WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wpdatatables
Published
2022-05-06
Title
wpDataTables < 2.1.28 - Admin+ Stored Cross-Site Scripting
Slug
wpdatatables
Published
2023-02-20
Title
wpDataTables < 2.1.50 - Contributor+ Stored XSS
Slug
wpdatatables
Published
2023-08-17
Title
wpDataTables < 2.1.66 - Admin+ PHP Object Injection
Slug
wpdatatables
Published
2024-02-20
Title
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin < 3.4.2.5 - Reflected Cross-Site Scripting.
Slug
wpdatatables
Published
2024-05-22
Title
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin < 3.4.2.14 - Unauthenticated Stored Cross-Site Scripting via CSV Import
Slug
wpdatatables
Published
2024-05-31
Title
wpDataTables - Tables & Table Charts (Premium) < 6.4 - Missing Authorization to DataTable Access & Modification
Slug
wpdatatables
Published
2024-05-31
Title
wpDataTables - Tables & Table Charts (Premium) < 6.3.2 - Unauthenticated SQL Injection
Slug
wpdb-to-sql
Published
2025-01-16
Title
WPDB to Sql <= 1.2 - Unauthenticated Sensitive Information Exposure
Slug
wpdbspringclean
Published
2023-11-07
Title
WPDBSpringClean <= 1.6 - Reflected XSS
Slug
wpdeepl
Published
2022-10-31
Title
DeepL Pro API Translation < 1.7.5 - API Key Disclosure
Slug
wpdeepl
Published
2023-10-25
Title
DeepL Pro API translation < 2.4.1.2 - Log Pruning via CSRF
Slug
wpdefault
Published
2020-02-27
Title
wpdefault - Backdoor Plugin
Slug
wpdevart-pricing-table
Published
2025-06-29
Title
Pricing Table builder <= 1.5.1 - Cross-Site Request Forgery
Slug
wpdevart-vertical-menu
Published
2023-02-28
Title
Responsive Vertical Icon Menu < 1.5.9 - Theme Deletion via CSRF
Slug
wpdevart-vertical-menu
Published
2023-01-20
Title
Responsive Vertical Icon Menu < 1.5.9 - Admin+ Stored XSS
Slug
wpdevtool
Published
2025-01-16
Title
WpDevTool <= 0.1.1 - Reflected Cross-Site Scripting
Slug
wpdirectorykit
Published
2023-06-01
Title
WP Directory Kit < 1.2.4 - Reflected Cross-Site Scripting via search parameter
Slug
wpdirectorykit
Published
2023-05-02
Title
WP Directory Kit < 1.2.3 - Unauthenticated Arbitrary Settings Update
Slug
wpdirectorykit
Published
2023-04-28
Title
WP Directory Kit < 1.2.0 - Cross-Site Request Forgery
Slug
wpdirectorykit
Published
2023-05-26
Title
WP Directory Kit < 1.2.0 - Unauthenticated Local File Inclusion
Slug
wpdirectorykit
Published
2023-06-12
Title
WP Directory Kit < 1.2.4 - Missing Authorization for Plugin Settings Update
Slug
wpdirectorykit
Published
2023-04-28
Title
WP Directory Kit < 1.2.2 - Cross-Site Request Forgery to Plugin Settings Update
Slug
wpdirectorykit
Published
2023-04-27
Title
WP Directory Kit < 1.2.0 - Open Redirect
Slug
wpdirectorykit
Published
2023-09-05
Title
WP Directory Kit < 1.2.7 - Missing Authorization
Slug
wpdirectorykit
Published
2024-03-25
Title
WP Directory Kit < 1.3.0 - Reflected Cross-Site Scripting