WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
magic-action-box
Published
2023-09-27
Title
Magic Action Box <= 2.17.2 - Contributor+ Stored XSS
Slug
magic-buttons-for-elementor
Published
2025-07-01
Title
Magic Buttons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via magic-button Shortcode
Slug
magic-buttons-for-elementor
Published
2025-07-01
Title
Magic Buttons for Elementor < 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via magic-button Shortcode
Slug
magic-carousel
Published
2025-05-16
Title
Magic Responsive Slider and Carousel WordPress < 1.6 - Authenticated (Contributor+) SQL Injection
Slug
magic-edge-lite-image-background-remover
Published
2025-08-01
Title
Magic Edge – Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via height Parameter
Slug
magic-fields
Published
2017-03-01
Title
Magic Fields <= 1.7.1 - Authenticated Cross-Site Scripting (XSS)
Slug
magic-google-maps
Published
2025-01-16
Title
Magic Google Maps <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
magic-import-document-extractor
Published
2026-02-03
Title
Magic Import Document Extractor < 1.0.6 - Missing Authorization to Unauthenticated Plugin License Status Modification
Slug
magic-import-document-extractor
Published
2026-02-03
Title
Magic Import Document Extractor <= 1.0.6 - Unauthenticated Sensitive Information Exposure
Slug
magic-login-api
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
magic-login-mail
Published
2026-02-13
Title
Magic Login Mail or QR Code < 2.06 - Unauthenticated Privilege Escalation via Insecure QR Code File Storage
Slug
magic-post-thumbnail
Published
2021-07-05
Title
Magic Post Thumbnail < 3.3.7 - Reflected Cross-Site Scripting (XSS)
Slug
magic-post-thumbnail
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
magic-post-thumbnail
Published
2023-04-03
Title
Magic Post Thumbnail < 4.1.11 - Reflected XSS
Slug
magic-post-thumbnail
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
magic-post-thumbnail
Published
2024-07-22
Title
Generate Images – Magic Post Thumbnail < 5.2.8 - Admin+ Stored XSS
Slug
magic-post-thumbnail
Published
2024-08-26
Title
Magic Post Thumbnail < 5.2.10 - Reflected Cross-Site Scripting
Slug
magic-post-voice
Published
2021-12-14
Title
Magic Post Voice <= 1.2 - Reflected Cross-Site Scripting
Slug
magic-slider
Published
2024-11-08
Title
Magic Slider <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
magic-the-gathering-card-tooltips
Published
2025-01-24
Title
Magic the Gathering Card Tooltips < 3.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
magic-the-gathering-card-tooltips
Published
2025-02-14
Title
Magic the Gathering Card Tooltips < 3.6.0 - Unauthenticated Stored Cross-Site Scripting
Slug
magic_carousel
Published
2026-01-08
Title
Magic Responsive Slider and Carousel WordPress <= 1.6 - Reflected Cross-Site Scripting
Slug
magic_slider
Published
2026-01-08
Title
Magic Slider <= 2.2 - Reflected Cross-Site Scripting
Slug
magical-addons-for-elementor
Published
2024-05-06
Title
Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) < 1.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Effect Widget
Slug
magical-addons-for-elementor
Published
2024-05-07
Title
Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) < 1.1.35 - Authenticated (Contributor+) Stored Cross-Site Scripting