WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mtouch-quiz
Published
2014-08-01
Title
mTouch Quiz 3.0.6 - question.php quiz Parameter Reflected XSS
Slug
mtouch-quiz
Published
2014-08-01
Title
mTouch Quiz 3.0.6 - question.php quiz Parameter SQL Injection
Slug
mtouch-quiz
Published
2015-12-18
Title
mTouch Quiz <= 3.1.2 - Multiple Vulnerabilities XSS & CSRF
Slug
mtouch-quiz
Published
2022-07-18
Title
mTouch Quiz <= 3.1.3 - Admin+ Stored Cross Site Scripting
Slug
mtphr-widgets
Published
2025-01-16
Title
Metaphor Widgets <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mts-url-shortener
Published
2023-08-28
Title
URL Shortener by MyThemeShop <= 1.0.17 - Reflected XSS
Slug
mts-url-shortener
Published
2024-06-18
Title
URL Shortener by MyThemeShop <= 1.0.17 - Admin+ Stored XSS
Slug
mukioplayer-for-wordpress
Published
2014-08-01
Title
Mukioplayer 1.6 - SQL Injection
Slug
multi-column-tag-map
Published
2023-02-02
Title
Multi-column Tag Map < 17.0.25 - Contributor+ Stored XSS
Slug
multi-column-tag-map
Published
2023-09-01
Title
Multi-column Tag Map < 17.0.27 - Cross-Site Request Forgery
Slug
multi-column-tag-map
Published
2024-12-20
Title
Multi-column Tag Map < 17.0.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via mctagmap Shortcode
Slug
multi-column-tag-map
Published
2026-01-06
Title
Multi-column Tag Map <= 17.0.39 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mctm_css_conditional' Parameter
Slug
multi-column-taxonomy-list
Published
2025-04-24
Title
Multi-Column Taxonomy List <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
multi-crypto-currency-payment
Published
2025-06-03
Title
Multi CryptoCurrency Payments <= 2.0.3 - Unauthenticated SQL Injection
Slug
multi-day-booking-calendar
Published
2024-11-08
Title
Multi-day Booking Calendar <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
multi-feed-reader
Published
2017-06-06
Title
Multi Feed Reader <= 2.2.3 - SQL Injection
Slug
multi-feed-reader
Published
2024-11-22
Title
Multi Feed Reader <= 2.2.4 - Cross-Site Request Forgery
Slug
multi-functional-flexi-lightbox
Published
2026-03-20
Title
Multi Functional Flexi Lightbox <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via 'message' Parameter
Slug
multi-gallery
Published
2024-12-06
Title
Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection
Slug
multi-meta-box
Published
2016-04-08
Title
WP Multiple Meta Box 1.0 - Authenticated Blind SQL Injection
Slug
multi-page-toolkit
Published
2022-05-30
Title
Multi-page Toolkit <= 2.6 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
multi-plugin-installer
Published
2015-08-24
Title
Multi Plugin Installer < 1.2.0 - Unauthenticated File Traversal
Slug
multi-post-carousel
Published
2026-03-20
Title
Multi Post Carousel by Category <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides' Shortcode Attribute
Slug
multi-purpose-mail-form
Published
2024-10-25
Title
Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload
Slug
multi-purpose-mail-form
Published
2024-10-30
Title
Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload