WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mobile-login-woocommerce
Published
2026-10-14
Title
OTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Account Takeover via OTP Brute Force
Slug
mobile-menu
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
mobile-menu
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
mobile-menu
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
mobile-menu
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mobile-menu
Published
2024-06-06
Title
WP Mobile Menu – The Mobile-Friendly Responsive Menu < 2.8.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Alt
Slug
mobile-menu
Published
2024-06-27
Title
WP Mobile Menu < 2.8.4.4 - Cross-Site Request Forgery
Slug
mobile-menu
Published
2024-07-30
Title
WP Mobile Menu < 2.8.5 - Missing Authorization to _mobmenu_icon Post Meta Modification
Slug
mobile-menu
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
mobile-menu
Published
2026-09-28
Title
WP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRF
Slug
mobile-navigation
Published
2025-03-24
Title
Mobile Navigation <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
mobile-pages
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
mobile-pages
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mobile-pages
Published
2025-04-11
Title
Mobile Pages <= 1.0.2 - Reflected Cross-Site Scripting
Slug
mobile-site-redirect
Published
2025-10-02
Title
Mobile Site Redirect <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mobile-smart
Published
2025-04-09
Title
Mobile Smart <= v1.3.16 - Reflected Cross-Site Scripting
Slug
mobilechief-mobile-site-creator
Published
2014-08-01
Title
MobileChief - jQuery Validation Cross-Site Scripting
Slug
mobileview
Published
2014-08-01
Title
mobileview <= 1.0.7 - XSS in ZeroClipboard
Slug
mobilize
Published
2024-11-01
Title
Mobilize <= 3.0.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mobilook
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
mobiloud-mobile-app-plugin
Published
2014-08-01
Title
Mobiloud 1.9.0 - comments/disqus_count.php shortname Parameter Reflected XSS
Slug
mobiloud-mobile-app-plugin
Published
2014-08-01
Title
Mobiloud 1.9.0 - comments/disqus.php shortname Parameter Reflected XSS
Slug
mobiloud-mobile-app-plugin
Published
2014-09-17
Title
Mobiloud < 2.3.8 - Multiple Cross-Site Scripting (XSS)
Slug
mobiloud-mobile-app-plugin
Published
2025-06-30
Title
MobiLoud < 4.6.6.1 - Missing Authorization
Slug
moceanapi-abandoned-carts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting