WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
disable-contect-editor-for-specific-template
Published
2025-10-23
Title
Disable Content Editor For Specific Template <= 2.0 - Cross-Site Request Forgery to Template Configuration Update
Slug
disable-dashboard-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
disable-elementor-editor-translation
Published
2025-02-03
Title
Disable Elementor Editor Translation < 1.0.3 - Missing Authorization
Slug
disable-image-right-click
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
disable-right-click-for-wp
Published
2022-05-04
Title
Disable Right Click For WP <= 1.1.6 - Arbitrary Settings Update via CSRF
Slug
disable-right-click-powered-by-pixterme
Published
2025-07-23
Title
Multiple Plugins from itayamar - Supply Chain Compromise
Slug
disable-update-notifications
Published
2023-06-13
Title
Disable WordPress Update Notifications < 2.4.2 - Settings Update via CSRF
Slug
disable-user-login
Published
2023-11-15
Title
Disable User Login < 1.3.9 - User Login Toggle via CSRF
Slug
disabler
Published
2023-07-20
Title
Disabler < 4.0.0 - CSRF
Slug
disc-golf-manager
Published
2024-10-09
Title
Disc Golf Manager <= 1.0.0 - Unauthenticated PHP Object Injection
Slug
disclosure-policy-plugin
Published
2014-08-01
Title
Disclosure Policy 1.0 - Remote File Inclusion
Slug
discount-and-dynamic-pricing
Published
2025-05-30
Title
Dynamic Pricing and Discount Rules < 2.3.0 - Cross-Site Request Forgery
Slug
display-a-meta-field-as-block
Published
2024-08-16
Title
Meta Field Block < 1.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
display-admin-page-on-frontend
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
display-admin-page-on-frontend
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
display-admin-page-on-frontend
Published
2025-09-22
Title
WP Frontend Admin < 1.22.8 - Contributor+ Stored XSS
Slug
display-custom-post
Published
2023-11-23
Title
Display Custom Post <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
display-during-conditional-shortcode
Published
2026-02-17
Title
Display During Conditional Shortcode < 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via message Parameter
Slug
display-future-posts
Published
2024-12-12
Title
Display Future Posts <= 0.2.3 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
display-medium-posts
Published
2024-10-03
Title
Display Medium Posts <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via display_medium_posts Shortcode
Slug
display-metadata
Published
2023-05-30
Title
Display post meta, term meta, comment meta, and user meta <= 1.0.0 - Contributor+ Stored XSS
Slug
display-pages-shortcode
Published
2025-11-20
Title
Display Pages Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
display-post-meta
Published
2025-03-20
Title
Display Post Meta <= 2.4.4 -Reflected Cross-Site Scripting
Slug
display-post-metadata
Published
2021-11-15
Title
Display Post Metadata < 1.5.0 - Contributor+ Stored Cross-Site Scripting
Slug
display-product-variations-dropdown-on-shop-page
Published
2025-04-04
Title
Display product variations dropdown on shop page <= 1.1.3 - Missing Authorization