WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mww-disclaimer-buttons
Published
2025-09-26
Title
MWW Disclaimer Buttons < 3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
mx-time-zone-clocks
Published
2021-08-25
Title
MX Time Zone Clocks < 3.4.1 - Contributor+ Cross-Site Scripting
Slug
mx-time-zone-clocks
Published
2025-04-01
Title
MX Time Zone Clocks <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mx-time-zone-clocks
Published
2025-12-31
Title
MX Time Zone Clocks <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mxchat-basic
Published
2025-10-22
Title
MxChat – AI Chatbot for WordPress < 2.4.7 - Unauthenticated Blind Server-Side Request Forgery
Slug
mxchat-basic
Published
2025-12-02
Title
MxChat – AI Chatbot for WordPress < 2.5.6 - Unauthenticated Information Exposure
Slug
my-account-page-editor
Published
2023-09-07
Title
My Account Page Editor < 1.3.2 - Subscriber+ Arbitrary File Upload
Slug
my-album-gallery
Published
2026-01-06
Title
My Album Gallery <= 1.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title
Slug
my-album-gallery
Published
2026-01-06
Title
My Album Gallery <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style_css' Shortcode Attribute
Slug
my-askai
Published
2025-09-29
Title
My AskAI <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
my-auctions-allegro-free-edition
Published
2024-12-02
Title
My auctions allegro < 3.6.18 - Reflected Cross-Site Scripting
Slug
my-auctions-allegro-free-edition
Published
2025-01-15
Title
My auctions allegro < 3.6.19 - Reflected Cross-Site Scripting
Slug
my-auctions-allegro-free-edition
Published
2025-03-31
Title
My auctions allegro < 3.6.21 - Contributor+ SQLi
Slug
my-auctions-allegro-free-edition
Published
2025-04-14
Title
My auctions allegro <= 3.6.33 - Cross-Site Request Forgery
Slug
my-auctions-allegro-free-edition
Published
2025-10-10
Title
My Auctions Allegro Plugin < 3.6.32 - Authenticated (Admin+) SQL Injection
Slug
my-auctions-allegro-free-edition
Published
2025-12-04
Title
My auctions allegro < 3.6.33 - Unauthenticated SQL Injection via auction_id
Slug
my-auctions-allegro-free-edition
Published
2025-12-04
Title
My auctions allegro < 3.6.33 - Unauthenticated Local File Inclusion via controller
Slug
my-auctions-allegro-free-edition
Published
2025-12-17
Title
My auctions allegro <= 3.6.33 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
my-auctions-allegro-free-edition
Published
2025-12-17
Title
My auctions allegro <= 3.6.33 - Cross-Site Request Forgery
Slug
my-auctions-allegro-free-edition
Published
2026-01-04
Title
My auctions allegro <= 3.6.33 - Authenticated (Contributor+) Local File Inclusion
Slug
my-bootstrap-menu
Published
2025-03-24
Title
My Bootstrap Menu <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
my-calendar
Published
2014-09-29
Title
My Calendar 1.10.2 - XSS in PATH_INFO Parameter
Slug
my-calendar
Published
2015-04-20
Title
My Calendar <= 2.3.28 - Cross-Site Scripting (XSS)
Slug
my-calendar
Published
2015-05-15
Title
My Calendar <= 2.3.29 - Arbitrary File Override & Reflected XSS
Slug
my-calendar
Published
2018-04-04
Title
My Calendar <= 2.5.16 - Authenticated Cross-Site Scripting (XSS)