WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
membership-for-woocommerce
Published
2025-12-24
Title
Membership For WooCommerce < 3.0.4 - Unauthenticated Insecure Direct Object Reference
Slug
membership-simplified-for-oap-members-only
Published
2017-03-14
Title
Membership Simplified <= 1.58 - Unauthenticated Arbitrary File Download
Slug
membersonic-lite
Published
2016-06-28
Title
MemberSonic Lite < 1.302 - Authentication Bypass
Slug
memberspace
Published
2024-12-26
Title
MemberSpace – Membership Plugin and Paid Subscriptions < 2.1.14 - Reflected XSS
Slug
memberspace
Published
2025-03-20
Title
MemberSpace < 2.1.14 - Reflected Cross-Site Scripting
Slug
mementor-core
Published
2025-11-10
Title
Mementor Core <= 2.2.5 - Authenticated (Subscriber+) Privilege Escalation
Slug
memeone
Published
2025-01-16
Title
MemeOne <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
memorialday
Published
2025-02-17
Title
MemorialDay < 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
memphis-documents-library
Published
2016-03-22
Title
Memphis Document Library Plugin <= 3.1.5 - Arbitrary File Download
Slug
memphis-documents-library
Published
2015-09-04
Title
Memphis Documents Library < 3.0 - Multiple Issues
Slug
memsource-connector
Published
2026-01-16
Title
Phrase TMS Integration for WordPress < 4.7.6 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
Slug
mendeleyplugin
Published
2023-10-18
Title
Mendeley <= 1.3.4 - Admin+ Stored XSS
Slug
menu-card
Published
2026-01-08
Title
Menu Card <= 0.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
menu-icons
Published
2024-05-15
Title
Menu Icons by ThemeIsle < 0.13.14 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Slug
menu-icons
Published
2026-02-03
Title
Menu Icons by ThemeIsle < 0.13.21 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
menu-image
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
menu-image
Published
2022-03-07
Title
Menu Image, Icons made easy < 3.0.8 - Subscriber+ Stored Cross-Site Scripting
Slug
menu-image
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
menu-image
Published
2023-12-19
Title
Menu Image, Icons made easy < 3.11 - Admin+ Stored XSS
Slug
menu-in-post
Published
2025-12-30
Title
Menu In Post <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
menu-item-scheduler
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
menu-items-visibility-control
Published
2022-11-29
Title
Menu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution
Slug
menu-manager-ultra
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
menu-ordering-reservations
Published
2022-10-31
Title
Restaurant Menu < 2.3.2 - Multiple CSRF
Slug
menu-ordering-reservations
Published
2022-10-31
Title
Restaurant Menu < 2.3.1 - Unauthorised AJAX Calls