WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
idealien-category-enhancements
Published
2024-11-23
Title
Idealien Category Enhancements <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ideapush
Published
2023-11-08
Title
IdeaPush < 8.53 - Admin+ Stored XSS
Slug
ideapush
Published
2023-11-28
Title
IdeaPush < 8.58 - Subscriber+ Memory Tab/Routine/Taxonomy Creation
Slug
ideapush
Published
2024-06-27
Title
IdeaPush < 8.61 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
ideapush
Published
2024-07-01
Title
IdeaPush < 8.66 - Unauthenticated Stored Cross-Site Scripting
Slug
ideapush
Published
2024-09-23
Title
IdeaPush < 8.69 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ideapush
Published
2024-10-14
Title
IdeaPush < 8.71 - Cross-Site Request Forgery
Slug
ideapush
Published
2024-12-02
Title
IdeaPush < 8.72 - Missing Authorization to Board Term Deletion
Slug
ideapush
Published
2024-12-27
Title
IdeaPush < 8.73 - Missing Authorization
Slug
ider-login
Published
2024-12-13
Title
IDer Login for WordPress <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
idonate
Published
2024-05-01
Title
IDonate < 2.0.0 - Admin+ Stored XSS
Slug
idonate
Published
2025-04-09
Title
IDonate <= 2.1.17 - Unauthenticated Local File Inclusion
Slug
idonate
Published
2025-07-31
Title
IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function
Slug
idonate
Published
2025-10-06
Title
IDonate < 2.1.13 - Unauthenticated User Deletion
Slug
idonate
Published
2025-11-06
Title
IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function
Slug
idonate
Published
2025-11-06
Title
IDonate 2.1.5 - 2.1.9 - Subscriber+ Account Takeover/Privilege Escalation
Slug
idonate
Published
2025-11-21
Title
IDonate – Blood Donation, Request And Donor Management System < 2.1.16 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
idonate-pro
Published
2025-07-16
Title
IDonatePro <= 2.1.8 - Unauthenticated Local File Inclusion
Slug
idonate-pro
Published
2025-08-08
Title
IDonatePro <= 2.1.9 - Missing Authorization
Slug
idonate-pro
Published
2025-08-17
Title
IDonatePro <= 2.1.9 - Authenticated (Subscriber+) Information Exposure
Slug
idonate-pro
Published
2025-08-21
Title
IDonatePro <= 2.1.9 - Missing Authorization
Slug
idonate-pro
Published
2025-08-22
Title
IDonatePro <= 2.1.11 - Missing Authorization
Slug
idpay-contact-form-7
Published
2021-11-23
Title
IDPay for Contact Form 7 <= 2.1.2 - Reflected Cross-Site Scripting
Slug
idraw
Published
2025-04-17
Title
I Draw <= 1.0 - Authenticated (Author+) Arbitrary File Upload
Slug
idsk-toolkit
Published
2024-10-25
Title
ID-SK Toolkit <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload