WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mp-restaurant-menu
Published
2026-09-24
Title
Restaurant Menu and Food Ordering < 2.4.15 - Unauthenticated Stored Cross-Site Scripting via 'phone_number' Parameter
Slug
mp-timetable
Published
2021-08-23
Title
Timetable and Event Schedule by MotoPress < 2.3.19 - Author+ Stored Cross-Site Scripting
Slug
mp-timetable
Published
2021-08-23
Title
Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Deletion
Slug
mp-timetable
Published
2021-08-23
Title
Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Update
Slug
mp-timetable
Published
2021-08-23
Title
Timetable and Event Schedule by MotoPress < 2.4.0 - Arbitrary User's Hashed Password/Email/Username Disclosure
Slug
mp-timetable
Published
2024-04-26
Title
Timetable and Event Schedule by MotoPress < 2.4.12 - Authenticated (Contributor+) SQL Injection
Slug
mp-timetable
Published
2024-07-22
Title
Timetable and Event Schedule < 2.4.14 - Admin+ PHP Object Injection
Slug
mp-timetable
Published
2025-11-12
Title
Timetable and Event Schedule by MotoPress < 2.4.16 - Contributor+ Event Disclosure via IDOR
Slug
mp-timetable
Published
2026-05-27
Title
Timetable and Event Schedule by MotoPress < 2.4.17 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function
Slug
mp-ukagaka
Published
2026-02-06
Title
MP-Ukagaka <= 1.5.2 - Reflected Cross-Site Scripting
Slug
mp3-jplayer
Published
2014-02-23
Title
MP3-jPlayer <= 1.8.7 - Cross-Site Scripting (XSS)
Slug
mp3-jplayer
Published
2014-08-01
Title
MP3-jPlayer 1.8.3 - jPlayer.swf Cross-Site Scripting (XSS)
Slug
mp3-jplayer
Published
2015-03-23
Title
MP3-jPlayer < 2.5 - Local File Disclosure
Slug
mp3-jplayer
Published
2015-08-06
Title
MP3-jPlayer < 2.5 - Full Path Disclosure
Slug
mp3-jplayer
Published
2022-09-01
Title
MP3 jPlayer <= 2.7.3 - Multiple CSRF
Slug
mp3-music-player-by-sonaar
Published
2021-10-04
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site Scripting
Slug
mp3-music-player-by-sonaar
Published
2023-11-15
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 4.10.1 - Missing Authorization to Template Import
Slug
mp3-music-player-by-sonaar
Published
2024-03-28
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.1.1 - Missing Authorization
Slug
mp3-music-player-by-sonaar
Published
2024-03-29
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mp3-music-player-by-sonaar
Published
2024-04-05
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.0 - Unauthenticated Arbitrary File Download
Slug
mp3-music-player-by-sonaar
Published
2024-07-09
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
Slug
mp3-music-player-by-sonaar
Published
2024-08-28
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar < 5.7.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Slug
mp3-music-player-by-sonaar
Published
2024-11-18
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar < 5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
Slug
mp3-music-player-by-sonaar
Published
2024-12-30
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.9 - Missing Authorization
Slug
mp3-music-player-by-sonaar
Published
2025-01-30
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar < 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed