WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mini-mail-dashboard-widget
Published
2012-08-08
Title
Mini Mail Dashboard Widget 1.42 - Message Body XSS
Slug
mini-twitter-feed
Published
2025-04-24
Title
Mini twitter feed <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
minical
Published
2024-11-08
Title
Minical Hotel Booking Plugin <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
minify-html-markup
Published
2023-02-21
Title
Minify HTML <= 2.1.7 - Settings Update via CSRF
Slug
minify-html-markup
Published
2024-12-12
Title
Minify HTML < 2.1.11 - - Regular Expressions Denial of Service
Slug
minimal-coming-soon-maintenance-mode
Published
2020-01-08
Title
Minimal Coming Soon & Maintenance Mode < 2.15 - CSRF to Stored XSS and Setting Changes
Slug
minimal-coming-soon-maintenance-mode
Published
2020-01-08
Title
Minimal Coming Soon & Maintenance Mode < 2.15 - Insecure Permissions: Enable and Disable Maintenance Mode
Slug
minimal-coming-soon-maintenance-mode
Published
2020-01-08
Title
Minimal Coming Soon & Maintenance Mode < 2.17 - Insecure permissions: Export Settings/Theme Change
Slug
minimal-coming-soon-maintenance-mode
Published
2022-05-23
Title
Minimal Coming Soon – Coming Soon Page < 2.35 - Multiple Authenticated Stored XSS
Slug
minimal-coming-soon-maintenance-mode
Published
2024-02-05
Title
Minimal Coming Soon – Coming Soon Page < 2.38 - Unauthenticated Maintenance Mode Bypass
Slug
minimal-coming-soon-maintenance-mode
Published
2024-06-07
Title
Minimal Coming Soon – Coming Soon Page < 2.39 - Missing Authorization to Limited Settings Change
Slug
minimal-share-buttons
Published
2025-05-29
Title
Minimal Share Buttons < 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Parameter
Slug
minimalistic-event-manager
Published
2025-04-02
Title
Minimalistic Event Manager <= 1.1.1 - Missing Authorization
Slug
minimum-password-strength
Published
2025-02-24
Title
Minimum Password Strength <= 1.2.0 - Cross-Site Request Forgery
Slug
minimum-purchase-for-woocommerce
Published
2023-10-16
Title
Minimum Purchase for WooCommerce <= 2.0.0.1 - Contributor+ Stored XSS
Slug
miniorange-2-factor-authentication
Published
2021-08-10
Title
miniOrange's Google Authenticator < 5.4.40 - Reflected Cross-Site Scripting
Slug
miniorange-2-factor-authentication
Published
2022-02-28
Title
miniOrange's Google Authenticator < 5.5 - Unauthenticated Arbitrary Options Deletion
Slug
miniorange-2-factor-authentication
Published
2022-06-06
Title
miniOrange's Google Authenticator < 5.5.6 - Admin+ Stored Cross-Site Scripting
Slug
miniorange-2-factor-authentication
Published
2022-06-27
Title
miniOrange's Google Authenticator < 5.5.75 - Reflected Cross-Site Scripting
Slug
miniorange-2-factor-authentication
Published
2022-10-31
Title
miniOrange's Google Authenticator < 5.6.2 - Subscriber+ Settings Update
Slug
miniorange-2-factor-authentication
Published
2023-04-19
Title
miniOrange's Google Authenticator < 5.6.6 - Missing Authorization to Plugin Settings Change
Slug
miniorange-2-factor-authentication
Published
2025-08-23
Title
miniOrange's Google Authenticator < 6.1.2 - Missing Authorization
Slug
miniorange-discord-integration
Published
2022-09-26
Title
miniOrange Discord Integration < 2.1.6 - Subscriber+ App Disabling
Slug
miniorange-discord-integration
Published
2025-05-22
Title
miniOrange Discord Integration <= 2.2.2 - Unauthenticated Local File Inclusion
Slug
miniorange-firebase-sms-otp-verification
Published
2024-10-16
Title
Miniorange OTP Verification with Firebase < 3.6.1 - Unauthenticated Arbitrary User Password Change