WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
motors-car-dealership-classified-listings
Published
2026-06-17
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.110 - Authenticated (Subscriber+) Local File Inclusion
Slug
motors-car-dealership-classified-listings
Published
2026-06-17
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.110 - Missing Authorization
Slug
motors-car-dealership-classified-listings
Published
2026-06-30
Title
Motors < 1.4.112 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' Parameter
Slug
motors-car-dealership-classified-listings
Published
2026-07-10
Title
Motors < 1.4.113 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info
Slug
motors-car-dealership-classified-listings
Published
2026-08-10
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.114 - Missing Authorization
Slug
motta-addons
Published
2026-03-20
Title
Motta Addons < 1.6.1 - Reflected Cross-Site Scripting
Slug
mountdev-ai-mcp-connector
Published
2026-07-22
Title
MountDev AI MCP Connector for WordPress < 1.6.2 - Unauthenticated Privilege Escalation via OAuth Authorization Endpoint
Slug
mountdev-ai-mcp-connector
Published
2026-09-03
Title
MountDev AI MCP Connector for WordPress < 1.6.6 - Missing Authorization
Slug
mousewheel-smooth-scroll
Published
2021-10-18
Title
MouseWheel Smooth Scroll < 5.7 - Plugin's Setting Update via CSRF
Slug
move-addons
Published
2024-03-22
Title
Move Addons for Elementor < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
move-addons
Published
2024-03-29
Title
Move Addons for Elementor < 1.3.0 - Missing Authorization
Slug
move-addons
Published
2024-05-07
Title
Move Addons for Elementor < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
move-addons
Published
2024-05-20
Title
Move Addons for Elementor < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
move-addons
Published
2024-09-25
Title
Move Addons for Elementor < 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
move-addons
Published
2024-09-30
Title
Move Addons for Elementor < 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
move-addons
Published
2024-10-28
Title
Move Addons for Elementor < 1.3.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Slug
move-addons
Published
2024-12-30
Title
Move Addons for Elementor < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
moveto
Published
2024-02-12
Title
MoveTo <= 6.2 - Unauthenticated Arbitrary File Upload
Slug
moveto
Published
2024-02-12
Title
MoveTo <= 6.2 - Missing Authorization to Unauthenticated Options Update
Slug
moveto
Published
2024-02-12
Title
MoveTo <= 6.2 - Unauthenticated SQL Injection
Slug
moveto
Published
2024-02-12
Title
MoveTo <= 6.2 - Unauthenticated Directory Traversal to Arbitrary File Deletion
Slug
movie-booking
Published
2026-01-21
Title
Movie Booking < 1.1.6 - Unauthenticated Arbitrary File Deletion
Slug
movie-database
Published
2024-10-15
Title
Movie Database <= 1.0.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
movies
Published
2014-04-25
Title
Movies <= 0.6 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
movies-importer
Published
2025-12-30
Title
Movies Bulk Importer <= 1.0 - Cross-Site Request Forgery