WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
docket-cache
Published
2025-04-17
Title
Docket Cache < 24.07.03 - Unauthenticated Local File Inclusion
Slug
docket-cache
Published
2025-12-24
Title
Docket Cache < 24.07.04 - Unauthenticated Local File Inclusion
Slug
docket-cache
Published
2026-01-07
Title
Docket Cache < 24.07.05 - Missing Authorization
Slug
docodoco-store-locator
Published
2025-10-14
Title
DocoDoco Store Locator <= 1.0.1 - Authenticated (Editor+) Arbitrary File Upload
Slug
docollipics-faustball-de
Published
2024-04-30
Title
Tabellen von faustball.com < 2.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
docpro
Published
2025-03-23
Title
Docpro <= 2.0.1 - Unauthenticated Local File Inclusion
Slug
docspress
Published
2025-06-05
Title
DocsPress < 2.5.3 - Missing Authorization
Slug
doctor-appointment-booking
Published
2025-02-21
Title
Doctor Appointment Booking <= 1.0.0 - Authenticated (Subscriber+) SQL Injection
Slug
doctor-appointment-booking
Published
2025-02-21
Title
Doctor Appointment Booking <= 1.0.0 - Authenticated (Subscriber+) Local File Inclusion
Slug
doctor-listing
Published
2023-03-06
Title
Multiple e-plugins - Subscriber+ Privilege Escalation
Slug
doctreat_core
Published
2026-06-09
Title
Doctreat Core < 1.7.0 - Unauthenticated Privilege Escalation
Slug
doctreat_core
Published
2026-10-05
Title
Doctreat Core <= 1.7.0 - Unauthenticated Privilege Escalation
Slug
document
Published
2025-01-31
Title
Document Block – Upload & Embed Docs <= 1.1.0 - Missing Authorization
Slug
document-data-automation
Published
2024-11-19
Title
Document & Data Automation < 1.6.2 - Cross-Site Request Forgery
Slug
document-emberdder
Published
2022-01-03
Title
Document Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure
Slug
document-emberdder
Published
2022-01-03
Title
Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure
Slug
document-emberdder
Published
2025-11-04
Title
Document Embedder – Embed PDFs, Word, Excel, and Other Files < 2.0.1 - Missing Authorization to Unauthenticated Document Manipulation
Slug
document-emberdder
Published
2026-01-27
Title
Document Embedder < 2.0.5 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion
Slug
document-emberdder
Published
2026-10-09
Title
Document Embedder – let visitors read files without downloading <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting
Slug
document-emberdder
Published
2026-08-25
Title
Document Embedder < 2.3.1 - Unauthenticated Private Document Download via Token Oracle
Slug
document-emberdder
Published
2026-10-27
Title
Document Embedder < 2.4.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute
Slug
document-engine
Published
2025-09-03
Title
Document Engine < 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
document-gallery
Published
2026-07-10
Title
Document Gallery < 5.1.1 - Unauthenticated Stored Cross-Site Scripting
Slug
document-gallery
Published
2026-07-06
Title
Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery
Slug
document-gallery
Published
2026-10-05
Title
Document Gallery < 5.1.2 - Unauthenticated Stored Cross-Site Scripting