WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
meks-easy-ads-widget
Published
2024-07-06
Title
Meks Easy Ads Widget < 2.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
meks-easy-instagram-widget
Published
2021-11-10
Title
Meks Easy Photo Feed Widget < 1.2.4 - Subscriber+ Settings Update to Stored XSS
Slug
meks-easy-maps
Published
2025-10-02
Title
Meks Easy Maps <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meks-easy-social-share
Published
2022-09-26
Title
Meks Easy Social Share < 1.2.8 - Admin+ Stored Cross-Site Scripting
Slug
meks-flexible-shortcodes
Published
2023-01-17
Title
Meks Flexible Shortcodes < 1.3.5 - Contributor+ Stored XSS
Slug
meks-flexible-shortcodes
Published
2025-05-07
Title
Meks Flexible Shortcodes < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meks-flexible-shortcodes
Published
2025-06-12
Title
Meks Flexible Shortcodes < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meks-quick-plugin-disabler
Published
2025-12-15
Title
Meks Quick Plugin Disabler <= 1.0 - Cross-Site Request Forgery
Slug
meks-smart-author-widget
Published
2024-07-10
Title
Meks Smart Author Widget < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meks-smart-social-widget
Published
2024-01-26
Title
Meks Smart Social Widget < 1.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
meks-smart-social-widget
Published
2024-04-26
Title
Meks Smart Social Widget <= 1.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
meks-themeforest-smart-widget
Published
2024-04-26
Title
Meks ThemeForest Smart Widget <= 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
meks-video-importer
Published
2024-07-11
Title
Meks Video Importer <= 1.0.11 - Missing Authorization
Slug
meks-video-importer
Published
2024-07-17
Title
Meks Video Importer < 1.0.13 - Missing Authorization to Authenticated (Subscriber+) API Keys Modification
Slug
melapress-login-security
Published
2024-06-03
Title
MelaPress Login Security < 1.3.1 - Authenticated (Admin+) Remote File Inclusion
Slug
melapress-login-security
Published
2025-04-07
Title
MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion
Slug
melapress-login-security
Published
2025-04-16
Title
MelaPress Login Security < 2.1.1 - Authenticated (Administrator+) PHP Object Injection
Slug
melapress-login-security
Published
2025-07-25
Title
MelaPress Login Security 2.1.0 - 2.1.1 - Privilege Escalation via Authentication Bypass
Slug
melapress-login-security-premium
Published
2025-04-07
Title
MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion
Slug
melascrivi
Published
2025-01-16
Title
melascrivi-plugin <= 1.4 - Reflected Cross-Site Scripting
Slug
melhor-envio-cotacao
Published
2025-04-07
Title
Melhor Envio < 2.15.12 - Unauthenticated Sensitive Information Exposure via Hardcoded Hash
Slug
melipayamak
Published
2025-06-05
Title
Melipayamak <= 2.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
member-access
Published
2025-01-06
Title
Member Access <= 1.1.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
member-approval
Published
2014-08-01
Title
Member Approval 131109 - wp-admin/options-general.php Option Manipulation CSRF
Slug
member-database
Published
2023-04-17
Title
Membership Database <= 1.0 - Reflected XSS