WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mstore-api
Published
2024-07-11
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.0 - Authentication Bypass
Slug
mstore-api
Published
2024-08-14
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.3 - Authentication Bypass to Account Takeover
Slug
mstore-api
Published
2024-09-12
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.4 - Unauthorized User Registration
Slug
mstore-api
Published
2024-09-12
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.4 - Authenticated (Subscriber+) Limited Arbitrary File Upload
Slug
mstore-api
Published
2024-11-19
Title
MStore API < 4.15.8 - Authenticated (Subscriber+) SQL Injection
Slug
mstore-api
Published
2024-12-12
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.16.5 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)
Slug
mstore-api
Published
2025-05-01
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.17.5 - Unauthenticated Limited Privilege Escalation
Slug
mstore-api
Published
2025-05-26
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.17.6 - Missing Authorization to Authenticated (Subscriber+) Posts Creation
Slug
mstoreapp-mobile-app
Published
2025-10-31
Title
Mstoreapp Mobile (App <= 2.08, Multivendor <= 9.0.1) - Unauthenticated Privilege Escalation
Slug
mstw-csv-exporter
Published
2025-10-10
Title
MSTW CSV EXPORTER <= 1.4 - Missing Authorization
Slug
mstw-league-manager
Published
2025-09-05
Title
MSTW League Manager <= 2.10 - Cross-Site Request Forgery
Slug
msync
Published
2023-11-29
Title
MSync <= 1.0.0 - Authenticated (Administrator+) SQL Injection
Slug
mt-addons-for-elementor
Published
2025-01-07
Title
MT Addons for Elementor < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mtcaptcha
Published
2026-01-06
Title
MTCaptcha WordPress Plugin <= 2.7.2 - Cross-Site Request Forgery to Settings Update
Slug
mtouch-quiz
Published
2014-08-01
Title
mTouch Quiz 3.0.6 - question.php quiz Parameter Reflected XSS
Slug
mtouch-quiz
Published
2014-08-01
Title
mTouch Quiz 3.0.6 - question.php quiz Parameter SQL Injection
Slug
mtouch-quiz
Published
2015-12-18
Title
mTouch Quiz <= 3.1.2 - Multiple Vulnerabilities XSS & CSRF
Slug
mtouch-quiz
Published
2022-07-18
Title
mTouch Quiz <= 3.1.3 - Admin+ Stored Cross Site Scripting
Slug
mtphr-widgets
Published
2025-01-16
Title
Metaphor Widgets <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mts-url-shortener
Published
2023-08-28
Title
URL Shortener by MyThemeShop <= 1.0.17 - Reflected XSS
Slug
mts-url-shortener
Published
2024-06-18
Title
URL Shortener by MyThemeShop <= 1.0.17 - Admin+ Stored XSS
Slug
mukioplayer-for-wordpress
Published
2014-08-01
Title
Mukioplayer 1.6 - SQL Injection
Slug
multi-column-tag-map
Published
2023-02-02
Title
Multi-column Tag Map < 17.0.25 - Contributor+ Stored XSS
Slug
multi-column-tag-map
Published
2023-09-01
Title
Multi-column Tag Map < 17.0.27 - Cross-Site Request Forgery
Slug
multi-column-tag-map
Published
2024-12-20
Title
Multi-column Tag Map < 17.0.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via mctagmap Shortcode