WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
master-addons
Published
2024-06-03
Title
Master Addons for Elementor < 2.0.5.6 - Missing Authorization via get_jltma_save_menuitem_settings()
Slug
master-addons
Published
2024-07-11
Title
Master Addons for Elementor < 2.0.6.3 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
master-addons
Published
2024-09-09
Title
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor < 2.0.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element
Slug
master-addons
Published
2024-11-11
Title
Master Addons for Elementor < 2.1.0 - Author+ Stored XSS
Slug
master-addons
Published
2025-01-06
Title
Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor < 2.0.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module
Slug
master-addons
Published
2025-03-03
Title
Master Addons < 2.0.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
master-addons
Published
2025-03-03
Title
Master Addons < 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
master-addons
Published
2025-07-15
Title
Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations < 2.0.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
master-addons
Published
2025-08-11
Title
Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations < 2.0.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox
Slug
master-addons
Published
2025-12-05
Title
Master Addons for Elementor < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
master-addons
Published
2025-12-31
Title
Master Addons for Elementor < 2.1.0 - Unauthenticated Insecure Direct Object Reference
Slug
master-bar
Published
2024-11-04
Title
Master Bar <= 1.0 - Reflected Cross-Site Scripting
Slug
master-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
master-blocks
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
master-elements
Published
2022-03-29
Title
Master Elements <= 8.0 - Unauthenticated SQLi
Slug
master-paper-collapse-toggle
Published
2025-09-05
Title
Master Paper Collapse Toggle <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
master-popups-lite
Published
2024-07-10
Title
Master Popups <= 1.0.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
master-slider
Published
2015-08-20
Title
Master Slider < 2.5.2 - Authenticated Blind SQL Injection
Slug
master-slider
Published
2016-07-13
Title
Master Slider < 2.8.0 - Reflected Cross-Site Scripting (XSS)
Slug
master-slider
Published
2018-11-14
Title
Master Slider < 3.7.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
master-slider
Published
2024-03-01
Title
Master Slider < 3.10.0 - Sliders Deletion via CSRF
Slug
master-slider
Published
2024-03-01
Title
Master Slider < 3.9.10 - Editor+ Stored XSS via slider callback
Slug
master-slider
Published
2024-03-01
Title
Master Slider < 3.10.0 - Contributor+ Stored XSS
Slug
master-slider
Published
2024-04-16
Title
Master Slider < 3.9.7 - Unauthenticated PHP Object Injection
Slug
master-slider
Published
2024-04-16
Title
Master Slider – Responsive Touch Slider < 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting