WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-29
Title
SAML Single Sign On < 5.4.7 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning
Slug
miniorange-sms-order-notification-otp-verification
Published
2026-01-09
Title
miniOrange OTP Verification and SMS Notification for WooCommerce < 4.3.9 - Missing Authorization to Unauthenticated Notification Settings Modification
Slug
miniorange-wp-as-saml-idp
Published
2022-06-06
Title
Login using WordPress Users < 1.13.4 - Admin+ Stored Cross-Site Scripting
Slug
miniorange-wp-as-saml-idp
Published
2024-11-15
Title
Login using WordPress Users ( WP as SAML IDP ) < 1.15.7 - Authenticated (Administrator+) SQL Injection
Slug
mins-to-read
Published
2024-11-28
Title
Mins To Read <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
minterpress
Published
2024-12-11
Title
Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
minterpress
Published
2025-01-16
Title
Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
mipl-wc-multisite-sync
Published
2025-01-06
Title
MIPL WC Multisite Sync < 1.1.6 - Unauthenticated Arbitrary File Download
Slug
mipl-wc-multisite-sync
Published
2026-03-01
Title
MIPL WC Multisite Sync <= 1.4.4 - Missing Authorization
Slug
mir-blocks-and-shortcodes
Published
2026-06-23
Title
MIR blocks and shortcodes <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
miraculous-el
Published
2026-02-10
Title
Miraculous Elementor < 2.0.8 - Authenticated (Subscriber+) Privilege Escalation
Slug
miraculouscore
Published
2025-08-21
Title
Miraculous Core < 2.0.8 - Unauthenticated Privilege Escalation
Slug
miraculouscore
Published
2025-09-01
Title
Miraculous Core < 2.0.9 - Unauthenticated Insecure Direct Object Reference