WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
majestic-support
Published
2025-06-12
Title
Majestic Support < 1.1.1 - Missing Authorization
Slug
majestic-support
Published
2025-04-22
Title
Majestic Support <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion
Slug
make-builder
Published
2025-03-21
Title
Make Builder < 1.1.11 - Authenticated (Subscriber+) Server-Side Request Forgery via make_builder_ajax_subscribe Function
Slug
make-column-clickable-elementor
Published
2025-09-22
Title
Make Column Clickable Elementor < 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
make-email-customizer-for-woocommerce
Published
2025-04-10
Title
Make Email Customizer for WooCommerce <= 1.0.6 - Reflected Cross-Site Scripting
Slug
make-email-customizer-for-woocommerce
Published
2025-10-21
Title
Make Email Customizer for WooCommerce <= 1.0.6 - Subscriber+ Arbitrary Options Update
Slug
make-paths-relative
Published
2023-08-14
Title
Make Paths Relative <= 1.3.0 - Settings Update via CSRF
Slug
make-section-column-clickable-elementor
Published
2025-12-07
Title
Make Section & Column Clickable For Elementor <= 2.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
makecommerce
Published
2024-07-04
Title
MakeCommerce for WooCommerce < 3.5.2 - Reflected Cross-Site Scripting
Slug
makestories-helper
Published
2023-08-28
Title
MakeStories (for Google Web Stories) < 3.0.3 - Settings Update via CSRF
Slug
makestories-helper
Published
2024-07-11
Title
MakeStories (for Google Web Stories) < 3.0.4 - Authenticated (Subscriber+) Arbitrary File Download and Server-Side Request Forgery
Slug
makestories-helper
Published
2025-09-22
Title
MakeStories (for Google Web Stories) <= 3.0.4 - Authenticated (Author+) Server-Side Request Forgery
Slug
makewebbetter-hubspot-for-woocommerce
Published
2025-01-30
Title
MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics < 1.6.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update
Slug
malware-finder
Published
2014-05-28
Title
Malware Finder <= 1.1 - Cross-Site Scripting (XSS)
Slug
mambo-joomla-importer
Published
2025-02-21
Title
Mambo Importer <= 1.0 - Authenticated (Administrator+) PHP Object Injection
Slug
mamurjor-employee-info
Published
2026-01-06
Title
Mamurjor Employee Info <= 1.0.0 - Cross-Site Request Forgery to Arbitrary Employee and Related Data Manipulation
Slug
manage-gravity-forms-stripe-subscriptions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
manage-gravity-forms-stripe-subscriptions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
manage-notification-emails
Published
2022-09-27
Title
Manage Notification E-mails < 1.8.3 - Settings Reset via CSRF
Slug
manage-notification-emails
Published
2022-11-28
Title
Manage Notification E-mails < 1.8.3 - Settings Reset via CSRF
Slug
manage-notification-emails
Published
2023-12-08
Title
Manage Notification E-mails < 1.8.6 - Missing Authorization
Slug
manage-shipyaari-shipping
Published
2023-02-20
Title
Shipyaari Shipping Management <= 1.0 - Admin+ Stored XSS
Slug
manage-user-columns
Published
2024-11-01
Title
Manage User Columns < 1.0.6 - Cross-Site Request Forgery
Slug
manager-for-icomoon
Published
2023-05-04
Title
Manager for Icomoon < 2.2 - Contributor+ Stored XSS
Slug
manager-for-icomoon
Published
2023-05-08
Title
Manager for Icomoon < 2.1 - Unauthenticated Arbitrary File Upload