WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mainwp-child-reports
Published
2026-04-07
Title
MainWP Child Reports < 2.3 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ Stored XSS
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ PHP Objection Injection
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ Settings Update
Slug
mainwp-google-analytics-extension
Published
2023-01-17
Title
MainWP Google Analytics Extension < 4.0.5 - Subscriber+ SQLi
Slug
mainwp-google-analytics-extension
Published
2023-01-17
Title
MainWP Google Analytics Extension < 4.0.5 - Subscriber+ Settings Update
Slug
mainwp-maintenance-extension
Published
2023-01-17
Title
MainWP Maintenance Extension < 4.1.2 - Subscriber+ SQL Injection (SQLi)
Slug
mainwp-piwik-extension
Published
2023-01-17
Title
MainWP Matomo Extension < 4.0.5 - CSRF
Slug
maio-the-new-ai-geo-seo-tool
Published
2026-02-27
Title
MAIO – The new AI GEO / SEO tool < 7.0.13 - Missing Authorization
Slug
maio-the-new-ai-geo-seo-tool
Published
2026-10-15
Title
MAIO < 7.3.22 - Unauthenticated Crawl Analytics Disclosure via Hardcoded API Key
Slug
majestic-before-after-image
Published
2025-10-03
Title
Majestic Before After Image < 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
majestic-support
Published
2025-02-11
Title
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin < 1.0.6 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
majestic-support
Published
2025-02-11
Title
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin < 1.0.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
majestic-support
Published
2025-02-23
Title
Majestic Support < 1.0.7 - Unauthenticated Local File Inclusion
Slug
majestic-support
Published
2025-05-22
Title
Majestic Support < 1.1.1 - Unauthenticated SQL Injection
Slug
majestic-support
Published
2025-05-19
Title
Majestic Support < 1.1.1 - Missing Authorization
Slug
majestic-support
Published
2025-06-12
Title
Majestic Support < 1.1.1 - Missing Authorization
Slug
majestic-support
Published
2025-04-22
Title
Majestic Support < 1.0.8 - Authenticated (Contributor+) Local File Inclusion
Slug
majestic-support
Published
2026-04-09
Title
Majestic Support < 1.1.3 - Missing Authorization
Slug
majestic-support
Published
2026-06-26
Title
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin < 1.1.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
majestic-support
Published
2026-07-10
Title
Majestic Support < 1.2.0 - Authenticated (Subscriber+) SQL Injection via 'val' Parameter
Slug
majestic-support
Published
2026-10-01
Title
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin < 1.2.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
majestic-support
Published
2026-10-01
Title
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin < 1.2.1 - Missing Authorization
Slug
majestic-support
Published
2026-10-22
Title
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin < 1.2.2 - Missing Authorization
Slug
majestic-support
Published
2026-10-30
Title
Majestic Support < 1.2.3 - Authenticated (Subscriber+) SQL Injection via 'columns' Parameter