WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
idonate
Published
2025-04-09
Title
IDonate <= 2.1.17 - Unauthenticated Local File Inclusion
Slug
idonate
Published
2025-07-31
Title
IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function
Slug
idonate
Published
2025-10-06
Title
IDonate < 2.1.13 - Unauthenticated User Deletion
Slug
idonate
Published
2025-11-06
Title
IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function
Slug
idonate
Published
2025-11-06
Title
IDonate 2.1.5 - 2.1.9 - Subscriber+ Account Takeover/Privilege Escalation
Slug
idonate
Published
2025-11-21
Title
IDonate – Blood Donation, Request And Donor Management System < 2.1.16 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
idonate
Published
2025-12-07
Title
IDonate < 2.1.16 - Missing Authorization
Slug
idonate
Published
2026-02-18
Title
IDonate 2.1.5 - 2.1.9 - Subscriber+ Account Takeover/Privilege Escalation
Slug
idonate-pro
Published
2025-07-16
Title
IDonatePro <= 2.1.8 - Unauthenticated Local File Inclusion
Slug
idonate-pro
Published
2025-08-08
Title
IDonatePro <= 2.1.9 - Missing Authorization
Slug
idonate-pro
Published
2025-08-17
Title
IDonatePro <= 2.1.9 - Authenticated (Subscriber+) Information Exposure
Slug
idonate-pro
Published
2025-08-21
Title
IDonatePro <= 2.1.9 - Missing Authorization
Slug
idonate-pro
Published
2025-08-22
Title
IDonatePro <= 2.1.11 - Missing Authorization
Slug
idpay-contact-form-7
Published
2021-11-23
Title
IDPay for Contact Form 7 <= 2.1.2 - Reflected Cross-Site Scripting
Slug
idraw
Published
2025-04-17
Title
I Draw <= 1.0 - Authenticated (Author+) Arbitrary File Upload
Slug
idsk-toolkit
Published
2024-10-25
Title
ID-SK Toolkit <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
idsk-toolkit
Published
2024-10-30
Title
ID-SK Toolkit <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
idx-broker-platinum
Published
2020-03-26
Title
IMPress for IDX Broker < 2.6.2 - Authenticated Stored Cross-Site Scripting (XSS) via unprotected 'idx_update_recaptcha_key' AJAX
Slug
idx-broker-platinum
Published
2020-03-26
Title
IMPress for IDX Broker < 2.6.2 - Authenticated Post Creation, Modification, and Deletion
Slug
idx-broker-platinum
Published
2021-10-18
Title
IMPress for IDX Broker < 3.0.6 - Reflected Cross-Site Scripting
Slug
idx-broker-platinum
Published
2024-09-16
Title
IMPress for IDX Broker < 3.2.3 - Contributor+ Stored XSS
Slug
idx-broker-platinum
Published
2025-03-31
Title
IMPress for IDX Broker < 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
idx-broker-platinum
Published
2026-09-08
Title
IMPress for IDX Broker < 3.3.1 - Missing Authorization
Slug
idx-broker-platinum
Published
2026-09-08
Title
IMPress for IDX Broker < 3.3.1 - Unauthenticated Unauthorized Lead and Search Manipulation
Slug
idx-broker-platinum
Published
2026-10-13
Title
IMPress for IDX Broker <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting