WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dc-woocommerce-multi-vendor
Published
2024-10-23
Title
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution < 4.2.5 - Missing Authorization to Forged Vendor Profile Deletion Email Sending
Slug
dc-woocommerce-multi-vendor
Published
2025-01-24
Title
WC Marketplace < 4.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dc-woocommerce-multi-vendor
Published
2025-01-30
Title
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution < 4.2.15 - Unauthenticated Limited Local File Inclusion
Slug
dc-woocommerce-multi-vendor
Published
2025-04-04
Title
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution < 4.2.20 - Missing Authorization to Unauthenticated Table Rates Deletion
Slug
dc-woocommerce-multi-vendor
Published
2025-05-16
Title
MultiVendorX – WooCommerce Multivendor Marketplace Solutions < 4.2.23 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion
Slug
dc-woocommerce-multi-vendor
Published
2025-05-19
Title
MultiVendorX < 4.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
dc-woocommerce-multi-vendor
Published
2025-06-04
Title
MultiVendorX < 4.2.23 - Unauthenticated Information Exposure
Slug
dc-woocommerce-multi-vendor
Published
2025-06-12
Title
MultiVendorX < 4.2.24 - Missing Authorization
Slug
dd-post-carousel
Published
2023-12-27
Title
Custom Post Carousels with Owl < 1.4.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
dd-post-carousel
Published
2025-05-30
Title
Custom Post Carousels with Owl < 1.4.12 - Contributor+ Stored XSS
Slug
dd-rating
Published
2024-03-29
Title
DD Rating <= 1.7.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
dd-roles
Published
2025-01-16
Title
DD Roles <= 4.1 - Authenticated (Subscriber+) Privilege Escalation
Slug
ddirections
Published
2025-03-24
Title
Driving Directions <= 1.4.4 - Reflected Cross-Site Scripting
Slug
deal-of-the-day
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
deans-fckeditor-with-pwwangs-code-plugin-for-wordpress
Published
2014-08-01
Title
FCKeditor Deans With Pwwangs Code <= 1.0.0 - Remote Shell Upload
Slug
dearpdf-lite
Published
2024-01-19
Title
PDF Viewer & 3D PDF Flipbook – DearPDF <= 2.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
debatemaster
Published
2025-12-11
Title
DebateMaster <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Color Options via 'debate' Shortcode
Slug
debounce-io-email-validator
Published
2024-11-22
Title
DeBounce Email Validator < 5.6.6 - Reflected Cross-Site Scripting
Slug
debounce-io-email-validator
Published
2025-02-18
Title
DeBounce Email Validator < 5.8.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
debounce-io-email-validator
Published
2025-04-03
Title
DeBounce Email Validator < 5.71 - Unauthenticated Local File Inclusion
Slug
debounce-io-email-validator
Published
2025-04-09
Title
DeBounce Email Validator < 5.8.2 - Stored XSS via CSRF
Slug
debrandify
Published
2024-10-17
Title
Debrandify · Remove or Replace WordPress Branding < 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
debranding
Published
2024-11-18
Title
de:branding <= 1.0.2 - Privilege Escalation
Slug
debranding
Published
2024-12-11
Title
de:branding <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Update
Slug
debt-calculator
Published
2025-01-16
Title
Debt Calculator <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting