WordPress Plugin Vulnerabilities | Page 55 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

msmc-redirect-after-comment

Published

2017-05-08

Title

MSMC – Redirect After Comment - Unauthenticated XSS & CSRF

Slug

msrp-for-woocommerce

Published

2025-04-10

Title

MSRP (RRP) Pricing for WooCommerce < 2.0.0 - Reflected Cross-Site Scripting

Slug

Published

2025-01-16

Title

WP VTiger Synchronization <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Slug

mstoic-shortcodes

Published

2026-01-06

Title

Mstoic Shortcodes <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'start' Shortcode Attribute

Slug

Published

2020-03-11

Title

MStore API < 2.1.6 - Unauthenticated Arbitrary Account Creation/Edition

Slug

Published

2021-02-02

Title

MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple

Slug

Published

2021-10-05

Title

MStore API < 3.4.5 - Unauthenticated PHP File Upload

Slug

Published

2023-05-17

Title

MStore API < 3.9.1 - Authentication Bypass

Slug

Published

2023-05-22

Title

MStore API < 3.9.2 - Authentication Bypass

Slug

Published

2023-05-24

Title

MStore API < 3.9.3 - Authentication Bypass

Slug

Published

2023-06-13

Title

MStore API < 3.9.7 - Multiple CSRF

Slug

Published

2023-06-19

Title

MStore API < 3.9.9 - Unauthenticated Privilege Escalation

Slug

Published

2023-06-19

Title

MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update

Slug

Published

2023-06-19

Title

MStore API < 3.9.8 - Unauthenticated Blind SQLi

Slug

Published

2023-06-23

Title

MStore API < 3.9.8 - Unauthenticated SQL Injection

Slug

Published

2023-06-23

Title

MStore API < 4.0.2 - Unauthenticated SQL Injection

Slug

Published

2023-06-19

Title

MStore API < 4.10.8 - Unauthenticated Privilege Escalation

Slug

Published

2023-10-03

Title

MStore API < 4.0.7 - Subscriber+ SQLi

Slug

Published

2023-12-26

Title

MStore API < 4.10.2 - Cross-Site Request Forgery

Slug

Published

2024-07-11

Title

MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.0 - Authentication Bypass

Slug

Published

2024-08-14

Title

MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.3 - Authentication Bypass to Account Takeover

Slug

Published

2024-09-12

Title

MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.4 - Unauthorized User Registration

Slug

Published

2024-09-12

Title

MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.4 - Authenticated (Subscriber+) Limited Arbitrary File Upload

Slug

Published

2024-11-19

Title

MStore API < 4.15.8 - Authenticated (Subscriber+) SQL Injection

Slug

Published

2024-12-12

Title

MStore API – Create Native Android & iOS Apps On The Cloud < 4.16.5 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)