WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
magic-carousel
Published
2025-05-16
Title
Magic Responsive Slider and Carousel WordPress <= 1.4 - Authenticated (Contributor+) SQL Injection
Slug
magic-edge-lite-image-background-remover
Published
2025-08-01
Title
Magic Edge – Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via height Parameter
Slug
magic-fields
Published
2017-03-01
Title
Magic Fields <= 1.7.1 - Authenticated Cross-Site Scripting (XSS)
Slug
magic-google-maps
Published
2025-01-16
Title
Magic Google Maps <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
magic-login-api
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
magic-post-thumbnail
Published
2021-07-05
Title
Magic Post Thumbnail < 3.3.7 - Reflected Cross-Site Scripting (XSS)
Slug
magic-post-thumbnail
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
magic-post-thumbnail
Published
2023-04-03
Title
Magic Post Thumbnail < 4.1.11 - Reflected XSS
Slug
magic-post-thumbnail
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
magic-post-thumbnail
Published
2024-07-22
Title
Generate Images – Magic Post Thumbnail < 5.2.8 - Admin+ Stored XSS
Slug
magic-post-thumbnail
Published
2024-08-26
Title
Magic Post Thumbnail < 5.2.10 - Reflected Cross-Site Scripting
Slug
magic-post-voice
Published
2021-12-14
Title
Magic Post Voice <= 1.2 - Reflected Cross-Site Scripting
Slug
magic-slider
Published
2024-11-08
Title
Magic Slider <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
magic-the-gathering-card-tooltips
Published
2025-01-24
Title
Magic the Gathering Card Tooltips < 3.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
magic-the-gathering-card-tooltips
Published
2025-02-14
Title
Magic the Gathering Card Tooltips < 3.6.0 - Unauthenticated Stored Cross-Site Scripting
Slug
magical-addons-for-elementor
Published
2024-05-06
Title
Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) < 1.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Effect Widget
Slug
magical-addons-for-elementor
Published
2024-05-07
Title
Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) < 1.1.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
magical-addons-for-elementor
Published
2024-06-05
Title
Magical Addons For Elementor < 1.1.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
magical-addons-for-elementor
Published
2024-07-11
Title
Magical Addons For Elementor < 1.1.42 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
magical-addons-for-elementor
Published
2024-07-10
Title
Magical Addons For Elementor < 1.1.42 - Contributor+ Stored XSS
Slug
magical-addons-for-elementor
Published
2024-11-01
Title
Magical Addons For Elementor < 1.2.3 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
magical-addons-for-elementor
Published
2024-11-08
Title
Magical Addons For Elementor < 1.2.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
Slug
magical-addons-for-elementor
Published
2024-12-02
Title
Magical Addons For Elementor < 1.3.7 - Contributor+ Stored XSS
Slug
magical-addons-for-elementor
Published
2025-07-28
Title
Magical Addons For Elementor < 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
Slug
magical-blocks
Published
2025-04-01
Title
Magical Blocks < 2.0.0 - Contributor+ Stored XSS