WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
meta-box
Published
2019-02-01
Title
Meta Box < 4.16.2 - Mishandled Uploaded Files
Slug
meta-box
Published
2019-02-02
Title
Meta Box < 4.16.3 - Unauthorised File Deletion
Slug
meta-box
Published
2024-02-05
Title
Meta Box – WordPress Custom Fields Framework < 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meta-box
Published
2024-03-25
Title
Meta Box < 5.9.4 - Contributor+ Arbitrary Posts' Custom Field Disclosure
Slug
meta-box
Published
2024-08-09
Title
Meta Box – WordPress Custom Fields Framework < 5.9.11 - Missing Authorization to Information Exposure
Slug
meta-data-filter
Published
2021-07-08
Title
MDTF < 1.2.8 / 2.2.8 - Arbitrary Settings Update via CSRF
Slug
meta-display-block
Published
2025-11-17
Title
Meta Display Block <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meta-slider-and-carousel-with-lightbox
Published
2024-09-25
Title
Meta slider and carousel with lightbox < 2.0.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
meta-store-elements
Published
2024-10-31
Title
Meta Store Elements <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meta-tag-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
meta-tag-manager
Published
2024-03-27
Title
Meta Tag Manager < 3.1 - Subscriber+ PHP Object Injection
Slug
meta-tag-manager
Published
2025-01-31
Title
Meta Tag Manager < 3.2 - Missing Authorization
Slug
meta-tag-manager
Published
2025-10-01
Title
Meta Tag Manager < 3.3 - Contributor+ Open Redirect
Slug
meta-tags-for-seo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
metadata-seo
Published
2025-01-07
Title
Metadata SEO <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
metalpriceapi
Published
2025-05-22
Title
MetalpriceAPI < 1.1.5 - Contributor+ Remote Code Execution
Slug
metasync
Published
2024-09-30
Title
Search Atlas SEO < 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
metasync
Published
2025-09-22
Title
Search Atlas SEO < 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
meteor-slides
Published
2022-12-28
Title
Meteor Slides < 1.5.7 - Contributor+ Stored XSS
Slug
meteor-slides
Published
2024-11-20
Title
Meteor Slides <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
meteor-slides
Published
2025-01-06
Title
Meteor Slides <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
metform
Published
2022-04-23
Title
Metform Elementor Contact Form Builder < 2.1.4 - Unauthenticated API keys and Secrets Disclosure
Slug
metform
Published
2023-02-03
Title
Metform Elementor Contact Form Builder < 3.2.0 - Unauthenticated Stored XSS
Slug
metform
Published
2023-03-02
Title
Metform Elementor Contact Form Builder < 3.2.2 - reCaptcha Bypass
Slug
metform
Published
2023-06-08
Title
Metform Elementor Contact Form Builder < 3.3.2 - Multiple Subscriber+ Sensitive Information Disclosure Issues