WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mandatory-fields
Published
2026-03-20
Title
Mandatory Field <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Fields
Slug
mangboard
Published
2021-10-26
Title
Mang Board WP < 1.6.9 - SQL Injection
Slug
mangboard
Published
2023-09-27
Title
Mang Board WP < 1.8.2 - Settings Update via CSRF
Slug
mangboard
Published
2024-01-26
Title
Mang Board WP < 1.7.8 - Admin+ Stored XSS
Slug
mangboard
Published
2024-03-28
Title
Mang Board WP < 1.8.1 - Reflected Cross-Site Scripting
Slug
mangboard
Published
2025-01-03
Title
Mang Board WP < 1.8.5 - Reflected Cross-Site Scripting
Slug
mangboard
Published
2025-04-23
Title
MangBoard WP < 1.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And Footer
Slug
mangboard
Published
2025-11-07
Title
Mang Board WP < 2.3.2 - Reflected Cross-Site Scripting
Slug
mangboard
Published
2026-07-08
Title
Mang Board WP < 2.3.5 - Reflected Cross-Site Scripting via 'stag' Parameter
Slug
mangboard
Published
2026-08-13
Title
Mang Board WP < 2.3.5 - Unauthenticated Stored Cross-Site Scripting
Slug
mangboard
Published
2026-08-25
Title
Mang Board WP < 2.3.8 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie
Slug
mangboard
Published
2026-09-02
Title
Mang Board WP < 2.3.9 - Cross-Site Request Forgery
Slug
maniac-seo
Published
2025-01-16
Title
Maniac SEO <= 2.0 - Reflected Cross-Site Scripting
Slug
mantenimiento-web
Published
2022-10-19
Title
Mantenimiento Web < 0.14 - Admin+ Stored XSS
Slug
mantenimiento-web
Published
2022-10-31
Title
Mantenimiento web < 0.14 - Stored XSS via CSRF
Slug
manual-image-crop
Published
2015-08-24
Title
Manual Image Crop <= 1.10 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
manual-image-crop
Published
2026-08-14
Title
Manual Image Crop < 1.15 - Subscriber+ Arbitrary Attachment Image Overwrite via IDOR
Slug
manuall-dofollow
Published
2025-07-07
Title
SMu Manual DoFollow <= 1.8.1 - Reflected Cross-Site Scripting
Slug
manycontacts-bar
Published
2025-01-08
Title
WhatsApp click to chat <= 3.0.4 - Reflected Cross-Site Scripting
Slug
map-addons-for-elementor-waze-map
Published
2024-10-21
Title
Local Business Addons For Elementor <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
map-block-gutenberg
Published
2021-02-10
Title
Map Block for Google Maps < 1.32 - Unauthorised Google API Key change
Slug
map-block-leaflet
Published
2025-05-28
Title
Map Block Leaflet < 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
Slug
map-categories-to-pages
Published
2025-09-26
Title
Map Categories to Pages <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
map-contact
Published
2025-03-24
Title
Map Contact <= 3.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
map-location-picker-at-checkout-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius