WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
multi-rating
Published
2023-02-02
Title
Multi Rating < 5.0.6 - Ratings Deletion via CSRF
Slug
multi-rating
Published
2023-02-14
Title
Multi Rating < 5.0.6 - Reflected XSS
Slug
multi-rating
Published
2023-05-04
Title
Multi Rating <= 5.0.6 - Admin+ Stored XSS
Slug
multi-rating
Published
2023-05-04
Title
Multi Rating <= 5.0.6 - Unauthenticated Ratings Update
Slug
multi-scheduler
Published
2020-05-29
Title
Multi Scheduler <= 1.0.0 - Arbitrary Record Deletion via CSRF
Slug
multi-step-form
Published
2018-10-31
Title
Multi Step Form <= 1.2.5 - Cross-Site Scripting (XSS)
Slug
multi-step-form
Published
2018-07-20
Title
Multi Step Form <= 1.2.5 - Multiple Unauthenticated Reflected XSS
Slug
multi-step-form
Published
2022-12-17
Title
Multi Step Form < 1.7.8 - Admin+ Stored XSS
Slug
multi-step-form
Published
2023-11-13
Title
Multi Step Form < 1.7.13 - Form Update/Deletion via CSRF
Slug
multi-step-form
Published
2023-12-19
Title
Multi Step Form < 1.7.17 - Admin+ Stored XSS
Slug
multi-step-form
Published
2024-02-12
Title
Multi Step Form < 1.7.19 - Form Deletion via CSRF
Slug
multi-step-form
Published
2024-10-24
Title
Multi Step Form < 1.7.22 - Missing Authorization via fw_delete_files
Slug
multi-step-form
Published
2025-01-15
Title
Multi Step Form < 1.7.24 - Missing Authorization to Unauthenticated Limited File Upload
Slug
multi-step-form
Published
2025-09-05
Title
Multi Step Form < 1.7.26 - Authenticated (Admin+) Arbitrary File Upload
Slug
multi-video-box
Published
2025-03-21
Title
Multi Video Box <= 1.5.2 - Reflected Cross-Site Scripting via video_id and group_id Parameters
Slug
multicarousel
Published
2025-01-07
Title
Multiple Carousel <= 2.0 - Unauthenticated SQL Injection
Slug
multicons
Published
2015-08-25
Title
Multicons < 3.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
multifox-plus
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
multifox-plus
Published
2024-11-08
Title
Multifox Plus <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
multilang-contact-form
Published
2025-01-13
Title
Multilang Contact Form <= 1.5 - Reflected Cross-Site Scripting
Slug
multilang-contact-form
Published
2025-09-26
Title
Multilang Contact Form < 1.6 - Cross-Site Request Forgery
Slug
multilanguage
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
multilanguage
Published
2026-01-15
Title
Multilanguage by BestWebSoft <= 1.5.2 - Missing Authorization
Slug
multilevel-referral-plugin-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
multilevel-referral-plugin-for-woocommerce
Published
2024-11-28
Title
Multilevel Referral Affiliate Plugin for WooCommerce < 2.28 - Reflected XSS