WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
d-bargain
Published
2023-05-12
Title
DBargain < 4.0.0 - Admin+ Stored XSS
Slug
da-reactions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
da-reactions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
da-reactions
Published
2024-10-14
Title
Da Reactions < 5.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dadata-ru
Published
2025-06-05
Title
«Подсказки» от DaData.ru <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
dadevarzan-common
Published
2025-09-03
Title
Dadevarzan WordPress Common < 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
daext-autolinks-manager
Published
2023-11-13
Title
Autolinks Manager < 1.10.05 - CSRF
Slug
daggerhart-openid-connect-generic
Published
2021-04-07
Title
OpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross Site Scripting (XSS) via Login Error
Slug
daggerhart-openid-connect-generic
Published
2025-12-17
Title
OpenID Connect Generic Client < 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
daily-image
Published
2024-11-04
Title
Daily Image <= 1.0 - Reflected Cross-Site Scripting
Slug
daily-prayer-time-for-mosques
Published
2021-08-10
Title
Daily Prayer Time < 2021.08.10 - Admin+ Stored XSS
Slug
daily-prayer-time-for-mosques
Published
2022-03-23
Title
Daily Prayer Time < 2022.03.01 - Unauthenticated SQLi
Slug
daily-prayer-time-for-mosques
Published
2023-03-08
Title
Daily Prayer Time < 2023.05.05 - Contributor+ Stored XSS
Slug
daily-prayer-time-for-mosques
Published
2023-03-08
Title
Daily Prayer Time < 2023.03.18 - Settings Update via CSRF
Slug
daily-prayer-time-for-mosques
Published
2023-11-15
Title
Daily Prayer Time < 2023.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
daily-prayer-time-for-mosques
Published
2024-09-24
Title
Daily Prayer Time < 2024.09.14 - Authenticated (Contributor+) SQL Injection
Slug
daily-proverb
Published
2025-01-16
Title
Daily Proverb <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
daisycon
Published
2025-04-04
Title
Daisycon prijsvergelijkers < 4.9.0 - Contributor+ SQL Injection
Slug
daisycon
Published
2025-05-30
Title
Daisycon prijsvergelijkers < 5.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dancepress-trwa
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
dancepress-trwa
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
dancepress-trwa
Published
2024-11-28
Title
DancePress (TRWA) <= 3.1.11 - Cross-Site Request Forgery
Slug
dandyid-services
Published
2014-12-14
Title
DandyID Services <= 1.5.9 - Multiple CSRF
Slug
dans-gcal
Published
2023-12-27
Title
Dan's Embedder for Google Calendar < 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
dap-to-autoresponders-daar
Published
2025-03-28
Title
DAP to Autoresponders Email Syncing <= 1.0 - Unauthenticated Information Exposure