WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dd-rating
Published
2024-03-29
Title
DD Rating <= 1.7.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
dd-roles
Published
2025-01-16
Title
DD Roles <= 4.1 - Authenticated (Subscriber+) Privilege Escalation
Slug
ddirections
Published
2025-03-24
Title
Driving Directions <= 1.4.4 - Reflected Cross-Site Scripting
Slug
deal-of-the-day
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
dealia-request-a-quote
Published
2026-02-18
Title
Dealia <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block Attributes
Slug
dealia-request-a-quote
Published
2026-02-18
Title
Dealia – Request a quote < 1.0.8 - Missing Authorization to Authenticated (Contributor+) Plugin Configuration Reset
Slug
deans-fckeditor-with-pwwangs-code-plugin-for-wordpress
Published
2014-08-01
Title
FCKeditor Deans With Pwwangs Code <= 1.0.0 - Remote Shell Upload
Slug
dearpdf-lite
Published
2024-01-19
Title
PDF Viewer & 3D PDF Flipbook – DearPDF <= 2.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
debatemaster
Published
2025-12-11
Title
DebateMaster <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Color Options via 'debate' Shortcode
Slug
debounce-io-email-validator
Published
2024-11-22
Title
DeBounce Email Validator < 5.6.6 - Reflected Cross-Site Scripting
Slug
debounce-io-email-validator
Published
2025-02-18
Title
DeBounce Email Validator < 5.8.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
debounce-io-email-validator
Published
2025-04-03
Title
DeBounce Email Validator < 5.7.1 - Unauthenticated Local File Inclusion
Slug
debounce-io-email-validator
Published
2025-04-09
Title
DeBounce Email Validator < 5.8.2 - Stored XSS via CSRF
Slug
debrandify
Published
2024-10-17
Title
Debrandify · Remove or Replace WordPress Branding < 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
debranding
Published
2024-11-18
Title
de:branding <= 1.0.2 - Privilege Escalation
Slug
debranding
Published
2024-12-11
Title
de:branding <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Update
Slug
debt-calculator
Published
2025-01-16
Title
Debt Calculator <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
debtcom-business-in-a-box
Published
2026-01-08
Title
Debt.com Business in a Box <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
debug
Published
2024-01-31
Title
Debug < 1.11 - CSRF
Slug
debug-assistant
Published
2023-02-28
Title
Debug Assistant < 1.5 - Admin+ Stored XSS
Slug
debug-assistant
Published
2023-02-28
Title
Debug Assistant < 1.5 - Administrator Account Creation via CSRF
Slug
debug-bar-extender
Published
2025-03-02
Title
Debug-Bar-Extender <= 0.5 - Reflected Cross-Site Scripting
Slug
debug-functions-time
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
debug-info
Published
2024-05-07
Title
Debug Info <= 1.3.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
debug-log-config-tool
Published
2024-05-20
Title
Debug Log – Manger Tool < 1.5 - Unauthenticated Information Exposure via Logs