WordPress Plugin Vulnerabilities | Page 212 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

wpdevart-vertical-menu

Published

2023-01-20

Title

Responsive Vertical Icon Menu < 1.5.9 - Admin+ Stored XSS

Slug

Published

2025-01-16

Title

WpDevTool <= 0.1.1 - Reflected Cross-Site Scripting

Slug

Published

2023-06-01

Title

WP Directory Kit < 1.2.4 - Reflected Cross-Site Scripting via search parameter

Slug

Published

2023-05-02

Title

WP Directory Kit < 1.2.3 - Unauthenticated Arbitrary Settings Update

Slug

Published

2023-04-28

Title

WP Directory Kit < 1.2.0 - Cross-Site Request Forgery

Slug

Published

2023-05-26

Title

WP Directory Kit < 1.2.0 - Unauthenticated Local File Inclusion

Slug

Published

2023-06-12

Title

WP Directory Kit < 1.2.4 - Missing Authorization for Plugin Settings Update

Slug

Published

2023-04-28

Title

WP Directory Kit < 1.2.2 - Cross-Site Request Forgery to Plugin Settings Update

Slug

Published

2023-04-27

Title

WP Directory Kit < 1.2.0 - Open Redirect

Slug

Published

2023-09-05

Title

WP Directory Kit < 1.2.7 - Missing Authorization

Slug

Published

2024-03-25

Title

WP Directory Kit < 1.3.0 - Reflected Cross-Site Scripting

Slug

Published

2024-04-04

Title

WP Directory Kit < 1.3.1 - Authenticated (Subscriber+) SQL Injection

Slug

Published

2024-07-04

Title

WP Directory Kit < 1.3.6 - Reflected Cross-Site Scripting

Slug

Published

2025-09-26

Title

WP Directory Kit < 1.4.1 - Missing Authorization

Slug

Published

2025-11-20

Title

WP Directory Kit < 1.4.4 - Unauthenticated SQL Injection via select_2_ajax() Function

Slug

Published

2025-11-26

Title

WP Directory Kit < 1.4.6 - Reflected Cross-Site Scripting via 'order_by' Parameter

Slug

Published

2025-12-01

Title

WP Directory Kit < 1.4.7 - Authenticated (Admin+) SQL Injection

Slug

Published

2025-12-03

Title

WP Directory Kit < 1.4.5 - Privilege Escalation via Account Takeover

Slug

Published

2025-12-12

Title

WP Directory Kit < 1.4.8 - Unauthenticated SQL Injection

Slug

Published

2026-01-23

Title

WP Directory Kit < 1.5.0 - Unauthenticated Email Exposure via wdk_public_action

Slug

Published

2016-05-30

Title

wpDiscuz < 3.2.0 - Reflected Cross-Site Scripting (XSS)

Slug

Published

2020-06-12

Title

wpDiscuz < 5.3.6 - Unauthenticated SQL Injection

Slug

Published

2020-07-28

Title

Comments - wpDiscuz 7.0.0 - 7.0.4 - Unauthenticated Arbitrary File Upload

Slug

Published

2021-09-13

Title

Comments - wpDiscuz < 7.3.2 - Admin+ Stored Cross-Site Scripting

Slug

Published

2021-10-11

Title

wpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRF