WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
drawblog
Published
2014-08-01
Title
drawblog - CSRF
Slug
drawblog
Published
2021-06-28
Title
DrawBlog <= 0.90 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
drawit
Published
2023-11-16
Title
DrawIt (draw.io) <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dream-gallery
Published
2025-12-04
Title
dream gallery <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'dreampluginsmain' AJAX Action
Slug
dreamgrow-scroll-triggered-box
Published
2024-02-02
Title
Scroll Triggered Box <= 2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
dreamstime-stock-photos
Published
2025-02-02
Title
Dreamstime Stock Photos < 4.2 - Reflected Cross-Site Scripting
Slug
drip-feed-content-extended-for-learndash
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
drive-folder-embeder
Published
2025-06-25
Title
Drive Folder Embedder <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via tablecssclass Parameter
Slug
drivr-google-drive-file-picker
Published
2025-02-18
Title
Drivr Lite – Google Drive Plugin plugin for WordPress <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
drm-protected-video-streaming
Published
2025-01-07
Title
S3Player – WooCommerce & Elementor Integration <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
drm-protected-video-streaming
Published
2024-12-26
Title
drm-protected-video-streaming <= 4.2.1 - Reflected XSS
Slug
droip
Published
2024-08-26
Title
Droip < 2.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Change
Slug
droip
Published
2024-08-26
Title
Droip < 2.5.2 - Unauthenticated Arbitrary File Deletion
Slug
droip
Published
2025-07-24
Title
Droip < 2.5.2 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
droip
Published
2025-07-24
Title
Droip < 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Many Actions
Slug
droit-dark-mode
Published
2023-11-07
Title
Droit Dark Mode <= 1.1.2 - Cross-Site Request Forgery
Slug
droit-elementor-addons
Published
2024-01-08
Title
Droit Elementor Addons <= 3.1.5 - Cross-Site Request Forgery
Slug
droit-elementor-addons
Published
2024-03-07
Title
Droit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
drop-caps
Published
2025-04-24
Title
Drop Caps <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
drop-in-image-slideshow-gallery
Published
2024-11-08
Title
drop in image slideshow gallery <= 12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
drop-shadow-boxes
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
drop-shadow-boxes
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
drop-shadow-boxes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
drop-shadow-boxes
Published
2023-05-15
Title
Drop Shadow Boxes < 1.7.11 - Contributor+ Cross-Site Scripting
Slug
drop-shadow-boxes
Published
2023-11-20
Title
Drop Shadow Boxes < 1.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode