WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
multilevel-referral-plugin-for-woocommerce
Published
2025-02-28
Title
Multilevel Referral Affiliate Plugin for WooCommerce < 2.28.1 - Authenticated (Subscriber+) SQL Injection
Slug
multiline-files-for-contact-form-7
Published
2024-10-15
Title
Multiline files upload for contact form 7 < 2.9 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation
Slug
multilist-subscribe-for-sendy
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
multilist-subscribe-for-sendy
Published
2022-03-01
Title
Multilist Subscribe for Sendy <= 1.6.1 - Subscriber+ Arbitrary Options Update
Slug
multilist-subscribe-for-sendy
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
multilist-subscribe-for-sendy
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
multimanager-wp
Published
2024-11-12
Title
MultiManager WP – Manage All Your WordPress Sites Easily < 1.1.0 - Authentication Bypass via User Impersonation
Slug
multimedia-carousel
Published
2025-05-16
Title
Multimedia Responsive Carousel with Image Video Audio Support < 2.6.1 - Authenticated (Contributor+) SQL Injection
Slug
multimedial-images
Published
2022-12-12
Title
Multimedial Images <= 1.0b - Admin+ SQLi
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-17
Title
MultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment Deletion
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-17
Title
MultiParcels Shipping For WooCommerce < 1.15.4 - Reflected XSS
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-17
Title
MultiParcels Shipping For WooCommerce < 1.14.15 - Subscriber+ SQLi
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-31
Title
MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS
Slug
multiparcels-shipping-for-woocommerce
Published
2023-07-31
Title
MultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRF
Slug
multiparcels-shipping-for-woocommerce
Published
2024-04-11
Title
MultiParcels Shipping For WooCommerce < 1.16.9 - Cross-Site Request Forgery
Slug
multiparcels-shipping-for-woocommerce
Published
2025-12-05
Title
MultiParcels Shipping For WooCommerce < 1.30.13 - Missing Authorization
Slug
multiparcels-shipping-for-woocommerce
Published
2026-08-11
Title
MultiParcels Shipping For WooCommerce < 1.30.37 - Reflected Cross-Site Scripting
Slug
multiplayer-plugin
Published
2021-08-13
Title
Multiplayer Games <= 3.7 - Reflected Cross-Site Scripting
Slug
multiple-admin-emails
Published
2024-12-12
Title
Multiple Admin Emails <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
multiple-domain
Published
2020-01-25
Title
Multiple Domain < 1.0.3 - XSS in Canonical/Alternate Tags
Slug
multiple-image-uploads-with-preview-for-wpforms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
multiple-location-google-map
Published
2025-04-09
Title
Multiple Location Google Map <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
multiple-pages-generator-by-porthas
Published
2023-02-20
Title
Multiple Page Generator Plugin - MPG < 3.3.10 - Multiple CSRF
Slug
multiple-pages-generator-by-porthas
Published
2023-05-16
Title
Multiple Page Generator < 3.3.18 - SQLi via CSRF
Slug
multiple-pages-generator-by-porthas
Published
2023-05-16
Title
Multiple Page Generator < 3.3.18 - Admin+ SQLi