WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dynamic-content-for-elementor
Published
2023-12-28
Title
Dynamic Content for Elementor < 2.12.5 - Cross-Site Request Forgery
Slug
dynamic-copyright-year
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
dynamic-elementor-addons
Published
2024-10-14
Title
Dynamic Elementor Addons <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Slug
dynamic-featured-image
Published
2024-09-04
Title
Dynamic Featured Image <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dfiFeatured Parameter
Slug
dynamic-font-replacement-4wp
Published
2014-08-01
Title
Dynamic Font Replacement 1.3 - SQL Injection
Slug
dynamic-post
Published
2025-04-16
Title
Dynamic Post < 5.04 - Subscriber+ Settings Update
Slug
dynamic-post-grid-elementor-addon
Published
2024-11-08
Title
Dynamic Post Grid Elementor Addon < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dynamic-product-categories-design
Published
2024-12-19
Title
Dynamic Product Category Grid, Slider for WooCommerce < 1.1.4 - Authenticated (Contributor+) Local File Inclusion
Slug
dynamic-qr-code-generator
Published
2023-05-31
Title
Dynamic QR Code Generator <= 0.0.5 - Reflected XSS
Slug
dynamic-text-field-for-contact-form-7
Published
2025-09-09
Title
Dynamic Text Field For Contact Form 7 < 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dynamic-to-top
Published
2024-11-20
Title
Dynamic "To Top" 3.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
dynamic-url-seo
Published
2024-11-18
Title
Dynamic URL SEO < 1.2 - Reflected XSS
Slug
dynamic-url-seo
Published
2025-01-27
Title
Dynamic URL SEO < 1.2 - Cross-Site Request Forgery
Slug
dynamic-url-seo
Published
2025-02-03
Title
Dynamic URL SEO < 1.2 - Reflected Cross-Site Scripting
Slug
dynamic-user-directory
Published
2025-10-21
Title
Dynamic User Directory < 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dynamic-widget-content
Published
2026-02-04
Title
Dynamic Widget Content < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Content Field
Slug
dynamic-widgets
Published
2014-08-01
Title
Dynamic Widgets <= 1.5.1 - Cross-Site Scripting (XSS)
Slug
dynamic-widgets
Published
2015-08-11
Title
Dynamic Widgets <= 1.5.10 - Authenticated Cross-Site Scripting (XSS) & CSRF
Slug
dynamic-widgets
Published
2021-12-28
Title
Dynamic Widgets < 1.6 - Reflected Cross-Site Scripting
Slug
dynamic-widgets
Published
2024-11-01
Title
Dynamic Widgets < 1.6.5 - Cross-Site Request Forgery
Slug
dynamically-display-posts
Published
2025-10-14
Title
Dynamically Display Posts <= 1.1 - Unauthenticated SQL Injection
Slug
dynamically-register-sidebars
Published
2023-04-24
Title
Dynamically Register Sidebars <= 1.0.1 - Admin+ Stored XSS
Slug
dynamicconditions
Published
2025-02-03
Title
Dynamic Conditions < 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dynamictags
Published
2025-01-03
Title
DynamicTags < 1.4.1 - Authenticated (Subscriber+) SQL Injection
Slug
dyslexiefont
Published
2022-06-17
Title
Dyslexiefont Free < 1.0.0 - Authenticated Cross-Site Scripting