WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
idonate
Published
2025-11-06
Title
IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function
Slug
idonate
Published
2025-11-06
Title
IDonate 2.1.5 - 2.1.9 - Subscriber+ Account Takeover/Privilege Escalation
Slug
idonate
Published
2025-11-21
Title
IDonate – Blood Donation, Request And Donor Management System < 2.1.16 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
idonate
Published
2025-12-07
Title
IDonate < 2.1.16 - Missing Authorization
Slug
idonate
Published
2026-02-18
Title
IDonate 2.1.5 - 2.1.9 - Subscriber+ Account Takeover/Privilege Escalation
Slug
idonate-pro
Published
2025-07-16
Title
IDonatePro <= 2.1.8 - Unauthenticated Local File Inclusion
Slug
idonate-pro
Published
2025-08-08
Title
IDonatePro <= 2.1.9 - Missing Authorization
Slug
idonate-pro
Published
2025-08-17
Title
IDonatePro <= 2.1.9 - Authenticated (Subscriber+) Information Exposure
Slug
idonate-pro
Published
2025-08-21
Title
IDonatePro <= 2.1.9 - Missing Authorization
Slug
idonate-pro
Published
2025-08-22
Title
IDonatePro <= 2.1.11 - Missing Authorization
Slug
idpay-contact-form-7
Published
2021-11-23
Title
IDPay for Contact Form 7 <= 2.1.2 - Reflected Cross-Site Scripting
Slug
idraw
Published
2025-04-17
Title
I Draw <= 1.0 - Authenticated (Author+) Arbitrary File Upload
Slug
idsk-toolkit
Published
2024-10-25
Title
ID-SK Toolkit <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
idsk-toolkit
Published
2024-10-30
Title
ID-SK Toolkit <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
idx-broker-platinum
Published
2020-03-26
Title
IMPress for IDX Broker < 2.6.2 - Authenticated Stored Cross-Site Scripting (XSS) via unprotected 'idx_update_recaptcha_key' AJAX
Slug
idx-broker-platinum
Published
2020-03-26
Title
IMPress for IDX Broker < 2.6.2 - Authenticated Post Creation, Modification, and Deletion
Slug
idx-broker-platinum
Published
2021-10-18
Title
IMPress for IDX Broker < 3.0.6 - Reflected Cross-Site Scripting
Slug
idx-broker-platinum
Published
2024-09-16
Title
IMPress for IDX Broker < 3.2.3 - Contributor+ Stored XSS
Slug
idx-broker-platinum
Published
2025-03-31
Title
IMPress for IDX Broker < 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ie-css3-support
Published
2025-02-14
Title
IE CSS3 Support <= 2.0.1 - Reflected Cross-Site Scripting
Slug
if-as-shortcode
Published
2025-12-25
Title
IF AS Shortcode <= 1.2 - Authenticated (Contributor+) Remote Code Execution
Slug
if-menu
Published
2024-12-06
Title
If Menu < 0.19.2 - Missing Authorization to License Key Update
Slug
if-so
Published
2023-12-27
Title
If-So Dynamic Content Personalization < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
if-so
Published
2024-05-09
Title
If-So Dynamic Content Personalization < 1.7.1.1 - Missing Authorization
Slug
if-so
Published
2024-06-22
Title
if-so < 1.8.0.4 - Admin+ Stored XSS