WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
document-gallery
Published
2026-10-13
Title
Document Gallery 4.0 - 5.1.1 - Contributor+ Stored XSS via Gallery Shortcode Attributes
Slug
document-gallery
Published
2026-10-13
Title
Document Gallery < 5.1.2 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons
Slug
document-gallery
Published
2026-10-13
Title
Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass
Slug
document-gallery
Published
2026-10-13
Title
Document Gallery < 5.1.2 - Reflected XSS via data-shortcode Attribute
Slug
document-gallery
Published
2026-10-13
Title
Document Gallery <= 5.1.1 - Unauthenticated Stored Cross-Site Scripting
Slug
document-library-lite
Published
2025-10-31
Title
Document Library Lite < 1.1.7 - Sensitive Information Exposure
Slug
document-library-lite
Published
2025-12-15
Title
Document Library Lite < 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
document-library-lite
Published
2025-12-15
Title
Document Library Lite < 1.2.0 - Unauthenticated Insecure Direct Object Reference
Slug
document-library-lite
Published
2026-10-29
Title
Document Library Lite < 1.3.1 - Unauthenticated Information Exposure
Slug
document-pro-elementor
Published
2025-11-10
Title
Document Pro Elementor – Documentation & Knowledge Base <= 1.0.9 - Unauthenticated Information Exposure
Slug
documentor-lite
Published
2022-04-05
Title
Documentor <= 1.5.3 - Unauthenticated SQLi
Slug
documentpress-display-any-document-on-your-site
Published
2024-10-21
Title
DocumentPress <= 2.1 - Reflected Cross-Site Scripting
Slug
docus
Published
2026-02-05
Title
Docus < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
docxpresso
Published
2025-04-03
Title
Docxpresso <= 2.6 - Authenticated (Contributor+) Arbitrary File Download
Slug
dofollow-case-by-case
Published
2023-09-22
Title
DoFollow Case by Case < 3.5.0 - Email&URLs Adding to Allowlist via CSRF
Slug
dofollow-case-by-case
Published
2025-05-07
Title
DoFollow Case by Case < 3.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
dofollow-case-by-case
Published
2025-05-07
Title
DoFollow Case by Case < 3.6.0 - Cross-Site Request Forgery
Slug
dofollow-case-by-case
Published
2025-10-26
Title
DoFollow Case by Case < 3.6.0 - Cross-Site Request Forgery
Slug
dofollow-case-by-case
Published
2026-10-01
Title
DoFollow Case by Case < 3.6.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content
Slug
dokan-lite
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
dokan-lite
Published
2021-03-01
Title
Multiple Plugins - CSRF Nonce Bypasses
Slug
dokan-lite
Published
2022-06-02
Title
Dokan < 3.6.4 - Vendor Stored Cross-Site Scripting
Slug
dokan-lite
Published
2022-11-21
Title
Dokan < 3.7.6 - Unauthenticated SQLi
Slug
dokan-lite
Published
2020-09-16
Title
Dokan < 3.0.9 - Cross-Site Request Forgery
Slug
dokan-lite
Published
2025-09-20
Title
Dokan < 4.1.4 - Shop Manager+ Privilege Escalation