WordPress Plugin Vulnerabilities | Page 14 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

manage-user-columns

Published

2024-11-01

Title

Manage User Columns < 1.0.6 - Cross-Site Request Forgery

Slug

manager-for-icomoon

Published

2023-05-04

Title

Manager for Icomoon < 2.2 - Contributor+ Stored XSS

Slug

manager-for-icomoon

Published

2023-05-08

Title

Manager for Icomoon < 2.1 - Unauthenticated Arbitrary File Upload

Slug

mancx-askme-widget

Published

2025-01-16

Title

Mancx AskMe Widget <= 0.3 - Reflected Cross-Site Scripting

Slug

mandatory-fields

Published

2026-03-20

Title

Mandatory Field <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Fields

Slug

Published

2021-10-26

Title

Mang Board WP < 1.6.9 - SQL Injection

Slug

Published

2023-09-27

Title

Mang Board WP < 1.8.2 - Settings Update via CSRF

Slug

Published

2024-01-26

Title

Mang Board WP < 1.7.8 - Admin+ Stored XSS

Slug

Published

2024-03-28

Title

Mang Board WP < 1.8.1 - Reflected Cross-Site Scripting

Slug

Published

2025-01-03

Title

Mang Board WP < 1.8.5 - Reflected Cross-Site Scripting

Slug

Published

2025-04-23

Title

MangBoard WP < 1.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And Footer

Slug

Published

2025-11-07

Title

Mang Board WP < 2.3.2 - Reflected Cross-Site Scripting

Slug

Published

2026-07-08

Title

Mang Board WP < 2.3.5 - Reflected Cross-Site Scripting via 'stag' Parameter

Slug

Published

2026-08-13

Title

Mang Board WP < 2.3.5 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-08-25

Title

Mang Board WP < 2.3.8 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie

Slug

Published

2026-09-02

Title

Mang Board WP < 2.3.9 - Cross-Site Request Forgery

Slug

Published

2026-09-23

Title

Mang Board < 2.4.2 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-10-01

Title

Mang Board < 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter

Slug

Published

2026-10-13

Title

Mang Board < 2.4.4 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter

Slug

Published

2026-10-14

Title

Mang Board WP < 2.4.1 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter

Slug

Published

2026-10-13

Title

Mang Board < 2.4.5 - Unauthenticated SQL Injection

Slug

Published

2026-10-19

Title

Mang Board < 2.4.5 - Authenticated (Subscriber+) Arbitrary File Upload

Slug

Published

2026-10-30

Title

Mang Board < 2.4.7 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-10-13

Title

Mang Board < 2.4.4 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter

Slug

Published

2026-10-13

Title

Mang Board < 2.4.4 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter