WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ml-slider
Published
2025-03-02
Title
Slider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSS
Slug
ml-slider
Published
2025-03-02
Title
Slider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSS
Slug
ml-slider
Published
2025-06-13
Title
Slider, Gallery, and Carousel by MetaSlider < 3.99.0 - Contributor+ Stored XSS via aria-label Parameter
Slug
mlanguage
Published
2025-04-17
Title
mLanguage <= 1.6.1 - Cross-Site Request Forgery
Slug
mlr-audio
Published
2024-10-31
Title
ML Responsive Audio player with playlist Shortcode <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mm-breaking-news
Published
2024-08-22
Title
MM-Breaking News <= 0.7.9 - Reflected XSS
Slug
mm-breaking-news
Published
2024-08-22
Title
MM-Breaking News <= 0.7.9 - Stored XSS via CSRF
Slug
mm-duplicate
Published
2014-08-01
Title
MM Duplicate <= 1.2 - SQL Injection
Slug
mm-email2image
Published
2024-04-05
Title
MM-email2image <= 0.2.5 - Stored XSS via CSRF
Slug
mm-email2image
Published
2024-04-05
Title
MM-email2image <= 0.2.5 - Contributor+ Stored XSS
Slug
mm-forms
Published
2012-06-07
Title
MM Forms & MM Forms Community 2.2.6 - Unauthenticated Arbitrary File Upload
Slug
mm-forms-community
Published
2014-08-01
Title
MM Forms Community <= 1.2.3 - SQL Injection
Slug
mm-forms-community
Published
2012-06-07
Title
MM Forms & MM Forms Community 2.2.6 - Unauthenticated Arbitrary File Upload
Slug
mmm-file-list
Published
2023-11-06
Title
Mmm Simple File List <= 2.3 - Contributor+ Stored XSS
Slug
mmm-file-list
Published
2023-11-06
Title
Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing
Slug
mmm-unity-loader
Published
2025-08-01
Title
Mmm Unity Loader <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributes Parameter
Slug
mmt-eventon-exim-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mmx-make-me-christmas
Published
2025-04-09
Title
MMX – Make Me Christmas <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mobi2go
Published
2025-09-22
Title
Mobi2Go <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
mobigatevn
Published
2025-01-16
Title
Mobigate <= 1.0.3 - Reflected Cross-Site Scripting
Slug
mobile-address-bar-changer
Published
2023-07-25
Title
Mobile Address Bar Changer <= 3.0 - Settings Update via CSRF
Slug
mobile-app
Published
2025-04-01
Title
Mobile App Canvas < 3.8.3 - Missing Authorization
Slug
mobile-app-builder-by-wappress
Published
2017-03-07
Title
WordPress Mobile app Builder 1.05 - Unauthenticated File Upload
Slug
mobile-app-editor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
mobile-app-editor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting