WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mainwp
Published
2023-11-09
Title
MainWP < 4.4.3.4 - Authenticated (Administrator+) SQL Injection
Slug
mainwp
Published
2024-02-27
Title
MainWP Dashboard < 5.0 - Cross-Site Request Forgery via posting_bulk
Slug
mainwp-broken-links-checker-extension
Published
2023-01-18
Title
MainWP Broken Links Checker Extension <= 4.0 - Unauthenticated SQLi
Slug
mainwp-child
Published
2015-03-09
Title
MainWP Child <= 2.0.9.1 - Authentication Bypass
Slug
mainwp-child
Published
2015-08-08
Title
MainWP <= 2.0.22 - Unspecified
Slug
mainwp-child
Published
2018-02-28
Title
MainWP Child <= 3.4.4 - Authentication Bypass
Slug
mainwp-child
Published
2021-10-25
Title
MainWP Child < 4.1.8 - Admin+ SQL Injection
Slug
mainwp-child
Published
2023-06-23
Title
MainWP Child < 4.4.1.2 - Sensitive File Disclosure
Slug
mainwp-child
Published
2024-11-12
Title
MainWP Child < 5.3 - Authentication Bypass
Slug
mainwp-child-reports
Published
2021-09-20
Title
MainWP Child Reports < 2.0.8 - Admin+ SQL Injection
Slug
mainwp-child-reports
Published
2024-04-26
Title
MainWP Child Reports < 2.2 - Cross-Site Request Forgery
Slug
mainwp-child-reports
Published
2024-08-07
Title
MainWP Child Reports < 2.2.1 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ Stored XSS
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ PHP Objection Injection
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ Settings Update
Slug
mainwp-google-analytics-extension
Published
2023-01-17
Title
MainWP Google Analytics Extension < 4.0.5 - Subscriber+ SQLi
Slug
mainwp-google-analytics-extension
Published
2023-01-17
Title
MainWP Google Analytics Extension < 4.0.5 - Subscriber+ Settings Update
Slug
mainwp-maintenance-extension
Published
2023-01-17
Title
MainWP Maintenance Extension < 4.1.2 - Subscriber+ SQL Injection (SQLi)
Slug
mainwp-piwik-extension
Published
2023-01-17
Title
MainWP Matomo Extension < 4.0.5 - CSRF
Slug
majestic-before-after-image
Published
2025-10-03
Title
Majestic Before After Image < 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
majestic-support
Published
2025-02-11
Title
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin < 1.0.6 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
majestic-support
Published
2025-02-11
Title
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin < 1.0.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
majestic-support
Published
2025-02-23
Title
Majestic Support < 1.0.7 - Unauthenticated Local File Inclusion
Slug
majestic-support
Published
2025-05-22
Title
Majestic Support < 1.1.1 - Unauthenticated SQL Injection
Slug
majestic-support
Published
2025-05-19
Title
Majestic Support < 1.1.1 - Missing Authorization