WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
multilang-contact-form
Published
2025-01-13
Title
Multilang Contact Form <= 1.5 - Reflected Cross-Site Scripting
Slug
multilang-contact-form
Published
2025-09-26
Title
Multilang Contact Form < 1.6 - Cross-Site Request Forgery
Slug
multilanguage
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
multilanguage
Published
2026-01-15
Title
Multilanguage by BestWebSoft <= 1.5.2 - Missing Authorization
Slug
multilevel-referral-plugin-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
multilevel-referral-plugin-for-woocommerce
Published
2024-11-28
Title
Multilevel Referral Affiliate Plugin for WooCommerce < 2.28 - Reflected XSS
Slug
multilevel-referral-plugin-for-woocommerce
Published
2025-02-28
Title
Multilevel Referral Affiliate Plugin for WooCommerce < 2.28.1 - Authenticated (Subscriber+) SQL Injection
Slug
multiline-files-for-contact-form-7
Published
2024-10-15
Title
Multiline files upload for contact form 7 < 2.9 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation
Slug
multilist-subscribe-for-sendy
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
multilist-subscribe-for-sendy
Published
2022-03-01
Title
Multilist Subscribe for Sendy <= 1.6.1 - Subscriber+ Arbitrary Options Update
Slug
multilist-subscribe-for-sendy
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
multilist-subscribe-for-sendy
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
multimanager-wp
Published
2024-11-12
Title
MultiManager WP – Manage All Your WordPress Sites Easily < 1.1.0 - Authentication Bypass via User Impersonation
Slug
multimedia-carousel
Published
2025-05-16
Title
Multimedia Responsive Carousel with Image Video Audio Support < 2.6.1 - Authenticated (Contributor+) SQL Injection
Slug
multimedial-images
Published
2022-12-12
Title
Multimedial Images <= 1.0b - Admin+ SQLi
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-17
Title
MultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment Deletion
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-17
Title
MultiParcels Shipping For WooCommerce < 1.15.4 - Reflected XSS
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-17
Title
MultiParcels Shipping For WooCommerce < 1.14.15 - Subscriber+ SQLi
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-31
Title
MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-31
Title
MultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRF
Slug
multiparcels-shipping-for-woocommerce
Published
2024-04-11
Title
MultiParcels Shipping For WooCommerce < 1.16.9 - Cross-Site Request Forgery
Slug
multiparcels-shipping-for-woocommerce
Published
2025-12-05
Title
MultiParcels Shipping For WooCommerce < 1.30.13 - Missing Authorization
Slug
multiparcels-shipping-for-woocommerce
Published
2026-08-11
Title
MultiParcels Shipping For WooCommerce < 1.30.37 - Reflected Cross-Site Scripting
Slug
multiplayer-plugin
Published
2021-08-13
Title
Multiplayer Games <= 3.7 - Reflected Cross-Site Scripting
Slug
multiple-admin-emails
Published
2024-12-12
Title
Multiple Admin Emails <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting