler-by-vcita
Published
2025-11-12
Title
Online Booking & Scheduling Calendar for WordPress by vcita < 4.6.0 - Cross-Site Request Forgery
Slug
meeting-scheduler-by-vcita
Published
2025-11-12
Title
Online Booking & Scheduling Calendar for WordPress by vcita < 4.6.0 - Missing Authorization
Slug
meetinghub
Published
2025-10-16
Title
MeetingHub < 1.23.10 - Missing Authorization
Slug
meetinghub
Published
2025-10-11
Title
MeetingHub < 1.23.10 - Authenticated (Subscriber+) Information Exposure
Slug
meetup
Published
2024-10-25
Title
Meetup <= 0.1 - Authentication Bypass
Slug
mega-addons-for-visual-composer
Published
2022-09-02
Title
Mega Addons For WPBakery Page Builder <= 4.3.0 - Settings Update via CSRF
Slug
mega-addons-for-visual-composer
Published
2022-12-14
Title
Mega Addons For WPBakery Page Builder <= 4.3.0 - Subscriber+ Settings Update
Slug
mega-addons-for-visual-composer
Published
2023-04-17
Title
Mega Addons For WPBakery Page Builder < 4.3.0 - Contributor+ Stored XSS
Slug
mega-elements-addons-for-elementor
Published
2024-04-16
Title
Mega Elements < 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mega-elements-addons-for-elementor
Published
2024-05-14
Title
Mega Elements < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
Slug
mega-elements-addons-for-elementor
Published
2024-07-01
Title
Mega Elements < 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mega-elements-addons-for-elementor
Published
2024-09-27
Title
Mega Elements < 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mega-elements-addons-for-elementor
Published
2024-10-21
Title
Mega Elements < 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mega-elements-addons-for-elementor
Published
2025-09-25
Title
Mega Elements – Addons for Elementor < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget
Slug
mega-forms
Published
2022-09-08
Title
Contact Form By Mega Forms < 1.2.5 - Subscriber+ Stored Cross-Site Scripting
Slug
mega-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mega-forms
Published
2025-09-03
Title
Contact Form By Mega Forms < 1.6.2 - Missing Authorization
Slug
mega_main_menu
Published
2023-03-29
Title
Mega Main Menu <= 2.2.2 - Admin+ Stored XSS
Slug
megamenu
Published
2017-10-17
Title
Max Mega Menu < 2.4 - Authenticated XSS
Slug
megamenu
Published
2024-03-26
Title
Max Mega Menu < 3.3.1 - Missing Authorization
Slug
meintopf
Published
2025-02-26
Title
Meintopf <= 0.2.1 - Reflected XSS
Slug
meinturnierplande-widget-viewer
Published
2025-01-16
Title
MeinTurnierplan.de Widget Viewer <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mejorcluster
Published
2024-10-14
Title
El mejor Cluster < 1.1.16 - Contributor+ Stored XSS