WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
digiseller
Published
2025-10-14
Title
Digiseller < 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
digital-climate-strike-wp
Published
2021-01-21
Title
Digital Climate Strike WP <= 1.0.0 - Redirect to Malicious Website due to Compromised JS Asset
Slug
digital-events-calendar
Published
2025-09-10
Title
Digital Events Calendar <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via column Parameter
Slug
digital-license-manager
Published
2025-03-24
Title
Digital License Manager < 1.7.4 - Reflected Cross-Site Scripting via remove_query_arg Function
Slug
digital-lottery
Published
2024-10-14
Title
Digital Lottery <= 3.0.5 - Unauthenticated Arbitrary File Upload
Slug
digital-marketing-agency-templates-for-elementor
Published
2025-06-12
Title
Digital Marketing and Agency Templates Addons for Elementor <= 1.1.1 - Cross-Site Request Forgery to Import
Slug
digital-publications-by-supsystic
Published
2021-02-08
Title
Digital Publications by Supsystic < 1.6.12 - Authenticated Path Traversal
Slug
digital-publications-by-supsystic
Published
2021-02-08
Title
Digital Publications by Supsystic < 1.7.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
digital-publications-by-supsystic
Published
2022-07-21
Title
Digital Publications by Supsystic < 1.7.4 - Admin+ Stored Cross-Site Scripting
Slug
digital-publications-by-supsystic
Published
2023-12-08
Title
Digital Publications by Supsystic < 1.7.7 - Cross-Site Request Forgery via AJAX action
Slug
digital-publications-by-supsystic
Published
2024-04-11
Title
Digital Publications by Supsystic < 1.7.8 - Cross-Site Request Forgery
Slug
digital-publications-by-supsystic
Published
2024-04-29
Title
Digital Publications by Supsystic < 1.7.8 - Missing Authorization
Slug
digital-river-global-commerce
Published
2024-06-25
Title
Various Plugins <= Various Version - Use of Polyfill.io
Slug
digitimber-cpanel-integration
Published
2025-01-31
Title
DigiTimber cPanel Integration < 1.4.8 - Cross-Site Request Forgery to Stored Cross-site Scripting
Slug
digits
Published
2024-02-22
Title
Digits < 8.4.2 - Cross-Site Request Forgery to Privilege Escalation
Slug
digits
Published
2025-04-30
Title
Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing
Slug
digiwidgets-image-editor
Published
2025-04-01
Title
DigiWidgets Image Editor <= 1.10 - Unauthenticated Remote Code Execution
Slug
dima-take-action
Published
2025-04-01
Title
Dima Take Action <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
dimage-360
Published
2024-06-18
Title
DImage 360 <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dino-game
Published
2024-11-20
Title
Dino Game < 1.2.0 - Contributor+ Stored XSS
Slug
direct-payments-wp
Published
2025-12-31
Title
Direct Payments WP <= 1.3.0 - Missing Authorization
Slug
direct-payments-wp
Published
2025-12-31
Title
Direct Payments WP <= 1.3.0 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
directdownload
Published
2017-01-17
Title
Direct Download for WooCommerce <= 1.15 - Unauthenticated LFI
Slug
directiq-wp
Published
2025-06-23
Title
DirectIQ Email Marketing <= 2.0 - Unauthenticated SQL Injection
Slug
directories
Published
2020-12-12
Title
Directories Pro < 1.3.46 - Authenticated Reflected Cross-Site Scripting