WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dk-pricr-responsive-pricing-table
Published
2026-01-06
Title
Responsive Pricing Table < 5.1.13 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
dk-pricr-responsive-pricing-table
Published
2026-01-06
Title
Responsive Pricing Table < 5.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'table_currency'
Slug
dl-leadback
Published
2025-02-14
Title
DL Leadback <= 1.2.1 - Reflected Cross-Site Scripting
Slug
dl-robotstxt
Published
2024-06-27
Title
DL Robots.txt <= 1.2 - Admin+ Stored XSS
Slug
dl-verification
Published
2024-06-27
Title
DL Verification <= 1.2 - Admin+ Stored XSS
Slug
dl-yandex-metrika
Published
2024-06-07
Title
DL Yandex Metrika <= 1.2 - Admin+ Stored XSS
Slug
dm-albums
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
dm-albums
Published
2014-08-01
Title
DM Albums - Multiple Remote File Disclosure
Slug
dmca-badge
Published
2025-12-31
Title
DMCA Protection Badge <= 2.2.0 - Missing Authorization
Slug
dmca-watermarker
Published
2014-07-02
Title
Dmca Watermarker < 1.1 - XSS
Slug
dms
Published
2025-04-25
Title
Document Management System <= 1.24 - Reflected Cross-Site Scripting
Slug
dmsguestbook
Published
2014-08-01
Title
dmsguestbook 1.7.0 - Multiple Remote Vulnerabilities
Slug
dn-cookie-notice
Published
2025-04-01
Title
Simple Fixed Notice <= 1.6 - Cross-Site Request Forgery
Slug
dn-footer-contacts
Published
2024-06-18
Title
DN Footer Contacts < 1.6.3 - Admin+ Stored XSS
Slug
dn-footer-contacts
Published
2025-04-01
Title
DN Footer Contacts <= 1.8 - Cross-Site Request Forgery
Slug
dn-popup
Published
2024-08-12
Title
DN Popup <= 1.2.2 - Settings Update via CSRF
Slug
dn-shipping-by-weight
Published
2024-12-06
Title
DN Shipping by Weight for WooCommerce < 1.2 - Settings Update via CSRF
Slug
dn-shipping-by-weight
Published
2025-04-10
Title
DN Shipping by Weight for WooCommerce < 1.2.1 - Reflected Cross-Site Scripting
Slug
dn-sitemap-control
Published
2025-01-16
Title
DN Sitemap Control <= 1.0.6 - Reflected Cross-Site Scripting
Slug
dnui-delete-not-used-image-wordpress
Published
2023-01-18
Title
DNUI <= 2.8.1 - Deletion of images through CSRF
Slug
do-spaces-sync
Published
2025-08-14
Title
DigitalOcean Spaces Sync <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
do-that-task
Published
2024-11-11
Title
Do That Task <= 1.5.5 - Unauthenticated Arbitrary File Upload
Slug
doaj-export
Published
2025-09-22
Title
DOAJ Export <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
dobsondev-shortcodes
Published
2025-04-01
Title
DobsonDev Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
doccheck-login
Published
2025-07-03
Title
DocCheck Login < 1.1.6 - Unauthorized Post Access