WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
database-sync
Published
2015-08-04
Title
Database Sync <= 0.4 - Reflected Cross-Site Scripting (XSS)
Slug
database-sync
Published
2025-01-16
Title
Database Sync <= 0.5.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
database-to-excel
Published
2025-09-05
Title
Database to Excel <= 1.0 - Cross-Site Request Forgery
Slug
database-toolset
Published
2025-04-09
Title
Database Toolset <= 1.8.4 - Unauthenticated Arbitrary File Deletion
Slug
database-toolset
Published
2025-04-23
Title
Database Toolset <= 1.8.4 - Unauthenticated Arbitrary File Deletion
Slug
database-toolset
Published
2025-05-02
Title
Database Toolset <= 1.8.4 - Unauthenticated Sensitive Information Exposure via Backup Files
Slug
datalistit
Published
2026-10-09
Title
Datalist it <= 0.0.3 - Unauthenticated SQLi via dli_fronted_action
Slug
datalogics
Published
2026-02-18
Title
Datalogics Ecommerce Delivery < 2.6.60 - Unauthenticated Privilege Escalation
Slug
datalogics
Published
2026-04-08
Title
Datalogics Ecommerce Delivery – Datalogics < 2.6.63 - Unauthenticated Privilege Escalation
Slug
datalogics
Published
2026-09-18
Title
Datalogics Ecommerce Delivery < 2.6.66 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via Multiple AJAX Actions (datalogics_create_shipping / datalogics_cancel_shipping)
Slug
datamentor
Published
2024-10-31
Title
DataMentor <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
datasets-manager-by-arttia-creative
Published
2024-11-11
Title
Datasets Manager by Arttia Creative <= 1.5 - Unauthenticated Arbitrary File Upload
Slug
date-counter
Published
2025-10-11
Title
Date counter <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
date-time-picker-field
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
date-time-picker-field
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
davenport
Published
2025-06-25
Title
Davenport - Versatile Blog and Magazine WordPress Theme <= 1.3 - Unauthenticated Local File Inclusion
Slug
daves-wordpress-live-search
Published
2017-05-01
Title
Dave's WordPress Live Search <= 4.5 - Reflected Cross-Site Scripting (XSS)
Slug
daves-wordpress-live-search
Published
2023-04-21
Title
Dave's WordPress Live Search <= 4.8.1 - Admin+ Stored XSS
Slug
dazzlersoft-teams
Published
2023-11-08
Title
Team Members Showcase <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
db-access
Published
2025-11-11
Title
DB Access <= 0.8.7 - Subscriber+ SQLi
Slug
db-backup
Published
2014-12-16
Title
DB Backup < 5.0 - Path Traversal File Access
Slug
db-backup
Published
2025-07-16
Title
DB Backup <= 6.0 - Missing Authorization
Slug
db-tables-importexport
Published
2025-02-21
Title
DB Tables Import/Export <= 1.0.1 - Reflected Cross-Site Scripting
Slug
dbox-slider-lite
Published
2018-01-10
Title
Dbox 3D Slider Lite <= 1.2.2 - Multiple Authenticated SQL injection
Slug
dbview
Published
2025-09-29
Title
dbview <= 0.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting