WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
multiple-votes-in-one-page
Published
2024-11-08
Title
Multiple Votes in one page <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
multipurpose-block
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
multipurpose-block
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
multisafepay
Published
2022-07-18
Title
MultiSafepay < 4.16.0 - Unauthenticated Arbitrary File Access
Slug
multisite-clone-duplicator
Published
2025-08-29
Title
MultiSite Clone Duplicator <= 1.5.3 - Reflected Cross-Site Scripting
Slug
multisite-plugin-manager
Published
2014-08-01
Title
Multisite plugin Manager 3.1.1 - Two Cross-Site Scripting Vulnerabilities
Slug
multisite-post-duplicator
Published
2016-12-09
Title
Multisite Post Duplicator < 1.1.3 - Cross-Site Request Forgery (CSRF)
Slug
multisite-robotstxt-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
multisite-robotstxt-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
munk-sites
Published
2025-02-03
Title
Munk Sites <= 1.0.7 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Slug
muse-ai
Published
2025-07-23
Title
muse.ai video embedding < 0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via muse-ai Shortcode
Slug
music-let-loose-mp3-audio-player
Published
2025-01-16
Title
MLL Audio Player MP3 Ajax <= 0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
music-pack-for-elementor
Published
2025-04-04
Title
Musician's Pack for Elementor <= 1.8.7 - Contributor+ Stored XSS
Slug
music-player-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
music-player-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
music-player-for-elementor
Published
2024-11-14
Title
Music Player for Elementor – Audio Player & Podcast Player < 2.4.2 - Missing Authorization to Authenticated (Subscriber+) Template Import
Slug
music-player-for-elementor
Published
2025-06-02
Title
Music Player for Elementor < 2.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via album_buy_url Parameter
Slug
music-player-for-woocommerce
Published
2025-05-07
Title
Music Player for WooCommerce < 1.6.0 - Missing Authorization
Slug
music-press-pro
Published
2025-02-03
Title
Music Press Pro <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
music-press-pro
Published
2025-03-24
Title
Music Press Pro <= 1.4.6 - Missing Authorization
Slug
music-request-manager
Published
2024-08-22
Title
Music Request Manager <= 1.3 - Unauthenticated Stored XSS
Slug
music-request-manager
Published
2024-08-22
Title
Music Request Manager <= 1.3 - Reflected XSS
Slug
music-request-manager
Published
2024-08-22
Title
Music Request Manager <= 1.3 - Stored XSS via CSRF
Slug
music-sheet-viewer
Published
2025-01-30
Title
Music Sheet Viewer <= 4.1 - Unauthenticated Arbitrary File Read
Slug
music-sheet-viewer
Published
2025-01-30
Title
Music Sheet Viewer <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting