WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
meks-flexible-shortcodes
Published
2023-01-17
Title
Meks Flexible Shortcodes < 1.3.5 - Contributor+ Stored XSS
Slug
meks-flexible-shortcodes
Published
2025-05-07
Title
Meks Flexible Shortcodes < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meks-flexible-shortcodes
Published
2025-06-12
Title
Meks Flexible Shortcodes < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meks-quick-plugin-disabler
Published
2025-12-15
Title
Meks Quick Plugin Disabler <= 1.0 - Cross-Site Request Forgery
Slug
meks-smart-author-widget
Published
2024-07-10
Title
Meks Smart Author Widget < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meks-smart-social-widget
Published
2024-01-26
Title
Meks Smart Social Widget < 1.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
meks-smart-social-widget
Published
2024-04-26
Title
Meks Smart Social Widget < 1.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
meks-themeforest-smart-widget
Published
2024-04-26
Title
Meks ThemeForest Smart Widget < 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
meks-video-importer
Published
2024-07-11
Title
Meks Video Importer <= 1.0.11 - Missing Authorization
Slug
meks-video-importer
Published
2024-07-17
Title
Meks Video Importer < 1.0.13 - Missing Authorization to Authenticated (Subscriber+) API Keys Modification
Slug
melapress-login-security
Published
2024-06-03
Title
MelaPress Login Security < 1.3.1 - Authenticated (Admin+) Remote File Inclusion
Slug
melapress-login-security
Published
2025-04-07
Title
MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion
Slug
melapress-login-security
Published
2025-04-16
Title
MelaPress Login Security < 2.1.1 - Authenticated (Administrator+) PHP Object Injection
Slug
melapress-login-security
Published
2025-07-25
Title
MelaPress Login Security 2.1.0 - 2.1.1 - Privilege Escalation via Authentication Bypass
Slug
melapress-login-security-premium
Published
2025-04-07
Title
MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion
Slug
melapress-role-editor
Published
2026-01-22
Title
Melapress Role Editor < 1.2.0 - Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment
Slug
melascrivi
Published
2025-01-16
Title
melascrivi-plugin <= 1.4 - Reflected Cross-Site Scripting
Slug
melhor-envio-cotacao
Published
2025-04-07
Title
Melhor Envio < 2.15.12 - Unauthenticated Sensitive Information Exposure via Hardcoded Hash
Slug
melipayamak
Published
2025-06-05
Title
Melipayamak <= 2.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
membees-member-login-widget
Published
2026-01-27
Title
Membee Login < 2.3.7 - Unauthenticated Stored Cross-Site Scripting
Slug
member-access
Published
2025-01-06
Title
Member Access <= 1.1.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
member-approval
Published
2014-08-01
Title
Member Approval 131109 - wp-admin/options-general.php Option Manipulation CSRF
Slug
member-database
Published
2023-04-17
Title
Membership Database <= 1.0 - Reflected XSS
Slug
member-hero
Published
2022-05-18
Title
Member Hero <= 1.0.9 - Unauthenticated RCE
Slug
memberfindme
Published
2025-11-11
Title
MembershipWorks < 6.15 - Authenticated (Admin+) Stored Cross-Site Scripting