WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
my-calendar
Published
2019-04-30
Title
My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting (XSS)
Slug
my-calendar
Published
2021-11-01
Title
My Calendar < 3.2.18 - Subscriber+ Reflected Cross-Site Scripting
Slug
my-calendar
Published
2023-01-04
Title
My Calendar < 3.3.25 - Event/Location Deletion via CSRF
Slug
my-calendar
Published
2023-01-20
Title
My Calendar < 3.4.4 - Cross-Site Request Forgery
Slug
my-calendar
Published
2023-11-26
Title
My Calendar < 3.4.22 - Unauthenticated SQL Injection
Slug
my-calendar
Published
2024-02-11
Title
My Calendar < 3.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
my-calendar
Published
2024-03-07
Title
My Calendar < 3.4.24 - Authenticated Stored XSS
Slug
my-calendar
Published
2025-12-15
Title
My Calendar < 3.6.17 - Missing Authorization
Slug
my-category-order
Published
2014-08-01
Title
My Category Order <= 2.8 - SQL Injection
Slug
my-category-order
Published
2015-08-13
Title
My Category Order <= 4.3 - Authenticated Cross-Site Scripting (XSS)
Slug
my-chatbot
Published
2021-09-06
Title
My Chatbot <= 1.1 - Reflected Cross-Site Scripting (XSS)
Slug
my-chatbot
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
my-contador-wp
Published
2024-11-20
Title
My Contador lesr < 2.1 - Missing Authorization to Unauthenticated User Registration CSV Export
Slug
my-content-management
Published
2023-06-30
Title
My Content Management < 1.7.7 - Admin+ Stored XSS
Slug
my-custom-css
Published
2024-08-08
Title
My Custom CSS PHP & ADS <= 3.3 - Unauthenticated Full Path Disclosure
Slug
my-default-post-content
Published
2025-03-24
Title
My Default Post Content <= 0.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
my-favorite-cars
Published
2025-01-16
Title
My Favorite Car <= 1.0 - Reflected Cross-Site Scripting
Slug
my-favorites
Published
2024-06-20
Title
My Favorites < 1.4.4 - Contributor+ Stored XSS
Slug
my-favorites
Published
2024-10-14
Title
My Favorites < 1.4.3 - Contributor+ Stored XSS
Slug
my-geo-posts-free
Published
2017-04-27
Title
My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection
Slug
my-geo-posts-free
Published
2024-11-15
Title
My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection
Slug
my-geo-posts-free
Published
2025-11-10
Title
My Geo Posts Free <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
my-idx-home-search
Published
2024-12-13
Title
My IDX Home Search < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
my-idx-home-search
Published
2024-12-13
Title
My IDX Home Search < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
my-instagram-feed
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius