WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
directorypress
Published
2025-01-06
Title
DirectoryPress < 3.6.20 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
directorypress
Published
2025-04-04
Title
DirectoryPress < 3.6.23 - Cross-Site Request Forgery
Slug
directorypress
Published
2025-10-18
Title
DirectoryPress <= 3.6.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
directorypress-frontend
Published
2025-02-14
Title
DirectoryPress Frontend < 2.8.0 - Cross-Site Request Forgery to Listing Status Update
Slug
dirtysuds-embed-pdf
Published
2023-02-02
Title
Embed PDF <= 1.0.6 - Contributor+ Stored XSS via Shortcode
Slug
disable-admin-notices
Published
2024-11-13
Title
Disable Admin Notices individually < 1.4.1 - Cross-Site Request Forgery
Slug
disable-auto-updates
Published
2025-02-18
Title
Disable Auto Updates <= 1.4 - Cross-Site Request Forgery to Auto-update Disable
Slug
disable-comments
Published
2014-08-01
Title
Disable Comments 1.0.3 - disable_comments_settings.php Comment Status Manipulation CSRF
Slug
disable-comments-wpz
Published
2024-04-12
Title
Disable Comments | WPZest <= 1.51 - Authenticated (Administrator+) SQL Injection
Slug
disable-contect-editor-for-specific-template
Published
2025-10-23
Title
Disable Content Editor For Specific Template <= 2.0 - Cross-Site Request Forgery to Template Configuration Update
Slug
disable-dashboard-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
disable-elementor-editor-translation
Published
2025-02-03
Title
Disable Elementor Editor Translation < 1.0.3 - Missing Authorization
Slug
disable-image-right-click
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
disable-right-click-for-wp
Published
2022-05-04
Title
Disable Right Click For WP <= 1.1.6 - Arbitrary Settings Update via CSRF
Slug
disable-right-click-powered-by-pixterme
Published
2025-07-23
Title
Multiple Plugins from itayamar - Supply Chain Compromise
Slug
disable-update-notifications
Published
2023-06-13
Title
Disable WordPress Update Notifications < 2.4.2 - Settings Update via CSRF
Slug
disable-user-login
Published
2023-11-15
Title
Disable User Login < 1.3.9 - User Login Toggle via CSRF
Slug
disabler
Published
2023-07-20
Title
Disabler < 4.0.0 - CSRF
Slug
disc-golf-manager
Published
2024-10-09
Title
Disc Golf Manager <= 1.0.0 - Unauthenticated PHP Object Injection
Slug
disclosure-policy-plugin
Published
2014-08-01
Title
Disclosure Policy 1.0 - Remote File Inclusion
Slug
discount-and-dynamic-pricing
Published
2025-05-30
Title
Dynamic Pricing and Discount Rules < 2.3.0 - Cross-Site Request Forgery
Slug
display-a-meta-field-as-block
Published
2024-08-16
Title
Meta Field Block < 1.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
display-admin-page-on-frontend
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
display-admin-page-on-frontend
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
display-admin-page-on-frontend
Published
2025-09-22
Title
WP Frontend Admin < 1.22.8 - Contributor+ Stored XSS