WordPress Plugin Vulnerabilities | Page 57 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

multi-feed-reader

Published

2017-06-06

Title

Multi Feed Reader <= 2.2.3 - SQL Injection

Slug

multi-feed-reader

Published

2024-11-22

Title

Multi Feed Reader <= 2.2.4 - Cross-Site Request Forgery

Slug

multi-functional-flexi-lightbox

Published

2026-03-20

Title

Multi Functional Flexi Lightbox <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via 'message' Parameter

Slug

Published

2024-12-06

Title

Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection

Slug

Published

2016-04-08

Title

WP Multiple Meta Box 1.0 - Authenticated Blind SQL Injection

Slug

multi-page-toolkit

Published

2022-05-30

Title

Multi-page Toolkit <= 2.6 - Arbitrary Settings Update to Stored XSS via CSRF

Slug

multi-plugin-installer

Published

2015-08-24

Title

Multi Plugin Installer < 1.2.0 - Unauthenticated File Traversal

Slug

multi-post-carousel

Published

2026-03-20

Title

Multi Post Carousel by Category <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides' Shortcode Attribute

Slug

multi-purpose-mail-form

Published

2024-10-25

Title

Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload

Slug

multi-purpose-mail-form

Published

2024-10-30

Title

Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload

Slug

Published

2023-02-02

Title

Multi Rating < 5.0.6 - Ratings Deletion via CSRF

Slug

Published

2023-02-14

Title

Multi Rating < 5.0.6 - Reflected XSS

Slug

Published

2023-05-04

Title

Multi Rating <= 5.0.6 - Admin+ Stored XSS

Slug

Published

2023-05-04

Title

Multi Rating <= 5.0.6 - Unauthenticated Ratings Update

Slug

multi-scheduler

Published

2020-05-29

Title

Multi Scheduler <= 1.0.0 - Arbitrary Record Deletion via CSRF

Slug

multi-step-form

Published

2018-10-31

Title

Multi Step Form <= 1.2.5 - Cross-Site Scripting (XSS)

Slug

multi-step-form

Published

2018-07-20

Title

Multi Step Form <= 1.2.5 - Multiple Unauthenticated Reflected XSS

Slug

multi-step-form

Published

2022-12-17

Title

Multi Step Form < 1.7.8 - Admin+ Stored XSS

Slug

multi-step-form

Published

2023-11-13

Title

Multi Step Form < 1.7.13 - Form Update/Deletion via CSRF

Slug

multi-step-form

Published

2023-12-19

Title

Multi Step Form < 1.7.17 - Admin+ Stored XSS

Slug

multi-step-form

Published

2024-02-12

Title

Multi Step Form < 1.7.19 - Form Deletion via CSRF

Slug

multi-step-form

Published

2024-10-24

Title

Multi Step Form < 1.7.22 - Missing Authorization via fw_delete_files

Slug

multi-step-form

Published

2025-01-15

Title

Multi Step Form < 1.7.24 - Missing Authorization to Unauthenticated Limited File Upload

Slug

multi-step-form

Published

2025-09-05

Title

Multi Step Form < 1.7.26 - Authenticated (Admin+) Arbitrary File Upload

Slug

multi-video-box

Published

2025-03-21

Title

Multi Video Box <= 1.5.2 - Reflected Cross-Site Scripting via video_id and group_id Parameters