WordPress Plugin Vulnerabilities | Page 204 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-04-04

Title

WP Directory Kit < 1.3.1 - Authenticated (Subscriber+) SQL Injection

Slug

Published

2024-07-04

Title

WP Directory Kit < 1.3.6 - Reflected Cross-Site Scripting

Slug

Published

2025-09-26

Title

WP Directory Kit < 1.4.1 - Missing Authorization

Slug

Published

2025-11-20

Title

WP Directory Kit < 1.4.4 - Unauthenticated SQL Injection via select_2_ajax() Function

Slug

Published

2025-11-26

Title

WP Directory Kit < 1.4.6 - Reflected Cross-Site Scripting via 'order_by' Parameter

Slug

Published

2025-12-01

Title

WP Directory Kit < 1.4.7 - Authenticated (Admin+) SQL Injection

Slug

Published

2025-12-03

Title

WP Directory Kit < 1.4.5 - Privilege Escalation via Account Takeover

Slug

Published

2025-12-12

Title

WP Directory Kit < 1.4.8 - Unauthenticated SQL Injection

Slug

Published

2016-05-30

Title

wpDiscuz < 3.2.0 - Reflected Cross-Site Scripting (XSS)

Slug

Published

2020-06-12

Title

wpDiscuz < 5.3.6 - Unauthenticated SQL Injection

Slug

Published

2020-07-28

Title

Comments - wpDiscuz 7.0.0 - 7.0.4 - Unauthenticated Arbitrary File Upload

Slug

Published

2021-09-13

Title

Comments - wpDiscuz < 7.3.2 - Admin+ Stored Cross-Site Scripting

Slug

Published

2021-10-11

Title

wpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRF

Slug

Published

2022-02-10

Title

wpDiscuz < 7.3.12 - Sensitive Information Disclosure

Slug

Published

2022-10-28

Title

Comments - wpDiscuz 7.4.2 - Subscriber+ IDOR

Slug

Published

2023-09-12

Title

wpDiscuz < 7.6.4 - Unauthenticated Data Modification via IDOR

Slug

Published

2023-09-12

Title

wpDiscuz < 7.6.4 - Post Rating Increase/Decrease iva IDOR

Slug

Published

2023-10-31

Title

wpDiscuz < 7.6.12 - Unauthenticated Stored XSS

Slug

Published

2023-09-18

Title

wpDiscuz < 7.6.6 - Unauthenticated SQL Injection

Slug

Published

2023-10-22

Title

wpDiscuz < 7.6.4 - Author+ IDOR

Slug

Published

2023-10-22

Title

wpDiscuz < 7.6.11 - Unauthenticated Content Injection

Slug

Published

2023-10-20

Title

wpDiscuz < 7.6.11 - Insufficient Authorization to Comment Submission on Deleted Posts

Slug

Published

2023-10-12

Title

wpDiscuz < 7.6.12 - Missing Authorization in AJAX Actions

Slug

Published

2023-11-14

Title

wpDiscuz < 7.6.12 - Cross-Site Request Forgery

Slug

Published

2023-09-18

Title

wpDiscuz < 7.6.6 - Unauthenticated SQL Injection