WordPress Plugin Vulnerabilities | Page 37 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

mime-types-extended

Published

2024-06-04

Title

Mime Types Extended <= 0.11 - Author+ Stored XSS via SVG Upload

Slug

Published

2021-07-19

Title

Mimetic Books <= 0.2.13 - Authenticated Stored Cross-Site Scripting (XSS)

Slug

mimetypes-link-icons

Published

2026-03-20

Title

MimeTypes Link Icons < 3.3.0 - Authenticated (Contributor+) Server-Side Request Forgery via Crafted Links in Post Content

Slug

mimo-woocommerce-order-tracking

Published

2024-06-18

Title

MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

mimo-woocommerce-order-tracking

Published

2025-01-08

Title

MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Limited Settings Update

Slug

min-and-max-purchase-for-woocommerce

Published

2024-04-30

Title

Min and Max Purchase for WooCommerce <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

min-and-max-quantity-for-woocommerce

Published

2023-07-18

Title

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Slug

min-and-max-quantity-for-woocommerce

Published

2024-12-05

Title

Minimum and Maximum Quantity for WooCommerce < 2.1.0 - Missing Authorization

Slug

mind-doodle-sitemap

Published

2025-01-07

Title

Mind Doodle Visual Sitemaps & Tasks <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

mind3dom-ryebread-widgets

Published

2025-01-16

Title

Mind3doM RyeBread Widgets <= 1.0 - Reflected Cross-Site Scripting

Slug

mindbody-access-management

Published

2021-06-30

Title

MZ MBO Access < 2.0.9 - Unauthorised AJAX call

Slug

mindmeister-shortcode

Published

2025-01-16

Title

Mindmeister Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

mindvalley-pagemash

Published

2025-01-07

Title

MindValley Super PageMash <= 1.1 - Authenticated (Editor+) SQL Injection

Slug

Published

2025-07-23

Title

Mine CloudVod < 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via audio Parameter

Slug

Published

2014-08-01

Title

Mingle Forum <= 1.0.32.1 - Cross Site Scripting / SQL Injection

Slug

Published

2014-08-01

Title

Mingle Forum <= 1.0.31 - SQL Injection

Slug

Published

2014-08-01

Title

Mingle Forum <= 1.0.26 - Multiple Vulnerabilities

Slug

Published

2014-08-01

Title

Mingle Forum < 1.0.33.2 - Cross Site Scripting

Slug

Published

2014-08-01

Title

Mingle Forum 1.0.33.3 - fs-admin.php togroupusers Parameter XSS

Slug

Published

2014-08-01

Title

Mingle Forum 1.0.33.3 - wpf.class.php search_words Parameter XSS

Slug

Published

2014-08-01

Title

Mingle Forum 1.0.33.3 - wpf.class.php Multiple Parameter SQL Injection

Slug

Published

2014-08-01

Title

Mingle Forum 1.0.35 - Privilege Escalation CSRF

Slug

Published

2014-09-27

Title

Mingle Forum 1.0.28 - XSS & FPD

Slug

Published

2012-01-20

Title

Mingle Forum < 1.0.33 - Multiple SQL Injection

Slug

minhnhut-link-gateway

Published

2026-03-20

Title

MinhNhut Link Gateway <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes