WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
multiple-domain
Published
2020-01-25
Title
Multiple Domain < 1.0.3 - XSS in Canonical/Alternate Tags
Slug
multiple-image-uploads-with-preview-for-wpforms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
multiple-location-google-map
Published
2025-04-09
Title
Multiple Location Google Map <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
multiple-pages-generator-by-porthas
Published
2023-02-20
Title
Multiple Page Generator Plugin - MPG < 3.3.10 - Multiple CSRF
Slug
multiple-pages-generator-by-porthas
Published
2023-05-16
Title
Multiple Page Generator < 3.3.18 - SQLi via CSRF
Slug
multiple-pages-generator-by-porthas
Published
2023-05-16
Title
Multiple Page Generator < 3.3.18 - Admin+ SQLi
Slug
multiple-pages-generator-by-porthas
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
multiple-pages-generator-by-porthas
Published
2023-05-23
Title
Multiple Page Generator – MPG < 3.3.20 - SQL Injection
Slug
multiple-pages-generator-by-porthas
Published
2024-03-13
Title
Multiple Page Generator Plugin – MPG < 3.4.1 - Authenticated (Editor+) Remote Code Execution
Slug
multiple-pages-generator-by-porthas
Published
2024-03-26
Title
Multiple Page Generator Plugin – MPG < 3.4.1 - Missing Authorization via mpg_get_log_by_project_id
Slug
multiple-pages-generator-by-porthas
Published
2024-04-05
Title
Multiple Page Generator Plugin – MPG < 3.4.1 - Cross-Site Request Forgery
Slug
multiple-pages-generator-by-porthas
Published
2024-09-25
Title
Multiple Page Generator Plugin – MPG < 3.4.8 - Authenticated (Contributor+) SQL Injection
Slug
multiple-pages-generator-by-porthas
Published
2024-10-31
Title
Multiple Page Generator Plugin – MPG < 4.0.2 - Missing Authorization
Slug
multiple-pages-generator-by-porthas
Published
2024-11-11
Title
Multiple Page Generator Plugin – MPG < 4.0.3 - Authenticated (Editor+) Directory Traversal to Limited File Deletion
Slug
multiple-pages-generator-by-porthas
Published
2025-01-25
Title
Multiple Page Generator Plugin – MPG < 4.0.6 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl
Slug
multiple-pages-generator-by-porthas
Published
2026-07-06
Title
Multiple Page Generator Plugin – MPG < 4.1.8 - Reflected XSS via mpg_shortcode
Slug
multiple-post-passwords
Published
2023-11-28
Title
Multiple Post Passwords < 1.1.2 - Admin+ Stored XSS
Slug
multiple-post-type-order
Published
2025-05-06
Title
Multiple Post Type Order <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mpto Shortcode
Slug
multiple-roles
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Slug
multiple-roles
Published
2021-06-08
Title
Multiple Roles < 1.3.2 - Cross-Site Request Forgery
Slug
multiple-roles-per-user
Published
2025-11-17
Title
Multiple Roles per User <= 1.0 - Missing Authorization to Authenticated (Custom+) Privilege Escalation
Slug
multiple-shipping-address-woocommerce
Published
2022-04-11
Title
Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi
Slug
multiple-votes-in-one-page
Published
2024-11-08
Title
Multiple Votes in one page <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
multipurpose-block
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
multipurpose-block
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting