WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
divi-booster
Published
2026-02-18
Title
Divi Booster < 5.0.2 - Unauthenticated PHP Object Injection
Slug
divi-builder
Published
2016-02-18
Title
ElegantThemes - Privilege Escalation
Slug
divi-builder
Published
2018-10-30
Title
ElegantThemes (Divi, Extra, divi-builder) - Authenticated Stored Cross-Site Scripting (XSS)
Slug
divi-builder
Published
2020-01-02
Title
ElegantThemes (Divi, Extra, divi-builder < 4.0.10) - Authenticated Code Injection
Slug
divi-builder
Published
2020-08-03
Title
Elegant Themes (Divi 3.0 - 4.5.2, Extra 2.0 - 4.5.2, Divi Builder 2.0 - 4.5.2) - Authenticated Arbitrary File Upload
Slug
divi-builder
Published
2024-05-09
Title
Elegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
divi-builder
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Slug
dj-email-publish
Published
2021-09-09
Title
DJ EmailPublish <= 1.7.2 - Reflected Cross-Site Scripting
Slug
dk-pdf
Published
2024-09-30
Title
DK PDF < 1.9.7 - Reflected Cross-Site Scripting
Slug
dk-pdf
Published
2026-01-15
Title
DK PDF – WordPress PDF Generator < 2.3.1 - Authenticated (Author+) Server-Side Request Forgery
Slug
dk-pricr-responsive-pricing-table
Published
2023-02-07
Title
Responsive Pricing Table < 5.1.7 - Contributor+ Stored XSS
Slug
dk-pricr-responsive-pricing-table
Published
2023-10-16
Title
Responsive Pricing Table < 5.1.8 - Admin+ Stored Cross-Site Scriping
Slug
dk-pricr-responsive-pricing-table
Published
2024-02-26
Title
Responsive Pricing Table < 5.1.11 - Author+ Stored XSS
Slug
dk-pricr-responsive-pricing-table
Published
2026-01-06
Title
Responsive Pricing Table < 5.1.13 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
dk-pricr-responsive-pricing-table
Published
2026-01-06
Title
Responsive Pricing Table < 5.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'table_currency'
Slug
dl-leadback
Published
2025-02-14
Title
DL Leadback <= 1.2.1 - Reflected Cross-Site Scripting
Slug
dl-robotstxt
Published
2024-06-27
Title
DL Robots.txt <= 1.2 - Admin+ Stored XSS
Slug
dl-verification
Published
2024-06-27
Title
DL Verification <= 1.2 - Admin+ Stored XSS
Slug
dl-yandex-metrika
Published
2024-06-07
Title
DL Yandex Metrika <= 1.2 - Admin+ Stored XSS
Slug
dm-albums
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
dm-albums
Published
2014-08-01
Title
DM Albums - Multiple Remote File Disclosure
Slug
dmca-badge
Published
2025-12-31
Title
DMCA Protection Badge <= 2.2.0 - Missing Authorization
Slug
dmca-watermarker
Published
2014-07-02
Title
Dmca Watermarker < 1.1 - XSS
Slug
dms
Published
2025-04-25
Title
Document Management System <= 1.24 - Reflected Cross-Site Scripting
Slug
dmsguestbook
Published
2014-08-01
Title
dmsguestbook 1.7.0 - Multiple Remote Vulnerabilities