WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-media-manager-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-media-optimizer-webp
Published
2024-12-05
Title
WP Media Optimizer (.webp) <= 1.4.0 - Reflected Cross-Site Scripting via wpmowebp-css-resources and wpmowebp-js-resources Parameters
Slug
wp-media-player
Published
2014-08-01
Title
WP Silverlight Media Player < 0.8 - Cross-Site Scripting (XSS)
Slug
wp-mediatagger
Published
2025-01-10
Title
WP MediaTagger <= 4.1.1 - Contributor+ Stored XSS
Slug
wp-mediatagger
Published
2025-01-10
Title
WP MediaTagger <= 4.1.1 - Reflected XSS
Slug
wp-meetup
Published
2025-01-16
Title
WP Meetup <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
wp-megamenu
Published
2021-09-21
Title
WP Mega Menu < 1.4.1 - Subscriber+ Arbitrary Post Access
Slug
wp-megamenu
Published
2021-09-21
Title
WP Mega Menu < 1.4.0 - Unauthenticated Arbitrary Post Access
Slug
wp-megamenu
Published
2021-09-17
Title
WP Mega Menu < 1.4.1 - Reflected Cross-Site Scripting
Slug
wp-megamenu
Published
2024-12-11
Title
WP Mega Menu <= 1.4.2 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-members
Published
2014-08-01
Title
WP-Members 2.8.9 - profile.php Multiple Parameter Stored XSS
Slug
wp-members
Published
2014-08-01
Title
WP-Members 2.8.9 - wp-login.php register Action Multiple Parameter Reflected XSS
Slug
wp-members
Published
2017-07-13
Title
WP-Members <= 3.1.7 - Authenticated Cross-Site Scripting (XSS)
Slug
wp-members
Published
2019-06-13
Title
WP-Members < 3.2.8.1 - Cross-Site Request Forgery (CSRF)
Slug
wp-members
Published
2023-06-08
Title
WP-Members Membership < 3.4.8 - Subscriber+ Unauthorized Plugin Settings Update
Slug
wp-members
Published
2024-01-03
Title
WP-Members Membership Plugin < 3.4.9 - Contributor+ Sensitive Information Exposure
Slug
wp-members
Published
2024-03-07
Title
WP-Members Membership Plugin < 3.4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-members
Published
2024-04-01
Title
WP-Members Membership Plugin < 3.4.9.3 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-members
Published
2024-04-25
Title
WP-Members Membership Plugin < 3.4.9.4 - Unprotected Storage of Potentially Sensitive Files
Slug
wp-members
Published
2024-10-21
Title
WP-Members Membership Plugin < 3.4.9.6 - Reflected Cross-Site Scripting
Slug
wp-members
Published
2024-10-24
Title
WP-Members < 3.4.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode
Slug
wp-members
Published
2025-05-16
Title
WP-Members < 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode
Slug
wp-members
Published
2025-06-19
Title
WP-Members < 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-members
Published
2025-07-21
Title
WP-Members < 3.5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-members
Published
2025-09-08
Title
WP-Members Membership Plugin < 3.5.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names