WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mmx-make-me-christmas
Published
2025-04-09
Title
MMX – Make Me Christmas <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mobi2go
Published
2025-09-22
Title
Mobi2Go <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
mobigatevn
Published
2025-01-16
Title
Mobigate <= 1.0.3 - Reflected Cross-Site Scripting
Slug
mobile-address-bar-changer
Published
2023-07-25
Title
Mobile Address Bar Changer <= 3.0 - Settings Update via CSRF
Slug
mobile-app
Published
2025-04-01
Title
Mobile App Canvas < 3.8.3 - Missing Authorization
Slug
mobile-app-builder-by-wappress
Published
2017-03-07
Title
WordPress Mobile app Builder 1.05 - Unauthenticated File Upload
Slug
mobile-app-editor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
mobile-app-editor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mobile-app-editor
Published
2026-03-12
Title
Mobile App Editor – WordPress to Android App Builder <= 1.3.1 - Authenticated (Editor+) Arbitrary File Upload
Slug
mobile-app-for-woocommerce
Published
2025-04-14
Title
ShopApper < 0.4.63 - Unauthenticated Stored Cross-Site Scripting
Slug
mobile-app-for-woocommerce
Published
2026-08-25
Title
ShopApper <= 0.4.69 - Subscriber+ Customer Data Disclosure via IDOR
Slug
mobile-app-for-woocommerce
Published
2026-08-25
Title
ShopApper <= 0.4.69 - Subscriber+ Arbitrary Product Stock Update
Slug
mobile-app-for-woocommerce
Published
2026-08-25
Title
Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce < 0.4.63 - Missing Authorization
Slug
mobile-banner
Published
2023-11-12
Title
Mobile Banner < 1.6 - CSRF
Slug
mobile-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
mobile-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mobile-booster
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
mobile-booster
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mobile-bottom-menu-for-wp
Published
2025-03-31
Title
WP Mobile Bottom Menu < 1.4.1 - Missing Authorization
Slug
mobile-browser-color-select
Published
2022-06-01
Title
Mobile Browser Color Select <= 1.0.1 - Stored Cross-Site Scripting via CSRF
Slug
mobile-builder
Published
2025-12-26
Title
Mobile builder <= 1.4.2 - Authentication Bypass
Slug
mobile-call-now-map-buttons
Published
2023-07-04
Title
Mobile Call Now & Map Buttons <= 1.5.0 - Admin+ Stored XSS
Slug
mobile-contact-bar
Published
2024-11-11
Title
Mobile Contact Bar < 3.0.5 - Admin+ Stored XSS
Slug
mobile-contact-line
Published
2025-09-03
Title
Mobile Contact Line < 2.4.1 - Missing Authorization
Slug
mobile-dj-manager
Published
2025-01-15
Title
MDJM Event Management < 1.7.6 - Reflected Cross-Site Scripting