WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mediaview
Published
2025-03-26
Title
MediaView < 1.1.3 - Reflected Cross-Site Scripting via id Parameter
Slug
mediaview
Published
2025-04-02
Title
MediaView < 1.1.3 - Reflected Cross-Site Scripting
Slug
mediavine-control-panel
Published
2024-08-09
Title
Mediavine Control Panel < 2.10.5 - Contributor+ Stored XSS
Slug
mediavine-control-panel
Published
2025-04-16
Title
Mediavine Control Panel < 2.10.7 - Unauthenticated Information Exposure
Slug
mediavine-control-panel
Published
2026-07-22
Title
Mediavine Control Panel < 2.10.11 - Missing Authorization
Slug
mediavine-create
Published
2024-03-19
Title
create by mediavine < 1.9.5 - Unauthenticated SQLi
Slug
mediavine-create
Published
2024-06-26
Title
Create by Mediavine < 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode
Slug
mediavine-create
Published
2024-07-04
Title
Create by Mediavine < 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mediavine-create
Published
2024-08-12
Title
Create by Mediavine < 1.9.9 - Unauthenticated Sensitive Information Exposure
Slug
mediavine-create
Published
2026-07-22
Title
Create < 2.5.4 - Authenticated (Contributor+) SQL Injection
Slug
mediavine-create
Published
2026-07-22
Title
Create < 2.6.1 - Unauthenticated Sensitive Information Exposure
Slug
mediavine-create
Published
2026-08-03
Title
Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication
Slug
mediavine-create
Published
2026-08-03
Title
Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication
Slug
mediavine-create
Published
2026-09-18
Title
Create < 2.5.4 - Authenticated (Author+) SQL Injection via 'order_by' Parameter
Slug
mediavine-create
Published
2026-09-18
Title
Create < 2.5.4 - Authenticated (Author+) SQL Injection via 'order' Parameter
Slug
medibazar-core
Published
2023-12-07
Title
Multiple Plugins by KlbTheme - Reflected Cross-Site Scripting
Slug
medical-addon-for-elementor
Published
2024-09-24
Title
Medical Addon for Elementor <= 1.6.4 - Contributor+ Stored XSS
Slug
medical-addon-for-elementor
Published
2025-02-03
Title
Medical Addon for Elementor < 1.6.3 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
Slug
medical-addon-for-elementor
Published
2025-08-01
Title
Medical Addon for Elementor < 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter Widget
Slug
medical-prescription-attachment-plugin-for-woocommerce
Published
2025-07-11
Title
Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Unauthenticated Arbitrary File Upload
Slug
medilazar-core
Published
2026-02-28
Title
Medilazar Core < 1.4.7 - Authenticated (Contributor+) Local File Inclusion
Slug
medilink-core
Published
2026-02-16
Title
Medilink-Core < 2.0.7 - Authenticated (Contributor+) Local File Inclusion
Slug
medinik-core
Published
2026-01-28
Title
Medinik Core <= 1.3.6 - Unauthenticated SQL Injection
Slug
medma-matix
Published
2024-11-11
Title
Matix Popup Builder <= 1.0.0 - Unauthenticated Arbitrary Options Update
Slug
meenews
Published
2014-08-01
Title
meenews 5.1 - Cross-Site Scripting Vulnerabilities