WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
my-instagram-feed
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
my-link-order
Published
2015-11-23
Title
My Link Order <= 4.3 - Authenticated Cross-Site Scripting (XSS)
Slug
my-loginlogout
Published
2025-02-13
Title
My Login Logout Plugin <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
my-marginalia
Published
2025-04-17
Title
My Marginalia <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
my-page-order
Published
2015-08-13
Title
My Page Order <= 4.3 - Authenticated Cross-Site Scripting (XSS)
Slug
my-quota
Published
2025-02-26
Title
My Quota <= 1.0.8 - Reflected XSS
Slug
my-reading-library
Published
2024-10-15
Title
My Reading Library <= 1.0 - Unauthenticated PHP Object Injection
Slug
my-related-posts
Published
2025-01-16
Title
my-related-posts <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
my-reservation-system
Published
2025-07-04
Title
My Reservation System <= 2.3 - Reflected XSS
Slug
my-restaurant-menu
Published
2024-11-08
Title
My Restaurant Menu <= 0.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
my-resume-builder
Published
2025-06-27
Title
My Resume Builder <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
my-shortcodes
Published
2023-10-25
Title
My Shortcodes <= 2.3 - Missing Authorization via Multiple AJAX Actions
Slug
my-tickets
Published
2021-10-18
Title
My Tickets < 1.8.31 - Unauthenticated Stored Cross-Site Scripting
Slug
my-tickets
Published
2023-02-14
Title
My Tickets < 1.9.11 - Bulk Emailing via CSRF
Slug
my-tickets
Published
2025-01-15
Title
My Tickets < 2.0.10 - Missing Authorization
Slug
my-tickets
Published
2025-04-23
Title
My Tickets – Accessible Event Ticketing < 2.0.17 - Authenticated (Subscriber+) Privilege Escalation
Slug
my-tickets
Published
2025-09-09
Title
My Tickets < 2.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
my-tickets
Published
2025-12-06
Title
My Tickets < 2.1.1 - Missing Authorization
Slug
my-waze
Published
2024-02-12
Title
MyWaze <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
my-wish-list
Published
2015-04-13
Title
My Wish List < 1.4.2 - Multiple Parameter XSS
Slug
my-wp
Published
2024-12-13
Title
My WP Customize Admin/Frontend < 1.24.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
my-wp-brand
Published
2024-10-21
Title
My Wp Brand – Hide menu & Hide Plugin < 1.1.3 - Missing Authorization
Slug
my-wp-brand
Published
2025-06-27
Title
My Wp Brand < 1.1.4 - Cross-Site Request Forgery
Slug
my-wp-health-check
Published
2023-04-19
Title
SiteAlert (Formerly WP Health) <= 1.9.8 - Cross-Site Request Forgery
Slug
my-wp-health-check
Published
2025-10-02
Title
SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure