WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
digits
Published
2024-02-22
Title
Digits < 8.4.2 - Cross-Site Request Forgery to Privilege Escalation
Slug
digits
Published
2025-04-30
Title
Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing
Slug
digiwidgets-image-editor
Published
2025-04-01
Title
DigiWidgets Image Editor <= 1.10 - Unauthenticated Remote Code Execution
Slug
dima-take-action
Published
2025-04-01
Title
Dima Take Action <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
dimage-360
Published
2024-06-18
Title
DImage 360 <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dinatur
Published
2026-01-21
Title
Dinatur <= 1.18 - Unauthenticated Stored Cross-Site Scripting
Slug
dino-game
Published
2024-11-20
Title
Dino Game < 1.2.0 - Contributor+ Stored XSS
Slug
direct-payments-wp
Published
2025-12-31
Title
Direct Payments WP <= 1.3.0 - Missing Authorization
Slug
direct-payments-wp
Published
2025-12-31
Title
Direct Payments WP <= 1.3.0 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
directdownload
Published
2017-01-17
Title
Direct Download for WooCommerce <= 1.15 - Unauthenticated LFI
Slug
directiq-wp
Published
2025-06-23
Title
DirectIQ Email Marketing <= 2.0 - Unauthenticated SQL Injection
Slug
directories
Published
2020-12-12
Title
Directories Pro < 1.3.46 - Authenticated Reflected Cross-Site Scripting
Slug
directories
Published
2020-12-12
Title
Directories Pro < 1.3.46 - Authenticated Self-Reflected Cross-Site Scripting
Slug
directorist
Published
2021-11-16
Title
Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload
Slug
directorist
Published
2022-07-18
Title
Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload
Slug
directorist
Published
2022-07-26
Title
Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
Slug
directorist
Published
2022-08-10
Title
Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
Slug
directorist
Published
2022-11-16
Title
Directorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR
Slug
directorist
Published
2022-11-28
Title
Directorist < 7.4.4 - Subscriber+ Sensitive Information Disclosure
Slug
directorist
Published
2023-05-10
Title
Directorist < 7.5.4 - Admin+ LFI
Slug
directorist
Published
2023-06-07
Title
Directorist < 7.5.5 - Subscriber+ Arbitrary User Password Reset to Privilege Escalation
Slug
directorist
Published
2023-06-07
Title
Directorist < 7.5.5 - Subscriber+ Insecure Direct Object Reference to Arbitrary Post Deletion
Slug
directorist
Published
2024-02-12
Title
Directorist < 7.8.5 - Missing Authorization to Unauthenticated Settings Change
Slug
directorist
Published
2024-04-29
Title
Directorist < 7.9.0 - Missing Authorization
Slug
directorist
Published
2025-01-31
Title
Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings < 8.1 - Unauthenticated User Information Exposure