WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mainwp-child-reports
Published
2024-08-07
Title
MainWP Child Reports < 2.2.1 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ Stored XSS
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ PHP Objection Injection
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ Settings Update
Slug
mainwp-google-analytics-extension
Published
2023-01-17
Title
MainWP Google Analytics Extension < 4.0.5 - Subscriber+ SQLi
Slug
mainwp-google-analytics-extension
Published
2023-01-17
Title
MainWP Google Analytics Extension < 4.0.5 - Subscriber+ Settings Update
Slug
mainwp-maintenance-extension
Published
2023-01-17
Title
MainWP Maintenance Extension < 4.1.2 - Subscriber+ SQL Injection (SQLi)
Slug
mainwp-piwik-extension
Published
2023-01-17
Title
MainWP Matomo Extension < 4.0.5 - CSRF
Slug
majestic-before-after-image
Published
2025-10-03
Title
Majestic Before After Image < 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
majestic-support
Published
2025-02-11
Title
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin < 1.0.6 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
majestic-support
Published
2025-02-11
Title
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin < 1.0.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
majestic-support
Published
2025-02-23
Title
Majestic Support < 1.0.7 - Unauthenticated Local File Inclusion
Slug
majestic-support
Published
2025-05-22
Title
Majestic Support < 1.1.1 - Unauthenticated SQL Injection
Slug
majestic-support
Published
2025-05-19
Title
Majestic Support < 1.1.1 - Missing Authorization
Slug
majestic-support
Published
2025-06-12
Title
Majestic Support < 1.1.1 - Missing Authorization
Slug
majestic-support
Published
2025-04-22
Title
Majestic Support <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion
Slug
make-builder
Published
2025-03-21
Title
Make Builder < 1.1.11 - Authenticated (Subscriber+) Server-Side Request Forgery via make_builder_ajax_subscribe Function
Slug
make-column-clickable-elementor
Published
2025-09-22
Title
Make Column Clickable Elementor < 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
make-email-customizer-for-woocommerce
Published
2025-04-10
Title
Make Email Customizer for WooCommerce <= 1.0.6 - Reflected Cross-Site Scripting
Slug
make-email-customizer-for-woocommerce
Published
2025-10-21
Title
Make Email Customizer for WooCommerce <= 1.0.6 - Subscriber+ Arbitrary Options Update
Slug
make-paths-relative
Published
2023-08-14
Title
Make Paths Relative <= 1.3.0 - Settings Update via CSRF
Slug
make-section-column-clickable-elementor
Published
2025-12-07
Title
Make Section & Column Clickable For Elementor < 2.4.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
makecommerce
Published
2024-07-04
Title
MakeCommerce for WooCommerce < 3.5.2 - Reflected Cross-Site Scripting
Slug
makestories-helper
Published
2023-08-28
Title
MakeStories (for Google Web Stories) < 3.0.3 - Settings Update via CSRF
Slug
makestories-helper
Published
2024-07-11
Title
MakeStories (for Google Web Stories) < 3.0.4 - Authenticated (Subscriber+) Arbitrary File Download and Server-Side Request Forgery