WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
multi-step-form
Published
2025-09-05
Title
Multi Step Form < 1.7.26 - Authenticated (Admin+) Arbitrary File Upload
Slug
multi-video-box
Published
2025-03-21
Title
Multi Video Box <= 1.5.2 - Reflected Cross-Site Scripting via video_id and group_id Parameters
Slug
multicarousel
Published
2025-01-07
Title
Multiple Carousel <= 2.0 - Unauthenticated SQL Injection
Slug
multicons
Published
2015-08-25
Title
Multicons < 3.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
multifox-plus
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
multifox-plus
Published
2024-11-08
Title
Multifox Plus <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
multilang-contact-form
Published
2025-01-13
Title
Multilang Contact Form <= 1.5 - Reflected Cross-Site Scripting
Slug
multilang-contact-form
Published
2025-09-26
Title
Multilang Contact Form <= 1.5 - Cross-Site Request Forgery
Slug
multilanguage
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
multilevel-referral-plugin-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
multilevel-referral-plugin-for-woocommerce
Published
2024-11-28
Title
Multilevel Referral Affiliate Plugin for WooCommerce < 2.28 - Reflected XSS
Slug
multilevel-referral-plugin-for-woocommerce
Published
2025-02-28
Title
Multilevel Referral Affiliate Plugin for WooCommerce <= 2.27 - Authenticated (Subscriber+) SQL Injection
Slug
multiline-files-for-contact-form-7
Published
2024-10-15
Title
Multiline files upload for contact form 7 < 2.9 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation
Slug
multilist-subscribe-for-sendy
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
multilist-subscribe-for-sendy
Published
2022-03-01
Title
Multilist Subscribe for Sendy <= 1.6.1 - Subscriber+ Arbitrary Options Update
Slug
multilist-subscribe-for-sendy
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
multilist-subscribe-for-sendy
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
multimanager-wp
Published
2024-11-12
Title
MultiManager WP – Manage All Your WordPress Sites Easily < 1.1.0 - Authentication Bypass via User Impersonation
Slug
multimedia-carousel
Published
2025-05-16
Title
Multimedia Responsive Carousel with Image Video Audio Support <= 2.6.0 - Authenticated (Contributor+) SQL Injection
Slug
multimedial-images
Published
2022-12-12
Title
Multimedial Images <= 1.0b - Admin+ SQLi
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-17
Title
MultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment Deletion
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-17
Title
MultiParcels Shipping For WooCommerce < 1.15.4 - Reflected XSS
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-17
Title
MultiParcels Shipping For WooCommerce < 1.14.15 - Subscriber+ SQLi
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-31
Title
MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-31
Title
MultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRF