WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
music-request-manager
Published
2024-08-22
Title
Music Request Manager <= 1.3 - Reflected XSS
Slug
music-request-manager
Published
2024-08-22
Title
Music Request Manager <= 1.3 - Stored XSS via CSRF
Slug
music-sheet-viewer
Published
2025-01-30
Title
Music Sheet Viewer <= 4.1 - Unauthenticated Arbitrary File Read
Slug
music-sheet-viewer
Published
2025-01-30
Title
Music Sheet Viewer <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
music-store
Published
2015-07-25
Title
Music Store <= 1.0.14 - Referer Header Open Redirect
Slug
music-store
Published
2016-03-28
Title
Music Store < 1.0.43 - Cross-Site Scripting (XSS)
Slug
music-store
Published
2024-06-10
Title
Music Store - WordPress eCommerce < 1.1.14 - Authenticated (Admin+) SQL Injection
Slug
music-store
Published
2024-12-30
Title
Music Store – WordPress eCommerce < 1.2.0 - Reflected Cross-Site Scripting
Slug
musicbox
Published
2025-01-14
Title
Musicbox <= 2.0.3 - Reflected XSS
Slug
muslim-prayer-time-bd
Published
2024-06-05
Title
Muslim Prayer Time BD < 2.5 - Settings Reset via CSRF
Slug
muzaara-adwords-optimize-dashboard
Published
2025-01-06
Title
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords <= 3.1 - Information Exposure
Slug
muzaara-adwords-optimize-dashboard
Published
2025-01-16
Title
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords <= 3.1 - Unauthenticated PHP Object Injection
Slug
mw-wp-form
Published
2023-05-15
Title
MW WP Form < 4.4.3 - Unauthenticated Path Traversal
Slug
mw-wp-form
Published
2023-10-19
Title
MW WP Form < 5.0.0 - Missing Authorization
Slug
mw-wp-form
Published
2023-12-04
Title
MW WP Form < 5.0.2 - Unauthenticated Arbitrary File Upload
Slug
mw-wp-form
Published
2023-12-15
Title
MW WP Form < 5.0.4 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion
Slug
mw-wp-form
Published
2024-01-31
Title
MW WP Form < 5.1.0 - Editor+ Stored XSS
Slug
mwb-point-of-sale-pos-for-woocommerce
Published
2021-08-10
Title
MWB Point of Sale (POS) for WooCommerce < 1.0.1 - CSRF Bypass / Unauthorised AJAX Call
Slug
mwp-countdown
Published
2022-03-07
Title
Wow Countdowns <= 3.1.2 - Admin+ SQLi
Slug
mwp-forms
Published
2021-10-07
Title
Wow Forms <= 3.1.3 - Admin+ SQL Injection
Slug
mwp-herd-effect
Published
2022-05-16
Title
Herd Effects < 5.2.1 - Admin+ LFI
Slug
mwp-herd-effect
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
mwp-herd-effect
Published
2023-08-21
Title
Herd Effects < 5.2.3 - Admin+ Stored XSS
Slug
mwp-herd-effect
Published
2023-08-21
Title
Herd Effects < 5.2.4 - Effect Deletion via CSRF
Slug
mwp-herd-effect
Published
2024-04-11
Title
Herd Effects < 5.2.7 - Effect Deletion via CSRF