WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
meta-tag-manager
Published
2024-03-27
Title
Meta Tag Manager < 3.1 - Subscriber+ PHP Object Injection
Slug
meta-tag-manager
Published
2025-01-31
Title
Meta Tag Manager < 3.2 - Missing Authorization
Slug
meta-tag-manager
Published
2025-10-01
Title
Meta Tag Manager < 3.3 - Contributor+ Open Redirect
Slug
meta-tags-for-seo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
metadata-seo
Published
2025-01-07
Title
Metadata SEO <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
metalpriceapi
Published
2025-05-22
Title
MetalpriceAPI < 1.1.5 - Contributor+ Remote Code Execution
Slug
metamagic
Published
2026-05-26
Title
MetaMagic SEO Plugin <= 1.6 - Cross-Site Request Forgery to Plugin Settings Update via Settings Page
Slug
metasync
Published
2024-09-30
Title
Search Atlas SEO < 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
metasync
Published
2025-09-22
Title
Search Atlas SEO < 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
metasync
Published
2026-01-27
Title
Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization 2.4.4 - 2.5.15 - Missing Authorization to Authenticated (Subscriber+) Authentication Bypass via Account Takeover
Slug
metasync
Published
2026-07-01
Title
Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization < 2.6.7 - Reflected Cross-Site Scripting
Slug
metasync
Published
2026-07-10
Title
Search Atlas SEO < 2.6.12 - Subscriber+ Google Indexing API Access
Slug
metasync
Published
2026-09-03
Title
Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion
Slug
meteor-slides
Published
2022-12-28
Title
Meteor Slides < 1.5.7 - Contributor+ Stored XSS
Slug
meteor-slides
Published
2024-11-20
Title
Meteor Slides <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
meteor-slides
Published
2025-01-06
Title
Meteor Slides <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
metform
Published
2022-04-23
Title
Metform Elementor Contact Form Builder < 2.1.4 - Unauthenticated API keys and Secrets Disclosure
Slug
metform
Published
2023-02-03
Title
Metform Elementor Contact Form Builder < 3.2.0 - Unauthenticated Stored XSS
Slug
metform
Published
2023-03-02
Title
Metform Elementor Contact Form Builder < 3.2.2 - reCaptcha Bypass
Slug
metform
Published
2023-06-08
Title
Metform Elementor Contact Form Builder < 3.3.2 - Multiple Subscriber+ Sensitive Information Disclosure Issues
Slug
metform
Published
2023-06-08
Title
Metform Elementor Contact Form Builder < 3.3.1 - Unauthenticated CSV Injection
Slug
metform
Published
2023-06-08
Title
Metform Elementor Contact Form Builder < 3.3.1 - Multiple Contributor+ Stored XSS via Shortcode
Slug
metform
Published
2023-05-04
Title
Metform Elementor Contact Form Builder < 3.3.2 - Unauthenticated Permalink Structure Update
Slug
metform
Published
2023-06-22
Title
Metform Elementor Contact Form Builder < 3.3.3 - Cross-Site Request Forgery
Slug
metform
Published
2023-08-30
Title
Metform Elementor Contact Form Builder < 3.3.2 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode