WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
my-wp-responsive-video
Published
2024-11-08
Title
WP Responsive Video <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
my-wp-tabs
Published
2025-03-03
Title
WP Tabs < 2.2.7 - Admin+ Stored XSS
Slug
my-wp-translate
Published
2017-10-10
Title
My WP Translate < 1.0.4 - CSRF & XSS
Slug
my-wp-translate
Published
2025-09-10
Title
My WP Translate <= 1.1 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Option Read and Deletion
Slug
my-wp-translate
Published
2025-09-10
Title
My WP Translate <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
my-wpdb
Published
2022-10-28
Title
My wpdb < 2.5 - Arbitrary SQL Query via CSRF
Slug
myagileprivacy
Published
2023-12-27
Title
My Agile Privacy < 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vis Shortcode
Slug
myanime-widget
Published
2025-01-16
Title
MyAnime Widget <= 1.0 - Cross-Site Request Forgery to Privilege Escalation
Slug
mybb-cross-poster
Published
2021-10-14
Title
MyBB Cross-Poster <= 1.0 - Admin+ Stored Cross-Site Scripting
Slug
mybb-last-topics
Published
2025-01-16
Title
mybb Last Topics <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
myblogu
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
mybookprogress
Published
2025-01-16
Title
MyBookProgress by Stormhill Media <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via book Parameter
Slug
mybookprogress
Published
2025-04-03
Title
MyBookProgress by Stormhill Media <= 1.0.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
mybookprogress
Published
2025-04-01
Title
MyBookProgress by Stormhill Media <= 1.0.8 - Missing Authorization
Slug
mybooktable
Published
2015-09-21
Title
MyBookTable <= 2.1.4 - Unspecified Vulnerability
Slug
mybooktable
Published
2019-07-03
Title
MyBookTable <= 3.2.2 - Multiple XSS
Slug
mybooktable
Published
2023-11-23
Title
MyBookTable Bookstore < 3.3.5 - API Key Update via CSRF
Slug
mybooktable
Published
2024-03-25
Title
MyBookTable Bookstore < 3.3.8 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
mybooktable
Published
2024-08-12
Title
MyBookTable Bookstore < 3.5.0 - Stored XSS via CSRF
Slug
mybooktable
Published
2025-01-06
Title
MyBookTable Bookstore < 3.5.4 - Cross-Site Request Forgery
Slug
mybooktable
Published
2025-12-31
Title
MyBookTable Bookstore <= 3.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mybrain-utilities
Published
2025-09-09
Title
MyBrain Utilities < 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mycbgenie-clickbank-storefront
Published
2025-01-16
Title
ClickBank Storefront WordPress Plugin <= 1.7 - Reflected Cross-Site Scripting
Slug
mycred
Published
2021-11-01
Title
myCred < 2.3 - Subscriber+ SQL Injection
Slug
mycred
Published
2017-04-20
Title
myCRED < 1.7.8 - Reflected Cross-Site Scripting