WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
delete-post-revisions-on-single-click
Published
2023-11-27
Title
Delete Post Revisions In WordPress <= 4.6 - Cross-Site Request Forgery
Slug
delete-usermetas
Published
2023-10-19
Title
Delete Usermetas < 1.2.0 - Cross-Site Request Forgery
Slug
delhivery-logistics-courier
Published
2024-01-16
Title
Delhivery Logistics Courier <= 1.0.107 - Authenticated (Subscriber+) SQL Injection
Slug
delicious-recipes
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
delicious-recipes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
delicious-recipes
Published
2024-08-26
Title
Delicious Recipes – WordPress Recipe Plugin < 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
delicious-recipes
Published
2024-09-10
Title
WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) < 1.7.0 - Improper Path Validation to Authenticated (Subscriber+) Arbitrary File Move and Read
Slug
delicious-recipes
Published
2025-07-16
Title
WP Delicious < 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
delicious-recipes
Published
2025-09-03
Title
WP Delicious < 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
delicious-recipes
Published
2025-10-31
Title
Delicious Recipes < 1.9.1 - Authenticated (Contributor+) Arbitrary File Upload
Slug
delicious-recipes
Published
2025-11-09
Title
WP Delicious < 1.9.2 - Missing Authorization
Slug
delightful-downloads
Published
2014-08-01
Title
Delightful Downloads 1.3.1.1 - meta-boxes.php dedo_meta_boxes_save Function Multiple Action Authorization Bypass
Slug
delightful-downloads
Published
2014-08-01
Title
Delightful Downloads 1.3.1.1 - includes/functions.php User-Agent HTTP Header Stored XSS
Slug
delightful-downloads
Published
2017-05-11
Title
Delightful Downloads <= 1.6.6 - Unauthenticated Path Traversal
Slug
delivery-and-pickup-scheduling-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
delivery-drivers-for-vendors
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
delivery-drivers-for-vendors
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
delivery-drivers-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
delivery-drivers-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
delivery-woo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
delivery-woo
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
delucks-seo
Published
2019-09-21
Title
DELUCKS SEO <= 2.1.7 - Unauthenticated Options Update
Slug
delucks-seo
Published
2024-03-29
Title
DELUCKS SEO < 2.5.5 - Missing Authorization
Slug
delucks-seo
Published
2024-12-05
Title
DELUCKS SEO <= 2.7.0 - Subscriber+ Arbitrary File Read
Slug
delucks-seo
Published
2025-05-07
Title
DELUCKS SEO < 2.6.0 - Contributor+ Stored XSS