WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dynamic-url-seo
Published
2025-01-27
Title
Dynamic URL SEO < 1.2 - Cross-Site Request Forgery
Slug
dynamic-url-seo
Published
2025-02-03
Title
Dynamic URL SEO < 1.2 - Reflected Cross-Site Scripting
Slug
dynamic-user-directory
Published
2025-10-21
Title
Dynamic User Directory < 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dynamic-widget-content
Published
2026-02-04
Title
Dynamic Widget Content < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Content Field
Slug
dynamic-widgets
Published
2014-08-01
Title
Dynamic Widgets <= 1.5.1 - Cross-Site Scripting (XSS)
Slug
dynamic-widgets
Published
2015-08-11
Title
Dynamic Widgets <= 1.5.10 - Authenticated Cross-Site Scripting (XSS) & CSRF
Slug
dynamic-widgets
Published
2021-12-28
Title
Dynamic Widgets < 1.6 - Reflected Cross-Site Scripting
Slug
dynamic-widgets
Published
2024-11-01
Title
Dynamic Widgets < 1.6.5 - Cross-Site Request Forgery
Slug
dynamically-display-posts
Published
2025-10-14
Title
Dynamically Display Posts <= 1.1 - Unauthenticated SQL Injection
Slug
dynamically-register-sidebars
Published
2023-04-24
Title
Dynamically Register Sidebars <= 1.0.1 - Admin+ Stored XSS
Slug
dynamicconditions
Published
2025-02-03
Title
Dynamic Conditions < 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dynamictags
Published
2025-01-03
Title
DynamicTags < 1.4.1 - Authenticated (Subscriber+) SQL Injection
Slug
dyslexiefont
Published
2022-06-17
Title
Dyslexiefont Free < 1.0.0 - Authenticated Cross-Site Scripting
Slug
dyslexiefont
Published
2023-05-11
Title
Dyslexiefont Free <= 1.0.0 - CSRF
Slug
dzs-ajaxer-lite-dynamic-page-load
Published
2025-01-16
Title
DZS Ajaxer Lite – Ajaxify Your WordPress Site and Comment <= 1.04 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
dzs-enable-debug
Published
2025-01-07
Title
Admin debug wordpress – enable debug <= 1.0.13 - Cross-Site Request Forgery
Slug
dzs-restaurantmenu
Published
2025-07-17
Title
FoodMenu <= 1.20 - Reflected Cross-Site Scripting
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - ajax.php source Parameter Reflected XSS
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - upload.php File Upload Remote Code Execution
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery 3.1.3 - Remote File Disclosure
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - preview_allchars.swf logoLink Parameter Reflected XSS
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - deploy/preview_skin_overlay.swf logoLink Parameter Reflected XSS
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - deploy/preview.swf logoLink Parameter Reflected XSS
Slug
dzs-videogallery
Published
2014-08-01
Title
DZS Video Gallery - preview_skin_rouge.swf logoLink Parameter Reflected XSS
Slug
dzs-videogallery
Published
2014-09-27
Title
DZS Video Gallery Plugin - RCE & More