WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ml-slider
Published
2014-08-01
Title
Meta Slider <= 2.5 - Cross-Site Scripting (XSS)
Slug
ml-slider
Published
2014-08-01
Title
Meta Slider 2.1.6 - Multiple Full Path Disclosure
Slug
ml-slider
Published
2020-09-17
Title
MetaSlider < 3.17.2 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
ml-slider
Published
2022-09-14
Title
Slider, Gallery, and Carousel by MetaSlider < 3.27.9 - Admin+ Stored Cross Site Scripting
Slug
ml-slider
Published
2023-03-27
Title
Responsive WordPress Slideshows 3.29.0 - Reflected XSS
Slug
ml-slider
Published
2024-04-10
Title
Meta Slider < 3.70.1 - Contributor+ Stored Cross-Site Scripting via metaslider Shortcode
Slug
ml-slider
Published
2025-02-14
Title
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider < 3.95.0 - Authenticated (Editor+) PHP Object Injection
Slug
ml-slider
Published
2025-03-02
Title
Slider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSS
Slug
ml-slider
Published
2025-03-02
Title
Slider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSS
Slug
ml-slider
Published
2025-06-13
Title
Slider, Gallery, and Carousel by MetaSlider < 3.99.0 - Contributor+ Stored XSS via aria-label Parameter
Slug
ml-slider
Published
2026-04-20
Title
Slider, Gallery, and Carousel by MetaSlider < 3.107.0 - Editor+ PHP Object Injection
Slug
ml-slider
Published
2026-04-20
Title
Slider, Gallery, and Carousel by MetaSlider < 3.107.0 - Editor+ Remote Code Execution
Slug
ml-slider
Published
2026-08-05
Title
Slider, Gallery, and Carousel by MetaSlider < 3.111.1 - Author+ Stored XSS via 'delay' Post Meta Setting
Slug
mlanguage
Published
2025-04-17
Title
mLanguage <= 1.6.1 - Cross-Site Request Forgery
Slug
mlr-audio
Published
2024-10-31
Title
ML Responsive Audio player with playlist Shortcode <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mls-on-the-fly
Published
2026-10-13
Title
MLS On The Fly <= 1.8.1.5 - Authenticated (Subscriber+) SQL Injection
Slug
mlsimport
Published
2026-07-29
Title
MLS Import < 7.0.4 - Subscriber+ Sensitive Information Disclosure via mlsimport_logger_per_item
Slug
mm-breaking-news
Published
2024-08-22
Title
MM-Breaking News <= 0.7.9 - Reflected XSS
Slug
mm-breaking-news
Published
2024-08-22
Title
MM-Breaking News <= 0.7.9 - Stored XSS via CSRF
Slug
mm-duplicate
Published
2014-08-01
Title
MM Duplicate <= 1.2 - SQL Injection
Slug
mm-email2image
Published
2024-04-05
Title
MM-email2image <= 0.2.5 - Stored XSS via CSRF
Slug
mm-email2image
Published
2024-04-05
Title
MM-email2image <= 0.2.5 - Contributor+ Stored XSS
Slug
mm-forms
Published
2012-06-07
Title
MM Forms & MM Forms Community 2.2.6 - Unauthenticated Arbitrary File Upload
Slug
mm-forms-community
Published
2014-08-01
Title
MM Forms Community <= 1.2.3 - SQL Injection
Slug
mm-forms-community
Published
2012-06-07
Title
MM Forms & MM Forms Community 2.2.6 - Unauthenticated Arbitrary File Upload