WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
duracelltomi-google-tag-manager
Published
2022-05-31
Title
GTM4WP < 1.15.2 - Admin+ Stored Cross-Site Scripting
Slug
dvk-social-sharing
Published
2024-10-11
Title
Social Sharing (by Danny) < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
dvs-custom-notification
Published
2014-08-01
Title
DVS Custom Notification - Cross-Site Request Forgery
Slug
dw-promobar
Published
2022-07-18
Title
DW Promobar <= 1.0.4 - Admin+ Stored Cross-Site Scripting
Slug
dw-question-answer
Published
2016-03-11
Title
DW Question & Answer <= 1.4.2.2 - Stored Cross-Site Scripting (XSS)
Slug
dw-question-answer
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Slug
dw-question-answer-pro
Published
2022-03-29
Title
DW Question & Answer Pro < 1.3.7 - Arbitrary Comment Edition via IDOR
Slug
dw-question-answer-pro
Published
2022-03-29
Title
DW Question & Answer Pro < 1.3.7 - Multiple CSRF
Slug
dwnldr
Published
2016-07-18
Title
Dwnldr 1.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
dx-auto-publish
Published
2025-02-13
Title
DX-auto-publish <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
dx-auto-save-images
Published
2023-08-21
Title
DX-auto-save-images <= 1.4.0 - CSRF
Slug
dx-contribute
Published
2014-08-01
Title
DX-Contribute - Cross-Site Request Forgery
Slug
dx-delete-attached-media
Published
2023-10-16
Title
DX Delete Attached Media < 2.0.6 - Settings Update via CSRF
Slug
dx-sales-crm
Published
2025-01-16
Title
DX Sales CRM <= 1.1 - Reflected Cross-Site Scripting
Slug
dx-share-selection
Published
2022-06-22
Title
DX Share Selection < 1.5 - Stored Cross-Site Scripting via CSRF
Slug
dx-sources
Published
2026-05-04
Title
DX Sources <= 2.0.1 - Cross-Site Request Forgery to Settings Update
Slug
dx-unanswered-comments
Published
2026-04-21
Title
DX Unanswered Comments < 1.8 - Cross-Site Request Forgery via Settings Update
Slug
dx-watermark
Published
2024-03-29
Title
DX-Watermark <= 1.0.4 - Cross-Site Request Forgery
Slug
dyapress
Published
2025-04-04
Title
DyaPress ERP/CRM <= 18.0.2.0 - Unauthenticated Local File Inclusion
Slug
dyn-business-panel
Published
2025-01-06
Title
Dyn Business Panel <= 1.0.0 - Reflected XSS
Slug
dyn-business-panel
Published
2025-01-06
Title
Dyn Business Panel <= 1.0.0 - Reflected XSS
Slug
dyn-business-panel
Published
2025-01-06
Title
Dyn Business Panel <= 1.0.0 - Stored XSS via CSRF
Slug
dynamic-ajax-product-filters-for-woocommerce
Published
2025-08-27
Title
Dynamic AJAX Product Filters for WooCommerce < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via name Parameter
Slug
dynamic-ajax-product-filters-for-woocommerce
Published
2025-08-27
Title
Dynamic AJAX Product Filters for WooCommerce < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Slug
dynamic-content-for-elementor
Published
2020-10-08
Title
Dynamic Content for Elementor < 1.9.6 - Authenticated RCE