WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dark-mode
Published
2018-01-12
Title
Dark Mode <= 1.6 - Stored XSS
Slug
dark-mode-for-wp-dashboard
Published
2024-08-16
Title
Dark Mode for WP Dashboard < 1.2.4 - Cross-Site Request Forgery
Slug
darkmysite
Published
2024-10-24
Title
DarkMySite – Advanced Dark Mode Plugin for WordPress <= 1.2.8 - Cross-Site Request Forgery
Slug
dashboard-notepad
Published
2025-09-22
Title
Dashboard Notepad <= 1.42 - Cross-Site Request Forgery
Slug
dashboard-notepads
Published
2025-04-17
Title
Dashboard Notepads <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
dashboard-to-do-list
Published
2024-04-10
Title
Dashboard To-Do List < 1.3.2 - Cross-Site Request Forgery via ardtdw_widgetupdate()
Slug
dashboard-to-do-list
Published
2024-06-06
Title
Dashboard To-Do List < 1.3.0 - Missing Authorization via ardtdw_widgetsetup()
Slug
dashboard-widget-sidebar
Published
2025-06-27
Title
Dashboard Widget Sidebar <= 1.2.3 - Missing Authorization
Slug
dashboard-widgets-suite
Published
2023-02-27
Title
Dashboard Widgets Suite < 3.2.2 - Admin+ Stored XSS
Slug
dashboard-widgets-suite
Published
2023-12-04
Title
Dashboard Widgets Suite < 3.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
dashboard-widgets-suite
Published
2024-06-12
Title
Dashboard Widgets Suite < 3.4.4 - Reflected Cross-Site Scripting
Slug
dashi
Published
2025-04-17
Title
Dashi < 3.1.9 - Missing Authorization
Slug
dashing-memberships
Published
2024-11-04
Title
Dashing Memberships <= 1.1 - Reflected Cross-Site Scripting
Slug
dashylite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
dashylite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
data-dash
Published
2025-01-16
Title
Data Dash <= 1.2.3 - Reflected Cross-Site Scripting
Slug
data-dash
Published
2025-01-03
Title
Data Dash <= 1.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
data-tables-generator-by-supsystic
Published
2020-03-24
Title
Data Tables Generator By Supsystic < 1.9.92 - Insecure Permissions on AJAX Actions
Slug
data-tables-generator-by-supsystic
Published
2020-03-24
Title
Data Tables Generator By Supsystic < 1.9.92 - Authenticated Stored XSS
Slug
data-tables-generator-by-supsystic
Published
2020-03-24
Title
Data Tables Generator By Supsystic < 1.9.92 - CSRF to Stored XSS, Data Table Creations, Settings Modification
Slug
data-tables-generator-by-supsystic
Published
2021-02-08
Title
Data Tables Generator by Supsystic < 1.10.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
data-tables-generator-by-supsystic
Published
2021-02-08
Title
Data Tables Generator by Supsystic < 1.10.0 - Authenticated SQL Injection
Slug
data-tables-generator-by-supsystic
Published
2022-06-22
Title
Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting
Slug
data-tables-generator-by-supsystic
Published
2024-04-22
Title
Data Tables Generator by Supsystic < 1.10.32 - Missing Authorization
Slug
data-tables-generator-by-supsystic
Published
2024-12-30
Title
Data Tables Generator by Supsystic < 1.10.37 - Missing Authorization