WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
distance-based-shipping-calculator
Published
2025-02-14
Title
Distance Based Shipping Calculator < 2.0.23 - Missing Authorization
Slug
distance-based-shipping-calculator
Published
2025-02-14
Title
Distance Based Shipping Calculator < 2.0.23 - Missing Authorization to Unauthenticated Settings Update
Slug
distance-rate-shipping-for-woocommerce
Published
2025-02-03
Title
Distance Rate Shipping For WooCommerce <= 1.3.4 - Authenticated (Subscriber+) SQL Injection
Slug
distancr
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ditty-news-ticker
Published
2022-02-09
Title
Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)
Slug
ditty-news-ticker
Published
2023-02-20
Title
Ditty < 3.0.33 - Contributor+ Stored XSS
Slug
ditty-news-ticker
Published
2023-08-29
Title
Ditty < 3.1.25 - Reflected XSS
Slug
ditty-news-ticker
Published
2023-11-13
Title
Ditty < 3.1.25 - Missing Authorization via save_ditty_permissions_check
Slug
ditty-news-ticker
Published
2024-04-16
Title
Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.32 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
ditty-news-ticker
Published
2024-05-06
Title
Ditty < 3.1.36 - Author+ Stored XSS
Slug
ditty-news-ticker
Published
2024-05-07
Title
Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.39 - Authenticated (Contributor+) PHP Object Injection
Slug
ditty-news-ticker
Published
2024-06-22
Title
Ditty < 3.1.43 - Author+ Stored XSS
Slug
ditty-news-ticker
Published
2024-07-15
Title
Ditty < 3.1.45 - Author+ Stored XSS
Slug
ditty-news-ticker
Published
2024-08-02
Title
Ditty 3.1.39-3.1.45 - Author+ Stored XSS
Slug
ditty-news-ticker
Published
2024-10-31
Title
Ditty < 3.1.47 - Author+ Stored XSS
Slug
ditty-news-ticker
Published
2024-11-14
Title
Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.52 - Author+ Stored XSS
Slug
ditty-news-ticker
Published
2025-08-18
Title
Ditty < 3.1.58 - Unauthenticated SSRF
Slug
ditty-news-ticker
Published
2025-09-26
Title
Ditty < 3.1.59 - Contributor+ Stored XSS
Slug
ditty-news-ticker
Published
2026-05-21
Title
Ditty < 3.1.66 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via ditty_init AJAX Action
Slug
divebook
Published
2020-12-09
Title
DiveBook <= 1.1.4 - Improper Authorisation Check
Slug
divebook
Published
2020-12-09
Title
DiveBook <= 1.1.4 - Unauthenticated SQL Injection
Slug
divebook
Published
2020-12-09
Title
DiveBook <= 1.1.4 - Unauthenticated Reflected XSS
Slug
divelogs-widget
Published
2025-12-11
Title
Divelogs Widget < 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
divi-booster
Published
2026-02-18
Title
Divi Booster < 5.0.2 - Unauthenticated PHP Object Injection
Slug
divi-builder
Published
2016-02-18
Title
ElegantThemes - Privilege Escalation