WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mapsvg-lite-interactive-vector-maps
Published
2025-05-16
Title
MapSVG Lite < 8.6.10 - Unauthenticated Arbitrary Shortcode Execution
Slug
mapsvg-lite-interactive-vector-maps
Published
2025-10-06
Title
MapSVG < 8.7.23 - Contributor+ Stored XSS
Slug
mapsvg-lite-interactive-vector-maps
Published
2025-12-24
Title
MapSVG < 8.7.4 - Authenticated (Contributor+) Arbitrary File Upload
Slug
mapwiz
Published
2023-01-19
Title
Mapwiz <= 1.0.1 - Admin+ SQLi
Slug
marekkis-watermark
Published
2014-08-01
Title
Marekkis Watermark 0.9.2 - wp-admin/options-general.php pfad Parameter XSS
Slug
marekkis-watermark
Published
2025-02-16
Title
Marekkis Watermark-Plugin <= 0.9.4 - Reflected Cross-Site Scripting
Slug
mark-new-posts
Published
2024-12-11
Title
Mark New Posts < 7.6 - Missing Authorization via save_options
Slug
mark-posts
Published
2022-03-14
Title
Mark Posts < 2.0.1 - Admin+ Stored Cross-Site Scripting
Slug
mark-posts
Published
2025-01-16
Title
Mark Posts < 2.2.5 - Missing Authorization
Slug
markdown-on-save-improved
Published
2016-05-25
Title
Markdown on Save Improved <= 2.5 - Stored Cross-Site Scripting (XSS)
Slug
markdown-shortcode
Published
2025-09-25
Title
Markdown Shortcode < 0.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
marker-io
Published
2023-10-03
Title
Marker.io < 1.1.7 - Cross-Site Request Forgery
Slug
marker-io
Published
2024-04-10
Title
Marker.io < 1.1.9 - Cross-Site Request Forgery
Slug
market-360-viewer
Published
2024-10-31
Title
Market 360 Viewer <= 1.01 - Authenticated (Contributor+) SQL Injection
Slug
market-exporter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
market-exporter
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
market-exporter
Published
2024-06-06
Title
Market Exporter < 2.0.20 - Missing Authorization to Arbitrary File Deletion
Slug
market-exporter
Published
2025-02-23
Title
Market Exporter < 2.0.22 - Missing Authorization
Slug
market-exporter
Published
2025-06-05
Title
Market Exporter < 2.0.23 - Cross-Site Request Forgery
Slug
marketer-addons
Published
2025-04-01
Title
Marketer Addons <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
marketing-and-seo-booster
Published
2024-10-09
Title
Marketing and SEO Booster <= 1.9.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
marketing-automation
Published
2025-02-11
Title
Marketing Automation < 1.2.6.9 - Reflected Cross-Site Scripting
Slug
marketing-automation-by-azexo
Published
2024-10-25
Title
Marketing Automation by AZEXO <= 1.27.80 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
marketing-automation-by-azexo
Published
2024-10-28
Title
Marketing Automation by AZEXO <= 1.27.80 - Authenticated (Subscriber+) Privilege Escalation
Slug
marketing-optimizer
Published
2024-02-28
Title
Marketing Optimizer <= 20200925 - Cross-Site Request Forgery to Stored Cross-Site Scripting