WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mailpoet
Published
2025-09-16
Title
MailPoet < 5.14.2 - Reflected XSS
Slug
mailpress
Published
2022-05-31
Title
MailPress <= 7.2.1 - Arbitrary Settings Update & Log Files Purge via CSRF
Slug
mailrelay
Published
2023-10-13
Title
Mailrelay < 2.1.2 - Arbitrary Settings Update via CSRF
Slug
mailster
Published
2020-07-08
Title
Mailster Gravity Forms < 2.4.9 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
mailster
Published
2024-03-28
Title
Mailster < 2.0.0 - Reflected Cross-Site Scripting
Slug
mailster
Published
2024-04-15
Title
Mailster < 4.0.7 - Unauthenticated Local File Inclusion
Slug
mailster
Published
2024-06-28
Title
Mailster < 4.0.10 - Reflected Cross-Site Scripting
Slug
mailster
Published
2025-10-27
Title
Mailster < 4.1.14 - Reflected Cross-Site Scripting
Slug
mailtree-log-mail
Published
2023-06-20
Title
Mailtree Log Mail < 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Slug
mailup-auto-subscribtion
Published
2025-01-27
Title
MailUp Auto Subscription < 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mailz
Published
2014-08-01
Title
Mailing List 1.3.2 - Remote File Inclusion
Slug
mailz
Published
2014-08-01
Title
Mailing List - Arbitrary file download
Slug
maintenance
Published
2021-07-21
Title
Maintenance < 4.03 - Authenticated Stored XSS
Slug
maintenance-and-noindex-nofollow
Published
2024-12-12
Title
LionScripts: Site Maintenance & Noindex Nofollow Plugin <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
maintenance-coming-soon-redirect-animation
Published
2024-08-26
Title
Maintenance & Coming Soon Redirect Animation <= 2.3.2 - IP Spoofing to Bypass
Slug
maintenance-coming-soon-redirect-animation
Published
2024-12-19
Title
Maintenance & Coming Soon Redirect Animation < 2.3.0 - Missing Authorization to Settings Update
Slug
maintenance-mode-based-on-user-roles
Published
2025-11-24
Title
Conditional Maintenance Mode for WordPress < 2.0.0 - Cross-Site Request Forgery
Slug
maintenance-notice
Published
2025-03-11
Title
Maintenance Notice < 1.0.7 - Settings Reset via CSRF
Slug
maintenance-page
Published
2024-02-21
Title
Maintenance Page < 1.0.9 - Missing Authorization to Sensitive Information Exposure
Slug
maintenance-page
Published
2024-02-21
Title
Maintenance Page < 1.0.9 - Security Mechanism Bypass via REST API
Slug
maintenance-switch
Published
2023-04-28
Title
Maintenance Switch < 1.6.3 - Reflected XSS
Slug
maintenance-switch
Published
2023-08-28
Title
Maintenance Switch <= 1.7.1 - Theme Files Creation/Deletion via CSRF
Slug
mainwp
Published
2015-08-08
Title
MainWP <= 2.0.22 - Unspecified
Slug
mainwp
Published
2016-04-29
Title
MainWP <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
mainwp
Published
2023-10-20
Title
MainWP Dashboard < 4.5.1.3 - Authenticated(Administrator+) CSS Injection