WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
miniorange-wp-as-saml-idp
Published
2022-06-06
Title
Login using WordPress Users < 1.13.4 - Admin+ Stored Cross-Site Scripting
Slug
miniorange-wp-as-saml-idp
Published
2024-11-15
Title
Login using WordPress Users ( WP as SAML IDP ) < 1.15.7 - Authenticated (Administrator+) SQL Injection
Slug
mins-to-read
Published
2024-11-28
Title
Mins To Read <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
minterpress
Published
2024-12-11
Title
Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
minterpress
Published
2025-01-16
Title
Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
mipl-wc-multisite-sync
Published
2025-01-06
Title
MIPL WC Multisite Sync < 1.1.6 - Unauthenticated Arbitrary File Download
Slug
miraculous-el
Published
2026-02-10
Title
Miraculous Elementor < 2.0.8 - Authenticated (Subscriber+) Privilege Escalation
Slug
miraculouscore
Published
2025-08-21
Title
Miraculous Core < 2.0.8 - Unauthenticated Privilege Escalation
Slug
miraculouscore
Published
2025-09-01
Title
Miraculous Core < 2.0.9 - Unauthenticated Insecure Direct Object Reference
Slug
misiek-paypal
Published
2024-08-22
Title
Misiek Paypal <= 1.1.20090324 - Stored XSS via CSRF
Slug
misiek-photo-album
Published
2024-08-22
Title
Misiek Photo Album <= 1.4.3 - Stored XSS via CSRF
Slug
misiek-photo-album
Published
2024-08-22
Title
Misiek Photo Album <= 1.4.3 - Album Deletion via CSRF
Slug
mislider
Published
2025-10-23
Title
Multi Item Responsive Slider <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
missing-widgets-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
missing-widgets-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mitfahrgelegenheit
Published
2025-09-10
Title
Mitfahrgelegenheit <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter
Slug
mitm-bug-tracker
Published
2024-10-14
Title
Mitm Bug Tracker <= 1.0 - Reflected Cross-Site Scripting
Slug
miwoftp
Published
2015-03-16
Title
MiwoFTP - File & Folder Manager <= 1.0.4 - Arbitrary File Disclosure
Slug
miwoftp
Published
2015-04-14
Title
MiwoFTP - File & Folder Manager <= 1.0.5 - Multiple Vulnerabilities
Slug
mixcloud-embed
Published
2025-04-24
Title
Mixcloud Embed <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mixlr-shortcode
Published
2025-10-21
Title
Mixlr Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
mixtape
Published
2025-09-10
Title
Mixtape <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mizan-demo-importer
Published
2026-01-30
Title
Mizan Demo Importer < 0.1.4 - Missing Authorization
Slug
mj-contact-us
Published
2025-01-16
Title
MJ Contact us <= 5.2.3 - Reflected Cross-Site Scripting
Slug
mj-update-history
Published
2024-04-15
Title
MJ Update History <= 1.0.4 - Reflected Cross-Site Scripting