WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dsgvo-all-in-one-for-wp
Published
2024-03-13
Title
DSGVO All in one for WP < 4.4 - Cross-Site Request Forgery
Slug
dsgvo-all-in-one-for-wp
Published
2024-08-26
Title
DSGVO All in one for WP < 4.6 - Contributor+ Stored XSS
Slug
dsgvo-all-in-one-for-wp
Published
2025-02-03
Title
DSGVO All in one for WP < 4.7 - Cross-Site Request Forgery to Account Deletion
Slug
dsgvo-youtube
Published
2024-04-16
Title
DSGVO Youtube < 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dsgvo-youtube
Published
2025-04-11
Title
DSGVO Youtube < 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dsidxpress
Published
2014-04-25
Title
Dsidxpress < 2.1.1 - XSS
Slug
dsp_dating
Published
2022-07-18
Title
WPDating < 7.4.0 - Multiple Unauthenticated SQLi
Slug
dsubscribers
Published
2017-07-06
Title
DSubscribers <= 1.2 - Authenticated SQL Injection
Slug
dt-reservation-plugin
Published
2025-10-21
Title
Reservation < 1.7 - Reflected Cross-Site Scripting
Slug
dt-reservation-plugin
Published
2026-01-13
Title
Reservation <= 1.7 - Missing Authorization to Unauthenticated Settings Update
Slug
dt-the7-core
Published
2025-12-05
Title
The7 Elements < 2.7.12 - Authenticated (Contributor+) Local File Inclusion
Slug
dtabs
Published
2022-03-01
Title
dTabs <= 1.4 - Reflected Cross-Site Scripting
Slug
dtc-documents
Published
2024-12-12
Title
DTC Documents <= 1.1.05 - Cross-Site Request Forgery
Slug
dtracker
Published
2017-03-09
Title
DTracker 1.5 - Multiple Unauthenticated Blind SQL Injections
Slug
dtracker
Published
2017-03-13
Title
Dtracker <= 1.5 - Unauthorised Contract Creation
Slug
dts-simple-share
Published
2024-07-09
Title
Wordpress Simple Share Plugin <=0.5.3 - Admin+ XSS
Slug
duitku-social-payment-gateway
Published
2024-02-26
Title
Duitku Payment Gateway < 2.11.7 - Missing Authorization via check_duitku_response
Slug
dukapress
Published
2014-11-24
Title
DukaPress <= 2.5.3 - Unauthenticated Path Traversal
Slug
dukapress
Published
2015-08-22
Title
DukaPress <= 2.5.9 - Unauthenticated Blind SQL Injection
Slug
dukapress
Published
2026-02-18
Title
DukaPress <= 3.2.4 - Reflected XSS
Slug
duofaq-responsive-flat-simple-faq
Published
2021-12-14
Title
duoFAQ <= 1.4.8 - Reflected Cross-Site Scripting
Slug
duogeek-blocks
Published
2024-11-08
Title
DuoGeek Blocks 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
duoshuo
Published
2025-08-07
Title
多说社会化评论框 <= 1.2 - Reflected Cross-Site Scripting
Slug
duoshuo
Published
2025-08-23
Title
多说社会化评论框 <= 1.2 - Cross-Site Request Forgery to Settings Update
Slug
dupeoff
Published
2023-02-13
Title
DupeOff <= 1.6 - Admin+ Stored XSS