WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
menu-card
Published
2026-01-08
Title
Menu Card <= 0.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
menu-icons
Published
2024-05-15
Title
Menu Icons by ThemeIsle < 0.13.14 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Slug
menu-icons
Published
2026-02-03
Title
Menu Icons by ThemeIsle < 0.13.21 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
menu-image
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
menu-image
Published
2022-03-07
Title
Menu Image, Icons made easy < 3.0.8 - Subscriber+ Stored Cross-Site Scripting
Slug
menu-image
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
menu-image
Published
2023-12-19
Title
Menu Image, Icons made easy < 3.11 - Admin+ Stored XSS
Slug
menu-image
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
menu-in-post
Published
2025-12-30
Title
Menu In Post <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
menu-item-scheduler
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
menu-items-visibility-control
Published
2022-11-29
Title
Menu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution
Slug
menu-manager-ultra
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
menu-ordering-reservations
Published
2022-10-31
Title
Restaurant Menu < 2.3.2 - Multiple CSRF
Slug
menu-ordering-reservations
Published
2022-10-31
Title
Restaurant Menu < 2.3.1 - Unauthorised AJAX Calls
Slug
menu-ordering-reservations
Published
2023-01-16
Title
Restaurant Menu < 2.3.6 - Contributor+ Stored XSS via Shortcode
Slug
menu-ordering-reservations
Published
2023-05-09
Title
Restaurant Menu < 2.3.7 - Reflected XSS
Slug
menu-ordering-reservations
Published
2024-04-16
Title
Restaurant Menu – Food Ordering System – Table Reservation < 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
menu-ordering-reservations
Published
2024-06-14
Title
Restaurant Menu and Food Ordering < 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
menu-ordering-reservations
Published
2024-11-19
Title
Restaurant Menu – Food Ordering System – Table Reservation < 2.4.3 - Reflected Cross-Site Scripting
Slug
menu-ordering-reservations
Published
2026-10-22
Title
Restaurant Menu – Food Ordering System – Table Reservation <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
menu-shortcode
Published
2023-03-01
Title
menu shortcode <= 1.0 - Contributor+ Stored XSS via Shortcode
Slug
menu-swapper
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
menu-swapper
Published
2020-09-16
Title
Menu Swapper < 1.1.1 - Cross-Site Request Forgery
Slug
menubar
Published
2022-04-04
Title
Menubar < 5.8 - Reflected Cross-Site Scripting
Slug
menubar
Published
2023-07-04
Title
Menubar < 5.9 - Cross-Site Request Forgery