WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
magazine-lister-for-yumpu
Published
2025-04-09
Title
ePaper Lister for Yumpu <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mage-eventpress
Published
2021-11-03
Title
Event Manager for WooCommerce < 3.5.3 - Unauthenticated Arbitrary Elementor Template Import
Slug
mage-eventpress
Published
2021-11-03
Title
Event Manager for WooCommerce < 3.5.3 - Unauthenticated Arbitrary Options Reset
Slug
mage-eventpress
Published
2022-02-21
Title
Event Manager for WooCommerce < 3.5.8 - Contributor+ SQL Injection
Slug
mage-eventpress
Published
2023-01-10
Title
Event Manager and Tickets Selling Plugin for WooCommerce < 3.8.0 - Contributor+ Stored XSS
Slug
mage-eventpress
Published
2023-03-20
Title
Event Manager for WooCommerce < 3.8.7 - Admin+ Stored XSS
Slug
mage-eventpress
Published
2023-03-16
Title
Event Manager for WooCommerce < 3.7.8 - Cross-Site Request Forgery (CSRF)
Slug
mage-eventpress
Published
2023-06-22
Title
Event Manager for WooCommerce < 3.9.6 - Editor+ Stored Cross-Site Scripting
Slug
mage-eventpress
Published
2024-01-31
Title
Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently < 4.1.2 - Authenticated (Contributor+) PHP Object Injection in mep_event_meta_save
Slug
mage-eventpress
Published
2024-08-07
Title
Event Manager for WooCommerce < 4.2.2 - Authenticated (Contributor+) Local File Inclusion
Slug
mage-eventpress
Published
2024-10-21
Title
Event Manager for WooCommerce < 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mage-eventpress
Published
2025-03-27
Title
WpEvently < 4.3.0 - Authenticated (Contributor+) Local File Inclusion
Slug
mage-eventpress
Published
2025-03-27
Title
WpEvently < 4.3.0 - Missing Authorization
Slug
mage-eventpress
Published
2025-04-08
Title
WpEvently < 4.3.7 - Contributor+ PHP Object Injection
Slug
mage-eventpress
Published
2025-06-06
Title
WpEvently < 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mage-eventpress
Published
2025-07-30
Title
WpEvently < 4.4.7 - Missing Authorization
Slug
mage-eventpress
Published
2025-08-27
Title
WpEvently < 4.4.9 - Authenticated (Contributor+) PHP Object Injection
Slug
mage-eventpress
Published
2025-12-04
Title
WpEvently < 5.0.5 - Missing Authorization
Slug
mage-eventpress
Published
2025-11-30
Title
WpEvently < 5.0.5 - Missing Authorization
Slug
mage-forms
Published
2024-11-08
Title
Mage Front End Forms <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
magee-shortcodes
Published
2022-01-17
Title
Magee Shortcodes < 2.0.9 - Reflected Cross-Site Scripting
Slug
magee-shortcodes
Published
2023-09-21
Title
Magee Shortcodes <= 2.1.1 - Contributor+ Stored XSS via shortcode
Slug
magic-action-box
Published
2023-09-27
Title
Magic Action Box <= 2.17.2 - Contributor+ Stored XSS
Slug
magic-buttons-for-elementor
Published
2025-07-01
Title
Magic Buttons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via magic-button Shortcode
Slug
magic-buttons-for-elementor
Published
2025-07-01
Title
Magic Buttons for Elementor < 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via magic-button Shortcode