WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
my-auctions-allegro-free-edition
Published
2024-12-02
Title
My auctions allegro < 3.6.18 - Reflected Cross-Site Scripting
Slug
my-auctions-allegro-free-edition
Published
2025-01-15
Title
My auctions allegro < 3.6.19 - Reflected Cross-Site Scripting
Slug
my-auctions-allegro-free-edition
Published
2025-03-31
Title
My auctions allegro < 3.6.21 - Contributor+ SQLi
Slug
my-auctions-allegro-free-edition
Published
2025-04-14
Title
My auctions allegro < 3.6.34 - Cross-Site Request Forgery
Slug
my-auctions-allegro-free-edition
Published
2025-10-10
Title
My Auctions Allegro Plugin < 3.6.32 - Authenticated (Admin+) SQL Injection
Slug
my-auctions-allegro-free-edition
Published
2025-12-04
Title
My auctions allegro < 3.6.33 - Unauthenticated SQL Injection via auction_id
Slug
my-auctions-allegro-free-edition
Published
2025-12-04
Title
My auctions allegro < 3.6.33 - Unauthenticated Local File Inclusion via controller
Slug
my-auctions-allegro-free-edition
Published
2025-12-17
Title
My auctions allegro <= 3.6.33 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
my-auctions-allegro-free-edition
Published
2025-12-17
Title
My auctions allegro < 3.6.34 - Cross-Site Request Forgery
Slug
my-auctions-allegro-free-edition
Published
2026-01-04
Title
My auctions allegro < 3.6.34 - Authenticated (Contributor+) Local File Inclusion
Slug
my-auctions-allegro-free-edition
Published
2026-01-19
Title
My auctions allegro < 3.6.33 - Unauthenticated Stored Cross-Site Scripting
Slug
my-auctions-allegro-free-edition
Published
2026-03-05
Title
My auctions allegro <= 3.6.34 - Reflected Cross-Site Scripting
Slug
my-bootstrap-menu
Published
2025-03-24
Title
My Bootstrap Menu <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
my-calendar
Published
2014-09-29
Title
My Calendar 1.10.2 - XSS in PATH_INFO Parameter
Slug
my-calendar
Published
2015-04-20
Title
My Calendar <= 2.3.28 - Cross-Site Scripting (XSS)
Slug
my-calendar
Published
2015-05-15
Title
My Calendar <= 2.3.29 - Arbitrary File Override & Reflected XSS
Slug
my-calendar
Published
2018-04-04
Title
My Calendar <= 2.5.16 - Authenticated Cross-Site Scripting (XSS)
Slug
my-calendar
Published
2019-04-30
Title
My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting (XSS)
Slug
my-calendar
Published
2021-11-01
Title
My Calendar < 3.2.18 - Subscriber+ Reflected Cross-Site Scripting
Slug
my-calendar
Published
2023-01-04
Title
My Calendar < 3.3.25 - Event/Location Deletion via CSRF
Slug
my-calendar
Published
2023-01-20
Title
My Calendar < 3.4.4 - Cross-Site Request Forgery
Slug
my-calendar
Published
2023-11-26
Title
My Calendar < 3.4.22 - Unauthenticated SQL Injection
Slug
my-calendar
Published
2024-02-11
Title
My Calendar < 3.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
my-calendar
Published
2024-03-07
Title
My Calendar < 3.4.24 - Authenticated Stored XSS
Slug
my-calendar
Published
2025-12-15
Title
My Calendar < 3.6.17 - Missing Authorization