WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
date-time-picker-field
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
date-time-picker-field
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
davenport
Published
2025-06-25
Title
Davenport - Versatile Blog and Magazine WordPress Theme <= 1.3 - Unauthenticated Local File Inclusion
Slug
daves-wordpress-live-search
Published
2017-05-01
Title
Dave's WordPress Live Search <= 4.5 - Reflected Cross-Site Scripting (XSS)
Slug
daves-wordpress-live-search
Published
2023-04-21
Title
Dave's WordPress Live Search <= 4.8.1 - Admin+ Stored XSS
Slug
dazzlersoft-teams
Published
2023-11-08
Title
Team Members Showcase <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
db-access
Published
2025-11-11
Title
DB Access <= 0.8.7 - Subscriber+ SQLi
Slug
db-backup
Published
2014-12-16
Title
DB Backup < 5.0 - Path Traversal File Access
Slug
db-backup
Published
2025-07-16
Title
DB Backup <= 6.0 - Missing Authorization
Slug
db-tables-importexport
Published
2025-02-21
Title
DB Tables Import/Export <= 1.0.1 - Reflected Cross-Site Scripting
Slug
dbox-slider-lite
Published
2018-01-10
Title
Dbox 3D Slider Lite <= 1.2.2 - Multiple Authenticated SQL injection
Slug
dbview
Published
2025-09-29
Title
dbview <= 0.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dc-woocommerce-multi-vendor
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
dc-woocommerce-multi-vendor
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Slug
dc-woocommerce-multi-vendor
Published
2021-05-26
Title
Multivendor Marketplace Solution for WooCommerce < 3.7.4 - Unauthenticated Arbitrary Product Comment
Slug
dc-woocommerce-multi-vendor
Published
2021-12-06
Title
Multivendor Marketplace Solution for WooCommerce < 3.8.4 - Reflected Cross-Site Scripting
Slug
dc-woocommerce-multi-vendor
Published
2022-08-15
Title
Multivendor Marketplace Solution for WooCommerce < 3.8.12 - Unauthorised AJAX Calls
Slug
dc-woocommerce-multi-vendor
Published
2022-08-15
Title
Multivendor Marketplace Solution for WooCommerce < 3.8.12 - Multiple Reflected Cross-Site Scripting
Slug
dc-woocommerce-multi-vendor
Published
2022-08-15
Title
Multivendor Marketplace Solution for WooCommerce < 3.8.12 - Unauthenticated LFI
Slug
dc-woocommerce-multi-vendor
Published
2020-09-16
Title
MultiVendorX < 3.5.8 - Cross-Site Request Forgery
Slug
dc-woocommerce-multi-vendor
Published
2023-09-12
Title
MultiVendorX < 4.0.26 - Improper Authorization on REST Routes via 'save_settings_permission'
Slug
dc-woocommerce-multi-vendor
Published
2023-12-26
Title
WC Marketplace < 4.0.24 - Missing Authorization via mvx_save_dashpages
Slug
dc-woocommerce-multi-vendor
Published
2024-01-31
Title
MultiVendorX Marketplace < 4.0.26 - Missing Authorization
Slug
dc-woocommerce-multi-vendor
Published
2024-03-28
Title
WC Marketplace < 4.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dc-woocommerce-multi-vendor
Published
2024-04-05
Title
WC Marketplace < 4.1.4 - Missing Authorization