WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
data-tables-generator-by-supsystic
Published
2025-11-12
Title
Data Tables Generator by Supsystic < 1.10.46 - Authenticated (Admin+) Arbitrary File Deletion
Slug
data-visualizer
Published
2025-12-11
Title
Data Visualizer <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
database-audit
Published
2025-03-19
Title
WP Database Audit <= 1.0 - Reflected Cross-Site Scripting
Slug
database-backup
Published
2024-12-23
Title
Database Backup and check Tables Automated With Scheduler 2024 < 2.33 - Authenticated (Admin+) Arbitrary File Read
Slug
database-backup
Published
2025-02-28
Title
Database Backup and check Tables Automated With Scheduler 2024 < 2.36 - Authenticated (Administrator+) Sensitive Information Exposure
Slug
database-backup
Published
2025-02-28
Title
Database Backup and check Tables Automated With Scheduler 2024 < 2.37 - Authenticated (Administrator+) Arbitrary File Deletion
Slug
database-backups
Published
2021-03-10
Title
Database Backups <= 1.2.2.6 - CSRF to Backup Download
Slug
database-cleaner
Published
2023-12-27
Title
Database Cleaner < 0.9.9 - Sensitive Information Exposure via Log File
Slug
database-cleaner
Published
2024-06-06
Title
Database Cleaner < 1.0.6 - Authenticated (Admin+) Arbitrary File Read
Slug
database-collation-fix
Published
2023-07-11
Title
Database Collation Fix < 1.2.8 - Cross-Site Request Forgery
Slug
database-for-cf7
Published
2023-11-29
Title
Database for CF7 < 1.2.5 - Subscriber+ CF7 DB Entries Deletion
Slug
database-peek
Published
2022-03-01
Title
Database Peek <= 1.2 - Reflected Cross-Site Scripting
Slug
database-sync
Published
2015-08-04
Title
Database Sync <= 0.4 - Reflected Cross-Site Scripting (XSS)
Slug
database-sync
Published
2025-01-16
Title
Database Sync <= 0.5.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
database-to-excel
Published
2025-09-05
Title
Database to Excel <= 1.0 - Cross-Site Request Forgery
Slug
database-toolset
Published
2025-04-09
Title
Database Toolset <= 1.8.4 - Unauthenticated Arbitrary File Deletion
Slug
database-toolset
Published
2025-04-23
Title
Database Toolset <= 1.8.4 - Unauthenticated Arbitrary File Deletion
Slug
database-toolset
Published
2025-05-02
Title
Database Toolset <= 1.8.4 - Unauthenticated Sensitive Information Exposure via Backup Files
Slug
datamentor
Published
2024-10-31
Title
DataMentor <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
datasets-manager-by-arttia-creative
Published
2024-11-11
Title
Datasets Manager by Arttia Creative <= 1.5 - Unauthenticated Arbitrary File Upload
Slug
date-counter
Published
2025-10-11
Title
Date counter <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
date-time-picker-field
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
date-time-picker-field
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
davenport
Published
2025-06-25
Title
Davenport - Versatile Blog and Magazine WordPress Theme <= 1.3 - Unauthenticated Local File Inclusion
Slug
daves-wordpress-live-search
Published
2017-05-01
Title
Dave's WordPress Live Search <= 4.5 - Reflected Cross-Site Scripting (XSS)