WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
memeone
Published
2025-01-16
Title
MemeOne <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
memorialday
Published
2025-02-17
Title
MemorialDay < 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
memphis-documents-library
Published
2016-03-22
Title
Memphis Document Library Plugin <= 3.1.5 - Arbitrary File Download
Slug
memphis-documents-library
Published
2015-09-04
Title
Memphis Documents Library < 3.0 - Multiple Issues
Slug
memsource-connector
Published
2026-01-16
Title
Phrase TMS Integration for WordPress < 4.7.6 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
Slug
mendeleyplugin
Published
2023-10-18
Title
Mendeley <= 1.3.4 - Admin+ Stored XSS
Slug
menu-card
Published
2026-01-08
Title
Menu Card <= 0.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
menu-icons
Published
2024-05-15
Title
Menu Icons by ThemeIsle < 0.13.14 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Slug
menu-icons
Published
2026-02-03
Title
Menu Icons by ThemeIsle < 0.13.21 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
menu-image
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
menu-image
Published
2022-03-07
Title
Menu Image, Icons made easy < 3.0.8 - Subscriber+ Stored Cross-Site Scripting
Slug
menu-image
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
menu-image
Published
2023-12-19
Title
Menu Image, Icons made easy < 3.11 - Admin+ Stored XSS
Slug
menu-in-post
Published
2025-12-30
Title
Menu In Post <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
menu-item-scheduler
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
menu-items-visibility-control
Published
2022-11-29
Title
Menu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution
Slug
menu-manager-ultra
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
menu-ordering-reservations
Published
2022-10-31
Title
Restaurant Menu < 2.3.2 - Multiple CSRF
Slug
menu-ordering-reservations
Published
2022-10-31
Title
Restaurant Menu < 2.3.1 - Unauthorised AJAX Calls
Slug
menu-ordering-reservations
Published
2023-01-16
Title
Restaurant Menu < 2.3.6 - Contributor+ Stored XSS via Shortcode
Slug
menu-ordering-reservations
Published
2023-05-09
Title
Restaurant Menu < 2.3.7 - Reflected XSS
Slug
menu-ordering-reservations
Published
2024-04-16
Title
Restaurant Menu – Food Ordering System – Table Reservation < 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
menu-ordering-reservations
Published
2024-06-14
Title
Restaurant Menu and Food Ordering < 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
menu-ordering-reservations
Published
2024-11-19
Title
Restaurant Menu – Food Ordering System – Table Reservation < 2.4.3 - Reflected Cross-Site Scripting
Slug
menu-shortcode
Published
2023-03-01
Title
menu shortcode <= 1.0 - Contributor+ Stored XSS via Shortcode