WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
marmoset-viewer
Published
2021-07-06
Title
Marmoset Viewer < 1.9.3 - Reflected Cross Site Scripting
Slug
marmoset-viewer
Published
2025-01-16
Title
Marmoset Viewer <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
marquee-addons-for-elementor
Published
2025-10-04
Title
Marquee Addons for Elementor < 3.8.3 - Contributor+ Stored XSS
Slug
marquee-addons-for-elementor
Published
2025-12-12
Title
MarqueeAddons < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Marquee Widget
Slug
marquee-elementor
Published
2024-10-31
Title
Marquee Elementor with Posts <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
marquee-style-rss-news-ticker
Published
2025-01-16
Title
Marquee Style RSS News Ticker <= 3.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
martins-free-and-easy-ad-network-get-more-visitors
Published
2025-05-07
Title
Martins Free Monetized Ad Exchange Network <= 1.0.6 - Stored XSS via CSRF
Slug
martins-link-network
Published
2023-11-06
Title
Martins Free & Easy SEO Link buildings < 1.2.30 - Reflected XSS
Slug
martinus-partnersky-system
Published
2025-07-18
Title
Partnerský systém Martinus <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mas-addons-for-elementor
Published
2024-10-14
Title
MAS Elementor < 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mas-addons-for-elementor
Published
2025-01-07
Title
MAS Elementor < 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Slug
mas-static-content
Published
2024-09-24
Title
MAS Static Content < 1.0.9 - Authenticated (Contributor+) Private Static Content Page Disclosure
Slug
mas-wp-job-manager-company
Published
2024-10-17
Title
MAS Companies For WP Job Manager < 1.0.14 - Reflected Cross-Site Scripting
Slug
mashsharer
Published
2015-04-17
Title
Mashshare <= 2.3.0 - Information Disclosure
Slug
mashsharer
Published
2022-06-16
Title
MashShare < 3.8.5 - Admin+ Stored Cross-Site Scripting
Slug
mashsharer
Published
2022-12-23
Title
MashShare < 3.8.7 - Contributor+ Stored XSS
Slug
mashsharer
Published
2025-01-03
Title
Social Media Share Buttons | MashShare <= 4.0.47 - Missing Authorization
Slug
masjidal
Published
2025-01-08
Title
Muslim Prayer Time-Salah/Iqamah < 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
masker-elementor
Published
2025-12-11
Title
Masker for Elementor <= 1.1.4 - Missing Authorization
Slug
mass-custom-fields-manager
Published
2025-01-16
Title
Mass Custom Fields Manager <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mass-delete-unused-tags
Published
2023-03-10
Title
Mass Delete Unused Tags < 3.0.0 - Tags Deletion via CSRF
Slug
mass-email-to-users
Published
2023-04-28
Title
Mass Email To users < 1.1.5 - Reflected XSS
Slug
mass-messaging-in-buddypress
Published
2025-01-16
Title
Mass Messaging in BuddyPress <= 2.2.1 - Reflected Cross-Site Scripting
Slug
mass-pagesposts-creator
Published
2018-06-07
Title
Mass Pages/Posts Creator <= 1.2.4 - DoS
Slug
mass-pagesposts-creator
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius