WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mobile-builder
Published
2025-12-26
Title
Mobile builder <= 1.4.2 - Authentication Bypass
Slug
mobile-builder
Published
2026-10-13
Title
Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'delivery_id' Parameter
Slug
mobile-builder
Published
2026-10-09
Title
Mobile builder <= 1.4.2 - Subscriber+ Privilege Escalation to Admin
Slug
mobile-builder
Published
2026-10-09
Title
Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'vendor_id' Parameter
Slug
mobile-call-now-map-buttons
Published
2023-07-04
Title
Mobile Call Now & Map Buttons <= 1.5.0 - Admin+ Stored XSS
Slug
mobile-contact-bar
Published
2024-11-11
Title
Mobile Contact Bar < 3.0.5 - Admin+ Stored XSS
Slug
mobile-contact-line
Published
2025-09-03
Title
Mobile Contact Line < 2.4.1 - Missing Authorization
Slug
mobile-dj-manager
Published
2025-01-15
Title
MDJM Event Management < 1.7.6 - Reflected Cross-Site Scripting
Slug
mobile-dj-manager
Published
2025-03-28
Title
MDJM Event Management < 1.7.5.3 - Authenticated (Subscriber+) PHP Object Injection
Slug
mobile-dj-manager
Published
2025-06-23
Title
MDJM Event Management <= 1.7.8.7 - Subscriber+ Privilege Escalation
Slug
mobile-dj-manager
Published
2026-03-06
Title
MDJM Event Management < 1.7.8.2 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion
Slug
mobile-dj-manager
Published
2026-06-05
Title
MDJM Event Management < 1.7.8.4 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter
Slug
mobile-dj-manager
Published
2026-07-22
Title
MDJM Event Management < 1.7.8.5 - Authenticated (Subscriber+) Privilege Escalation via 'set-permissions' and 'change_role' Handlers
Slug
mobile-dj-manager
Published
2026-09-11
Title
MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion
Slug
mobile-domain
Published
2015-02-11
Title
Mobile Domain <= 1.5.2 - CSRF/XSS
Slug
mobile-events-manager
Published
2021-12-24
Title
Mobile Events Manager < 1.4.4 - Admin+ Stored Cross-Site Scripting
Slug
mobile-events-manager
Published
2022-08-17
Title
Mobile Events Manager < 1.4.8 - Admin+ CSV Injection
Slug
mobile-events-manager
Published
2026-09-11
Title
MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion
Slug
mobile-friendly-app-builder-by-easytouch
Published
2017-03-06
Title
mobile-friendly-app-builder-by-easytouch 3.0 - Unauthenticated File Upload
Slug
mobile-friendly-flickr-slideshow
Published
2025-01-07
Title
Responsive Flickr Slideshow < 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mobile-friendly-flickr-slideshow
Published
2025-02-18
Title
Responsive Flickr Slideshow < 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mobile-kiosk
Published
2024-11-08
Title
Mobile Kiosk <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mobile-login-woocommerce
Published
2023-05-16
Title
OTP Login Woocommerce & Gravity Forms < 2.3 - Unauthenticated Privilege Escalation
Slug
mobile-login-woocommerce
Published
2026-09-10
Title
OTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Authentication Bypass via Brute Force
Slug
mobile-login-woocommerce
Published
2026-09-18
Title
OTP Login & Register Woocommerce < 2.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'fb-config' Setting