WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-meta-seo
Published
2022-06-28
Title
WP Meta SEO < 4.4.9 - Social Settings Update via CSRF
Slug
wp-meta-seo
Published
2023-02-24
Title
WP Meta SEO < 4.5.4 - Subscriber+ SiteMap Settings Update
Slug
wp-meta-seo
Published
2023-02-24
Title
WP Meta SEO < 4.5.4 - Subscriber+ Google Analytics Settings Update
Slug
wp-meta-seo
Published
2023-02-27
Title
WP Meta SEO < 4.5.3 - Subscriber+ SQLi
Slug
wp-meta-seo
Published
2023-02-27
Title
WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect
Slug
wp-meta-seo
Published
2023-03-27
Title
WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization
Slug
wp-meta-seo
Published
2024-04-16
Title
WP Meta SEO < 4.5.13 - Unauthenticated Stored Cross-Site Scripting via Referer header
Slug
wp-meta-seo
Published
2024-04-16
Title
WP Meta SEO < 4.5.13 - Unauthenticated Password Protected Content Access
Slug
wp-meta-seo
Published
2024-09-12
Title
WP Meta SEO < 4.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-seo
Published
2024-09-12
Title
WP Meta SEO < 4.5.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-meta-seo
Published
2026-06-23
Title
WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter
Slug
wp-meta-seo
Published
2026-06-23
Title
WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging
Slug
wp-meta-sort-posts
Published
2026-06-08
Title
WP Meta Sort Posts <= 0.9 - Cross-Site Request Forgery to Plugin Settings Update
Slug
wp-meteor
Published
2024-07-23
Title
WP Meteor Website Speed Optimization Addon < 3.4.4 - Unauthenticated Full Path Disclosure
Slug
wp-meteor
Published
2026-04-28
Title
WP Meteor Website Speed Optimization Addon < 3.4.17 - Unauthenticated Stored Cross-Site Scripting via Comment
Slug
wp-meteor
Published
2026-10-09
Title
WP Meteor Website Speed Optimization Addon < 3.4.19 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
Slug
wp-microblogs
Published
2014-08-01
Title
WP Microblogs plugin < 0.4.0 - Cross-Site Scripting (XSS)
Slug
wp-microdata
Published
2025-09-27
Title
WP Microdata <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-migrate-2-aws
Published
2024-12-20
Title
WP on AWS < 5.2.2 - Reflected Cross-Site Scripting
Slug
wp-migrate-db
Published
2025-11-17
Title
WP Migrate Lite < 2.7.7 - Unauthenticated Blind Server-Side Request Forgery
Slug
wp-migrate-db
Published
2026-06-10
Title
WP Migrate Lite – Migration Made Easy < 2.7.9 - Cross-Site Request Forgery
Slug
wp-migrate-db-pro
Published
2024-04-26
Title
WP Migrate Pro < 2.6.11 - Unauthenticated PHP Object Injection
Slug
wp-migration-duplicator
Published
2023-11-06
Title
WordPress Backup & Migration < 1.4.4 - Subscriber+ Plugin Settings Update
Slug
wp-migration-duplicator
Published
2023-11-06
Title
WordPress Backup & Migration < 1.4.5 - Subscriber+ Stored XSS
Slug
wp-migration-duplicator
Published
2023-10-11
Title
WordPress Backup & Migration < 1.4.2 - Missing Authorization to Settings and Schedule Modification