WordPress Plugin Vulnerabilities | Page 263 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2026-08-11

Title

WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection

Slug

Published

2026-08-12

Title

Directory Kit < 1.5.5 - Unauthenticated SQL Injection

Slug

Published

2026-08-10

Title

WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category

Slug

Published

2026-08-10

Title

WP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section Parameter

Slug

Published

2026-08-14

Title

WP Directory Kit < 1.5.7 - Admin+ SQL Injection via section Parameter

Slug

Published

2026-08-17

Title

WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_user

Slug

Published

2026-09-15

Title

WP Directory Kit < 1.5.5 - Authenticated (Custom+) SQL Injection via 'order_by' Parameter

Slug

Published

2026-09-29

Title

WP Directory Kit < 1.5.5 - Authenticated (Custom+) SQL Injection via 'data_fields_list' Parameter

Slug

Published

2026-09-12

Title

WP Directory Kit < 1.5.9 - Editor+ SQL Injection via Elementor Category and Location Widget Settings

Slug

Published

2026-09-12

Title

WP Directory Kit < 1.6.1 - Contributor+ Non-Public Listing Field Disclosure via Shortcodes

Slug

Published

2026-09-12

Title

WP Directory Kit < 1.6.1 - Unauthenticated Unpublished Listing Disclosure via search_suggestion

Slug

Published

2026-09-24

Title

WP Directory Kit < 1.5.8 - Listing Admin+ Stored XSS via Category and Location Title and Icon Fields

Slug

Published

2026-10-30

Title

WP Directory Kit < 1.6.1 - Unauthenticated SQL Injection via 'idfield' Parameter

Slug

Published

2026-10-09

Title

WP Directory Kit < 1.6.0 - Authenticated (Subscriber+) SQL Injection via 'display_name' Profile Field (Second-Order)

Slug

Published

2016-05-30

Title

wpDiscuz < 3.2.0 - Reflected Cross-Site Scripting (XSS)

Slug

Published

2020-06-12

Title

wpDiscuz < 5.3.6 - Unauthenticated SQL Injection

Slug

Published

2020-07-28

Title

Comments - wpDiscuz 7.0.0 - 7.0.4 - Unauthenticated Arbitrary File Upload

Slug

Published

2021-09-13

Title

Comments - wpDiscuz < 7.3.2 - Admin+ Stored Cross-Site Scripting

Slug

Published

2021-10-11

Title

wpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRF

Slug

Published

2022-02-10

Title

wpDiscuz < 7.3.12 - Sensitive Information Disclosure

Slug

Published

2022-10-28

Title

Comments - wpDiscuz 7.4.2 - Subscriber+ IDOR

Slug

Published

2023-09-12

Title

wpDiscuz < 7.6.4 - Unauthenticated Data Modification via IDOR

Slug

Published

2023-09-12

Title

wpDiscuz < 7.6.4 - Post Rating Increase/Decrease iva IDOR

Slug

Published

2023-10-31

Title

wpDiscuz < 7.6.12 - Unauthenticated Stored XSS

Slug

Published

2023-09-18

Title

wpDiscuz < 7.6.6 - Unauthenticated SQL Injection