WordPress Plugin Vulnerabilities | Page 53 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

multi-column-tag-map

Published

2026-01-06

Title

Multi-column Tag Map <= 17.0.39 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mctm_css_conditional' Parameter

Slug

multi-column-taxonomy-list

Published

2025-04-24

Title

Multi-Column Taxonomy List <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

multi-crypto-currency-payment

Published

2025-06-03

Title

Multi CryptoCurrency Payments <= 2.0.3 - Unauthenticated SQL Injection

Slug

multi-day-booking-calendar

Published

2024-11-08

Title

Multi-day Booking Calendar <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

multi-feed-reader

Published

2017-06-06

Title

Multi Feed Reader <= 2.2.3 - SQL Injection

Slug

multi-feed-reader

Published

2024-11-22

Title

Multi Feed Reader <= 2.2.4 - Cross-Site Request Forgery

Slug

Published

2024-12-06

Title

Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection

Slug

Published

2016-04-08

Title

WP Multiple Meta Box 1.0 - Authenticated Blind SQL Injection

Slug

multi-page-toolkit

Published

2022-05-30

Title

Multi-page Toolkit <= 2.6 - Arbitrary Settings Update to Stored XSS via CSRF

Slug

multi-plugin-installer

Published

2015-08-24

Title

Multi Plugin Installer < 1.2.0 - Unauthenticated File Traversal

Slug

multi-purpose-mail-form

Published

2024-10-25

Title

Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload

Slug

multi-purpose-mail-form

Published

2024-10-30

Title

Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload

Slug

Published

2023-02-02

Title

Multi Rating < 5.0.6 - Ratings Deletion via CSRF

Slug

Published

2023-02-14

Title

Multi Rating < 5.0.6 - Reflected XSS

Slug

Published

2023-05-04

Title

Multi Rating <= 5.0.6 - Admin+ Stored XSS

Slug

Published

2023-05-04

Title

Multi Rating <= 5.0.6 - Unauthenticated Ratings Update

Slug

multi-scheduler

Published

2020-05-29

Title

Multi Scheduler <= 1.0.0 - Arbitrary Record Deletion via CSRF

Slug

multi-step-form

Published

2018-10-31

Title

Multi Step Form <= 1.2.5 - Cross-Site Scripting (XSS)

Slug

multi-step-form

Published

2018-07-20

Title

Multi Step Form <= 1.2.5 - Multiple Unauthenticated Reflected XSS

Slug

multi-step-form

Published

2022-12-17

Title

Multi Step Form < 1.7.8 - Admin+ Stored XSS

Slug

multi-step-form

Published

2023-11-13

Title

Multi Step Form < 1.7.13 - Form Update/Deletion via CSRF

Slug

multi-step-form

Published

2023-12-19

Title

Multi Step Form < 1.7.17 - Admin+ Stored XSS

Slug

multi-step-form

Published

2024-02-12

Title

Multi Step Form < 1.7.19 - Form Deletion via CSRF

Slug

multi-step-form

Published

2024-10-24

Title

Multi Step Form < 1.7.22 - Missing Authorization via fw_delete_files

Slug

multi-step-form

Published

2025-01-15

Title

Multi Step Form < 1.7.24 - Missing Authorization to Unauthenticated Limited File Upload