WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
marketing-performance
Published
2023-02-02
Title
Marketing Performance <= 2.0.0 - Reflected XSS
Slug
marketking-multivendor-marketplace-for-woocommerce
Published
2024-12-24
Title
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution < 2.0.25 - Missing Authorization
Slug
marketking-multivendor-marketplace-for-woocommerce
Published
2025-01-17
Title
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution < 2.0.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Slug
marketking-multivendor-marketplace-for-woocommerce
Published
2025-09-22
Title
MarketKing < 2.1.00 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
marketo-forms-and-tracking
Published
2020-01-17
Title
Marketo Forms and Tracking <= 1.0.2 - CSRF to XSS
Slug
marketplace-items
Published
2025-01-06
Title
Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marketplace' Shortcode
Slug
marketplace-items
Published
2025-01-06
Title
Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
markup-markdown
Published
2025-08-19
Title
Markup Markdown < 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
markup-markdown
Published
2025-09-01
Title
Markup Markdown < 3.20.10 - Contributor+ Stored XSS
Slug
markup-markdown
Published
2025-09-01
Title
Markup Markdown < 3.20.10 - Contributor+ Stored XSS
Slug
marmoset-viewer
Published
2021-07-06
Title
Marmoset Viewer < 1.9.3 - Reflected Cross Site Scripting
Slug
marmoset-viewer
Published
2025-01-16
Title
Marmoset Viewer <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
marquee-addons-for-elementor
Published
2025-10-04
Title
Marquee Addons for Elementor < 3.8.3 - Contributor+ Stored XSS
Slug
marquee-addons-for-elementor
Published
2025-12-12
Title
MarqueeAddons < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Marquee Widget
Slug
marquee-elementor
Published
2024-10-31
Title
Marquee Elementor with Posts <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
marquee-style-rss-news-ticker
Published
2025-01-16
Title
Marquee Style RSS News Ticker <= 3.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
martins-free-and-easy-ad-network-get-more-visitors
Published
2025-05-07
Title
Martins Free Monetized Ad Exchange Network <= 1.0.6 - Stored XSS via CSRF
Slug
martins-link-network
Published
2023-11-06
Title
Martins Free & Easy SEO Link buildings < 1.2.30 - Reflected XSS
Slug
martinus-partnersky-system
Published
2025-07-18
Title
Partnerský systém Martinus <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mas-addons-for-elementor
Published
2024-10-14
Title
MAS Elementor < 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mas-addons-for-elementor
Published
2025-01-07
Title
MAS Elementor < 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Slug
mas-static-content
Published
2024-09-24
Title
MAS Static Content < 1.0.9 - Authenticated (Contributor+) Private Static Content Page Disclosure
Slug
mas-wp-job-manager-company
Published
2024-10-17
Title
MAS Companies For WP Job Manager < 1.0.14 - Reflected Cross-Site Scripting
Slug
mashsharer
Published
2015-04-17
Title
Mashshare <= 2.3.0 - Information Disclosure
Slug
mashsharer
Published
2022-06-16
Title
MashShare < 3.8.5 - Admin+ Stored Cross-Site Scripting