WordPress Plugin Vulnerabilities | Page 243 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-03-25

Title

WP Directory Kit < 1.3.0 - Reflected Cross-Site Scripting

Slug

Published

2024-04-04

Title

WP Directory Kit < 1.3.1 - Authenticated (Subscriber+) SQL Injection

Slug

Published

2024-07-04

Title

WP Directory Kit < 1.3.6 - Reflected Cross-Site Scripting

Slug

Published

2025-09-26

Title

WP Directory Kit < 1.4.1 - Missing Authorization

Slug

Published

2025-11-20

Title

WP Directory Kit < 1.4.4 - Unauthenticated SQL Injection via select_2_ajax() Function

Slug

Published

2025-11-26

Title

WP Directory Kit < 1.4.6 - Reflected Cross-Site Scripting via 'order_by' Parameter

Slug

Published

2025-12-01

Title

WP Directory Kit < 1.4.7 - Authenticated (Admin+) SQL Injection

Slug

Published

2025-12-03

Title

WP Directory Kit < 1.4.5 - Privilege Escalation via Account Takeover

Slug

Published

2025-12-12

Title

WP Directory Kit < 1.4.8 - Unauthenticated SQL Injection

Slug

Published

2026-01-23

Title

WP Directory Kit < 1.5.0 - Unauthenticated Email Exposure via wdk_public_action

Slug

Published

2026-04-08

Title

WP Directory Kit < 1.5.1 - Missing Authorization

Slug

Published

2026-04-13

Title

WP Directory Kit < 1.5.1 - Unauthenticated SQL Injection

Slug

Published

2026-05-14

Title

WP Directory Kit < 1.5.2 - Unauthenticated SQL Injection

Slug

Published

2026-08-03

Title

WP Directory Kit < 1.5.5 - Subscriber+ SQL Injection via data_fields_list Parameter

Slug

Published

2026-08-03

Title

WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosure

Slug

Published

2026-08-03

Title

WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure

Slug

Published

2026-08-03

Title

WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosure

Slug

Published

2026-08-03

Title

WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameter

Slug

Published

2026-08-11

Title

WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection

Slug

Published

2026-08-12

Title

Directory Kit < 1.5.5 - Unauthenticated SQL Injection

Slug

Published

2026-08-10

Title

WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category

Slug

Published

2026-08-10

Title

WP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section Parameter

Slug

Published

2026-08-14

Title

WP Directory Kit < 1.5.7 - Admin+ SQL Injection via section Parameter

Slug

Published

2026-08-17

Title

WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_user

Slug

Published

2016-05-30

Title

wpDiscuz < 3.2.0 - Reflected Cross-Site Scripting (XSS)