WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
misiek-photo-album
Published
2024-08-22
Title
Misiek Photo Album <= 1.4.3 - Stored XSS via CSRF
Slug
misiek-photo-album
Published
2024-08-22
Title
Misiek Photo Album <= 1.4.3 - Album Deletion via CSRF
Slug
mislider
Published
2025-10-23
Title
Multi Item Responsive Slider <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
missing-widgets-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
missing-widgets-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mitfahrgelegenheit
Published
2025-09-10
Title
Mitfahrgelegenheit <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter
Slug
mitm-bug-tracker
Published
2024-10-14
Title
Mitm Bug Tracker <= 1.0 - Reflected Cross-Site Scripting
Slug
miwoftp
Published
2015-03-16
Title
MiwoFTP - File & Folder Manager <= 1.0.4 - Arbitrary File Disclosure
Slug
miwoftp
Published
2015-04-14
Title
MiwoFTP - File & Folder Manager <= 1.0.5 - Multiple Vulnerabilities
Slug
mixcloud-embed
Published
2025-04-24
Title
Mixcloud Embed <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mixlr-shortcode
Published
2025-10-21
Title
Mixlr Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
mixtape
Published
2025-09-10
Title
Mixtape <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mj-contact-us
Published
2025-01-16
Title
MJ Contact us <= 5.2.3 - Reflected Cross-Site Scripting
Slug
mj-update-history
Published
2024-04-15
Title
MJ Update History <= 1.0.4 - Reflected Cross-Site Scripting
Slug
mj-update-history
Published
2024-06-03
Title
MJ Update History <= 1.0.4 - Missing Authorization
Slug
mjm-clinic
Published
2024-03-15
Title
MJM Clinic < 1.1.23 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
mjm-clinic
Published
2024-03-18
Title
MJM Clinic < 1.1.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
mklasens-photobox
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
ml-slider
Published
2014-08-01
Title
Meta Slider <= 2.5 - Cross-Site Scripting (XSS)
Slug
ml-slider
Published
2014-08-01
Title
Meta Slider 2.1.6 - Multiple Full Path Disclosure
Slug
ml-slider
Published
2020-09-17
Title
MetaSlider < 3.17.2 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
ml-slider
Published
2022-09-14
Title
Slider, Gallery, and Carousel by MetaSlider < 3.27.9 - Admin+ Stored Cross Site Scripting
Slug
ml-slider
Published
2023-03-27
Title
Responsive WordPress Slideshows 3.29.0 - Reflected XSS
Slug
ml-slider
Published
2024-04-10
Title
Meta Slider < 3.70.1 - Contributor+ Stored Cross-Site Scripting via metaslider Shortcode
Slug
ml-slider
Published
2025-02-14
Title
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider < 3.95.0 - Authenticated (Editor+) PHP Object Injection