WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mailin
Published
2024-08-16
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.83 - Cross-Site Request Forgery
Slug
mailin
Published
2024-10-09
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) < 3.1.88 - Cross-Site Request Forgery
Slug
mailin
Published
2026-02-17
Title
Brevo < 3.3.1 - Unauthenticated Authorization Bypass via Type Juggling
Slug
mailmunch
Published
2023-09-05
Title
MailMunch – Grow your Email List < 3.1.3 - Settings Update via CSRF
Slug
mailmunch
Published
2024-04-05
Title
MailMunch – Grow your Email List < 3.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mailmunch
Published
2024-11-21
Title
MailMunch – Grow your Email List < 3.2.0 - Reflected Cross-Site Scripting
Slug
mailoptin
Published
2021-06-30
Title
MailOptin < 1.2.35.2 - Unauthorised AJAX Call
Slug
mailoptin
Published
2022-09-23
Title
MailOptin < 1.2.50.0 - Unauthenticated Campaign Cache Deletion
Slug
mailoptin
Published
2023-01-20
Title
MailOptin 1.2.54.0 - Admin+ Stored XSS
Slug
mailoptin
Published
2024-09-23
Title
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin < 1.2.70.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mailoptin
Published
2025-09-03
Title
MailOptin < 1.2.75.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
mailpoet
Published
2019-04-16
Title
MailPoet < 3.23.2 - Reflected Cross-Site Scripting Issue
Slug
mailpoet
Published
2024-10-29
Title
MailPoet < 5.3.2 - Admin+ Stored XSS
Slug
mailpoet
Published
2024-12-24
Title
MailPoet < 5.5.2 - Admin+ Stored XSS
Slug
mailpoet
Published
2025-09-16
Title
MailPoet < 5.14.2 - Reflected XSS
Slug
mailpress
Published
2022-05-31
Title
MailPress <= 7.2.1 - Arbitrary Settings Update & Log Files Purge via CSRF
Slug
mailrelay
Published
2023-10-13
Title
Mailrelay < 2.1.2 - Arbitrary Settings Update via CSRF
Slug
mailster
Published
2020-07-08
Title
Mailster Gravity Forms < 2.4.9 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
mailster
Published
2024-03-28
Title
Mailster < 2.0.0 - Reflected Cross-Site Scripting
Slug
mailster
Published
2024-04-15
Title
Mailster < 4.0.7 - Unauthenticated Local File Inclusion
Slug
mailster
Published
2024-06-28
Title
Mailster < 4.0.10 - Reflected Cross-Site Scripting
Slug
mailster
Published
2025-10-27
Title
Mailster < 4.1.14 - Reflected Cross-Site Scripting
Slug
mailtree-log-mail
Published
2023-06-20
Title
Mailtree Log Mail < 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Slug
mailup-auto-subscribtion
Published
2025-01-27
Title
MailUp Auto Subscription < 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mailz
Published
2014-08-01
Title
Mailing List 1.3.2 - Remote File Inclusion