WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
my-wish-list
Published
2015-04-13
Title
My Wish List < 1.4.2 - Multiple Parameter XSS
Slug
my-wp
Published
2024-12-13
Title
My WP Customize Admin/Frontend < 1.24.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
my-wp-brand
Published
2024-10-21
Title
My Wp Brand – Hide menu & Hide Plugin < 1.1.3 - Missing Authorization
Slug
my-wp-brand
Published
2025-06-27
Title
My Wp Brand < 1.1.4 - Cross-Site Request Forgery
Slug
my-wp-health-check
Published
2023-04-19
Title
SiteAlert (Formerly WP Health) <= 1.9.8 - Cross-Site Request Forgery
Slug
my-wp-health-check
Published
2025-10-02
Title
SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure
Slug
my-wp-responsive-video
Published
2024-11-08
Title
WP Responsive Video <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
my-wp-tabs
Published
2025-03-03
Title
WP Tabs < 2.2.7 - Admin+ Stored XSS
Slug
my-wp-translate
Published
2017-10-10
Title
My WP Translate < 1.0.4 - CSRF & XSS
Slug
my-wp-translate
Published
2025-09-10
Title
My WP Translate <= 1.1 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Option Read and Deletion
Slug
my-wp-translate
Published
2025-09-10
Title
My WP Translate <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
my-wpdb
Published
2022-10-28
Title
My wpdb < 2.5 - Arbitrary SQL Query via CSRF
Slug
myagileprivacy
Published
2023-12-27
Title
My Agile Privacy < 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vis Shortcode
Slug
myanime-widget
Published
2025-01-16
Title
MyAnime Widget <= 1.0 - Cross-Site Request Forgery to Privilege Escalation
Slug
mybb-cross-poster
Published
2021-10-14
Title
MyBB Cross-Poster <= 1.0 - Admin+ Stored Cross-Site Scripting
Slug
mybb-last-topics
Published
2025-01-16
Title
mybb Last Topics <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
myblogu
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
mybookprogress
Published
2025-01-16
Title
MyBookProgress by Stormhill Media <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via book Parameter
Slug
mybookprogress
Published
2025-04-03
Title
MyBookProgress by Stormhill Media <= 1.0.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
mybookprogress
Published
2025-04-01
Title
MyBookProgress by Stormhill Media <= 1.0.8 - Missing Authorization
Slug
mybooktable
Published
2015-09-21
Title
MyBookTable <= 2.1.4 - Unspecified Vulnerability
Slug
mybooktable
Published
2019-07-03
Title
MyBookTable <= 3.2.2 - Multiple XSS
Slug
mybooktable
Published
2023-11-23
Title
MyBookTable Bookstore < 3.3.5 - API Key Update via CSRF
Slug
mybooktable
Published
2024-03-25
Title
MyBookTable Bookstore < 3.3.8 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
mybooktable
Published
2024-08-12
Title
MyBookTable Bookstore < 3.5.0 - Stored XSS via CSRF