WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mp3-music-player-by-sonaar
Published
2024-11-18
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar < 5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
Slug
mp3-music-player-by-sonaar
Published
2024-12-30
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.9 - Missing Authorization
Slug
mp3-music-player-by-sonaar
Published
2025-01-30
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar < 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed
Slug
mp3-music-player-by-sonaar
Published
2025-04-04
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.9.5 - Missing Authorization
Slug
mp3-music-player-by-sonaar
Published
2026-02-13
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery
Slug
mp3-music-player-by-sonaar
Published
2026-02-18
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure
Slug
mpl-publisher
Published
2021-08-25
Title
Multiple Plugins - Reflected Cross-Site Scripting via PHPRelativePath Library
Slug
mpl-publisher
Published
2021-10-15
Title
MPL-Publisher - Self-publish your book & ebook < 1.30.4 - Admin+ Stored Cross-Site Scripting
Slug
mpl-publisher
Published
2025-04-22
Title
MPL-Publisher < 2.18.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mpoperationlogs
Published
2023-10-17
Title
MpOperationLogs <= 1.0.1 - Unauthenticated Stored XSS
Slug
mpwizard
Published
2025-10-02
Title
MPWizard – Create Mercado Pago Payment Links <= 1.2.1 - Cross-Site Request Forgery to Arbitrary Post Deletion
Slug
mq-woocommerce-products-price-bulk-edit
Published
2019-05-16
Title
Woocommerce Products Price Bulk Edit <= 2.0 - XSS
Slug
mrkv-vchasno-kasa
Published
2025-07-18
Title
Vchasno Kasa < 1.0.4 - Missing Authorization to Unauthenticated Invoice Generation
Slug
mrkv-vchasno-kasa
Published
2025-07-18
Title
Vchasno Kasa < 1.0.4 - Unauthenticated Log File Clearing
Slug
mrkwp-footer-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
mrkwp-footer-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mrlegend-typedjs
Published
2025-02-19
Title
Typed JS: A typewriter style animation <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via typespeed Parameter
Slug
ms-registration
Published
2025-04-25
Title
Custom Login and Registration <= 1.0.0 - Missing Authorization
Slug
ms-registration
Published
2025-05-02
Title
Custom Login and Registration <= 1.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
ms-reviews
Published
2023-03-28
Title
MS-Reviews <= 1.5 - Subscriber+ Stored XSS
Slug
mshop-mysite
Published
2023-11-07
Title
MSHOP MY SITE < 1.1.8 - Subscriber+ Settings Update
Slug
mshop-naver-talktalk
Published
2024-11-22
Title
코드엠샵 소셜톡 < 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via add_plus_friends and add_plus_talk Shortcodes
Slug
mshop-naver-talktalk
Published
2024-12-06
Title
코드엠샵 소셜톡 < 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mshop-naver-talktalk
Published
2025-09-05
Title
코드엠샵 소셜톡 <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mshop-npay
Published
2024-11-22
Title
우커머스 네이버페이 < 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mnp_purchase Shortcode