WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ms-reviews
Published
2023-03-28
Title
MS-Reviews <= 1.5 - Subscriber+ Stored XSS
Slug
mshop-mysite
Published
2023-11-07
Title
MSHOP MY SITE < 1.1.8 - Subscriber+ Settings Update
Slug
mshop-naver-talktalk
Published
2024-11-22
Title
코드엠샵 소셜톡 < 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via add_plus_friends and add_plus_talk Shortcodes
Slug
mshop-naver-talktalk
Published
2024-12-06
Title
코드엠샵 소셜톡 < 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mshop-naver-talktalk
Published
2025-09-05
Title
코드엠샵 소셜톡 <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mshop-npay
Published
2024-11-22
Title
우커머스 네이버페이 < 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mnp_purchase Shortcode
Slug
msmc-redirect-after-comment
Published
2017-05-08
Title
MSMC – Redirect After Comment - Unauthenticated XSS & CSRF
Slug
msrp-for-woocommerce
Published
2025-04-10
Title
MSRP (RRP) Pricing for WooCommerce < 2.0.0 - Reflected Cross-Site Scripting
Slug
msstiger
Published
2025-01-16
Title
WP VTiger Synchronization <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mstoic-shortcodes
Published
2026-01-06
Title
Mstoic Shortcodes <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'start' Shortcode Attribute
Slug
mstore-api
Published
2020-03-11
Title
MStore API < 2.1.6 - Unauthenticated Arbitrary Account Creation/Edition
Slug
mstore-api
Published
2021-02-02
Title
MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple
Slug
mstore-api
Published
2021-10-05
Title
MStore API < 3.4.5 - Unauthenticated PHP File Upload
Slug
mstore-api
Published
2023-05-17
Title
MStore API < 3.9.1 - Authentication Bypass
Slug
mstore-api
Published
2023-05-22
Title
MStore API < 3.9.2 - Authentication Bypass
Slug
mstore-api
Published
2023-05-24
Title
MStore API < 3.9.3 - Authentication Bypass
Slug
mstore-api
Published
2023-06-13
Title
MStore API < 3.9.7 - Multiple CSRF
Slug
mstore-api
Published
2023-06-19
Title
MStore API < 3.9.9 - Unauthenticated Privilege Escalation
Slug
mstore-api
Published
2023-06-19
Title
MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update
Slug
mstore-api
Published
2023-06-19
Title
MStore API < 3.9.8 - Unauthenticated Blind SQLi
Slug
mstore-api
Published
2023-06-23
Title
MStore API < 3.9.8 - Unauthenticated SQL Injection
Slug
mstore-api
Published
2023-06-23
Title
MStore API < 4.0.2 - Unauthenticated SQL Injection
Slug
mstore-api
Published
2023-06-19
Title
MStore API < 4.10.8 - Unauthenticated Privilege Escalation
Slug
mstore-api
Published
2023-10-03
Title
MStore API < 4.0.7 - Subscriber+ SQLi
Slug
mstore-api
Published
2023-12-26
Title
MStore API < 4.10.2 - Cross-Site Request Forgery