WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
d-bargain
Published
2023-05-12
Title
DBargain < 4.0.0 - Admin+ Stored XSS
Slug
da-reactions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
da-reactions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
daext-autolinks-manager
Published
2023-11-13
Title
Autolinks Manager < 1.10.05 - CSRF
Slug
daggerhart-openid-connect-generic
Published
2021-04-07
Title
OpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross Site Scripting (XSS) via Login Error
Slug
daily-prayer-time-for-mosques
Published
2021-08-10
Title
Daily Prayer Time < 2021.08.10 - Admin+ Stored XSS
Slug
daily-prayer-time-for-mosques
Published
2022-03-23
Title
Daily Prayer Time < 2022.03.01 - Unauthenticated SQLi
Slug
daily-prayer-time-for-mosques
Published
2023-03-08
Title
Daily Prayer Time < 2023.05.05 - Contributor+ Stored XSS
Slug
daily-prayer-time-for-mosques
Published
2023-03-08
Title
Daily Prayer Time < 2023.03.18 - Settings Update via CSRF
Slug
daily-prayer-time-for-mosques
Published
2023-11-15
Title
Daily Prayer Time < 2023.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
dancepress-trwa
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
dancepress-trwa
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
dandyid-services
Published
2014-12-14
Title
DandyID Services <= 1.5.9 - Multiple CSRF
Slug
dans-gcal
Published
2023-12-27
Title
Dan's Embedder for Google Calendar < 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
dark-mode
Published
2018-01-12
Title
Dark Mode <= 1.6 - Stored XSS
Slug
dashboard-to-do-list
Published
2024-04-10
Title
Dashboard To-Do List < 1.3.2 - Cross-Site Request Forgery via ardtdw_widgetupdate()
Slug
dashboard-widgets-suite
Published
2023-02-27
Title
Dashboard Widgets Suite < 3.2.2 - Admin+ Stored XSS
Slug
dashboard-widgets-suite
Published
2023-12-04
Title
Dashboard Widgets Suite < 3.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
dashylite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
dashylite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
data-tables-generator-by-supsystic
Published
2020-03-24
Title
Data Tables Generator By Supsystic < 1.9.92 - Insecure Permissions on AJAX Actions
Slug
data-tables-generator-by-supsystic
Published
2020-03-24
Title
Data Tables Generator By Supsystic < 1.9.92 - Authenticated Stored XSS
Slug
data-tables-generator-by-supsystic
Published
2020-03-24
Title
Data Tables Generator By Supsystic < 1.9.92 - CSRF to Stored XSS, Data Table Creations, Settings Modification
Slug
data-tables-generator-by-supsystic
Published
2021-02-08
Title
Data Tables Generator by Supsystic < 1.10.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
data-tables-generator-by-supsystic
Published
2021-02-08
Title
Data Tables Generator by Supsystic < 1.10.0 - Authenticated SQL Injection