WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
debug-log-manager
Published
2023-11-23
Title
Debug Log Manager < 2.2.2 - Subscriber+ Debug Log Clearing
Slug
debug-log-manager
Published
2023-11-29
Title
Debug Log Manager < 2.2.2 - Debug Log Clearing via CSRF
Slug
debug-log-manager
Published
2023-12-13
Title
Debug Log Manager < 2.3.0 - Sensitive Logs Exposure
Slug
debug-log-manager
Published
2024-04-16
Title
Debug Log Manager < 2.3.2 - Unauthenticated Stored Cross-Site Scripting
Slug
debug-log-manager
Published
2024-04-29
Title
Debug Log Manager < 2.3.2 - Missing Authorization via toggle_debugging
Slug
debug-log-manager
Published
2024-06-03
Title
Debug Log Manager < 2.3.2 - Missing Authorization
Slug
debug-log-manager
Published
2025-04-18
Title
Debug Log Manager < 2.3.5 - Unauthenticated Stored Cross-Site Scripting
Slug
debug-log-manager
Published
2025-04-17
Title
Debug Log Manager < 2.3.5 - Unauthenticated Stored Cross-Site Scripting
Slug
debug-log-manager
Published
2026-06-05
Title
Debug Log Manager < 2.5.1 - Unauthenticated Log Injection via log_js_errors
Slug
debug-log-viewer
Published
2025-10-29
Title
Debug Log Viewer < 2.0.4 - Missing Authorization
Slug
debug-tool
Published
2024-11-08
Title
Debug Tool <= 2.2 - Missing Authorization to Information Exposure
Slug
debug-tool
Published
2024-11-08
Title
Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation
Slug
debug-tool
Published
2025-01-16
Title
Debug Tool <= 2.2 - Missing Authorization
Slug
debug-tool
Published
2025-11-13
Title
Debug Tool <= 2.2 - Unauthenticated Remote Code Execution
Slug
debugger-troubleshooter
Published
2026-03-30
Title
Debugger & Troubleshooter < 1.4.0 - Unauthenticated Privilege Escalation
Slug
decalog
Published
2024-03-26
Title
DecaLog < 3.9.1 - Authenticated (Admin+) SQL injection
Slug
decent-comments
Published
2026-04-29
Title
Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure
Slug
decon-wp-sms
Published
2023-04-24
Title
Decon WP SMS <= 1.1 - Admin+ Stored Cross-Site Scripting
Slug
decorator-woocommerce-email-customizer
Published
2023-11-02
Title
Decorator - WooCommerce Email Customizer < 1.2.8 - Cross-Site Request Forgery
Slug
decorator-woocommerce-email-customizer
Published
2025-10-30
Title
WebToffee eCommerce Marketing Automation < 2.1.2 - Missing Authorization
Slug
deeper-comments
Published
2023-10-26
Title
Deeper Comments <= 2.1.1 - Subscriber+ Arbitrary Options Update
Slug
defa-online-image-protector
Published
2016-04-12
Title
defa-online-image-protector <= 3.3 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
default-thumbnail-plus
Published
2024-07-08
Title
Default Thumbnail Plus <= 1.0.2.3 - Authenticated (Contributor+) Arbitrary File Upload
Slug
defend-wp-firewall
Published
2025-02-24
Title
DefendWP Firewall < 1.1.1 - Missing Authorization
Slug
defender-security
Published
2021-03-01
Title
Multiple Plugins - CSRF Nonce Bypasses