WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-mapit
Published
2026-01-04
Title
MapIt <= 3.0.3 - Missing Authorization
Slug
wp-markdown-editor
Published
2017-03-10
Title
WP Markdown Editor 2.3.0 - Authenticated "Self" Cross-Site Scripting (XSS)
Slug
wp-marketing-automations
Published
2022-07-26
Title
Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation
Slug
wp-marketing-automations
Published
2023-12-21
Title
Automation By Autonami < 2.7.0 - Authenticated(Administrator+) SQL Injection
Slug
wp-marketing-automations
Published
2024-03-18
Title
Automation By Autonami < 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-marketing-automations
Published
2024-09-25
Title
Automation By Autonami < 3.2.0 - Authenticated (Administrator+) SQL Injection
Slug
wp-marketing-automations
Published
2024-10-24
Title
Automation By Autonami < 3.3.0 - Unauthenticated SQLi
Slug
wp-marketing-automations
Published
2025-03-21
Title
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit < 3.5.2 - Unauthenticated SQL Injection via 'automationId'
Slug
wp-marketing-automations
Published
2025-03-27
Title
Automation By Autonami < 3.5.2 - Open Redirect
Slug
wp-marketing-automations
Published
2025-06-12
Title
Automation By Autonami < 3.6.1 - Open Redirect
Slug
wp-marketing-automations
Published
2025-06-17
Title
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit < 3.6.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation
Slug
wp-marketing-automations
Published
2025-08-18
Title
Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library
Slug
wp-marketing-automations
Published
2025-11-04
Title
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce < 3.6.4.2 - Unauthenticated Sensitive Information Exposure
Slug
wp-marketing-automations
Published
2025-11-04
Title
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce < 3.6.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Slug
wp-marketing-automations
Published
2026-04-22
Title
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce < 3.8.0 - Missing Authorization
Slug
wp-marketplace
Published
2014-08-01
Title
WP Marketplace 1.1.0 - Shell Upload
Slug
wp-masonry-infinite-scroll
Published
2025-06-25
Title
WP Masonry & Infinite Scroll < 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-masquerade
Published
2024-04-25
Title
WP Masquerade <= 1.1.0 - Subscriber+ Account Takeover
Slug
wp-mathjax-plus
Published
2024-11-28
Title
WP MathJax <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-matrix-gallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-maximum-upload-file-size
Published
2024-11-22
Title
Wp Maximum Upload File Size < 1.1.4 - Authenticated (Author+) Full Path Disclosure
Slug
wp-media-categories
Published
2025-09-26
Title
WP Media Categories <= 2.1.0 - Cross-Site Request Forgery
Slug
wp-media-category-management
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-media-category-management
Published
2024-04-22
Title
WP Media Category Management < 2.3.0 - Reflected Cross-Site Scripting
Slug
wp-media-category-management
Published
2025-02-18
Title
WP Media Category Management 2.0 - 2.3.3 - Cross-Site Request Forgery to Settings Update