WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
move-addons
Published
2024-05-20
Title
Move Addons for Elementor < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
move-addons
Published
2024-09-25
Title
Move Addons for Elementor < 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
move-addons
Published
2024-09-30
Title
Move Addons for Elementor < 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
move-addons
Published
2024-10-28
Title
Move Addons for Elementor < 1.3.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Slug
move-addons
Published
2024-12-30
Title
Move Addons for Elementor < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
moveto
Published
2024-02-12
Title
MoveTo <= 6.2 - Unauthenticated Arbitrary File Upload
Slug
moveto
Published
2024-02-12
Title
MoveTo <= 6.2 - Missing Authorization to Unauthenticated Options Update
Slug
moveto
Published
2024-02-12
Title
MoveTo <= 6.2 - Unauthenticated SQL Injection
Slug
moveto
Published
2024-02-12
Title
MoveTo <= 6.2 - Unauthenticated Directory Traversal to Arbitrary File Deletion
Slug
movie-booking
Published
2026-01-21
Title
Movie Booking < 1.1.6 - Unauthenticated Arbitrary File Deletion
Slug
movie-database
Published
2024-10-15
Title
Movie Database <= 1.0.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
movies
Published
2014-04-25
Title
Movies <= 0.6 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
movies-importer
Published
2025-12-30
Title
Movies Bulk Importer <= 1.0 - Cross-Site Request Forgery
Slug
moving-media-library
Published
2025-03-05
Title
Moving Media Library < 1.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Deletion
Slug
moving-users
Published
2025-01-16
Title
Moving Users < 1.10 - Unauthenticated Sensitive Information Exposure
Slug
movylo-widget
Published
2025-04-14
Title
Movylo Marketing Automation <= 2.0.7 - Reflected Cross-Site Scripting
Slug
mp-customize-login-page
Published
2026-06-23
Title
MP Customize Login Page <= 1.0 - Cross-Site Request Forgery to Settings Update
Slug
mp-restaurant-menu
Published
2021-09-28
Title
Restaurant Menu by MotoPress < 2.4.2 - Admin+ Stored Cross Site Scripting
Slug
mp-restaurant-menu
Published
2025-03-27
Title
Restaurant Menu by MotoPress < 2.4.5 - Authenticated (Contributor+) Local File Inclusion
Slug
mp-restaurant-menu
Published
2025-07-16
Title
Restaurant Menu by MotoPress < 2.4.7 - Cross-Site Request Forgery
Slug
mp-restaurant-menu
Published
2025-11-09
Title
Restaurant Menu by MotoPress < 2.4.8 - Authenticated (Subscriber+) Information Exposure
Slug
mp-restaurant-menu
Published
2026-06-26
Title
Restaurant Menu and Food Ordering < 2.4.12 - Missing Authorization
Slug
mp-restaurant-menu
Published
2026-06-26
Title
Restaurant Menu and Food Ordering < 2.4.11 - Authenticated (Contributor+) SQL Injection
Slug
mp-restaurant-menu
Published
2026-08-18
Title
Restaurant Menu and Food Ordering < 2.4.12 - Unauthenticated Local File Inclusion
Slug
mp-restaurant-menu
Published
2026-09-02
Title
Restaurant Menu and Food Ordering < 2.4.12 - Unauthenticated Payment Bypass via Forged PayPal IPN