WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mytube
Published
2023-11-28
Title
MyTube PlayList <= 2.0.3 - Reflected Cross-Site Scripting via addplaylistid
Slug
mytweetlinks
Published
2024-10-18
Title
MyTweetLinks <= 1.1.1 - Authenticated (Subscriber+) SQL Injection
Slug
myweather
Published
2024-12-12
Title
addWeather <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
mywebtonet-performancestats
Published
2025-03-14
Title
PHP/MySQL CPU performance statistics <= 1.2.1 - Unauthenticated PHP Object Injection
Slug
myworks-woo-sync-for-quickbooks-online
Published
2025-04-09
Title
MyWorks WooCommerce Sync for QuickBooks Online < 2.9.2 - Reflected Cross-Site Scripting
Slug
mz-jajak
Published
2014-08-01
Title
Mz-jajak <= 2.1 - index.php id Parameter SQL Injection
Slug
mz-mindbody-api
Published
2021-06-30
Title
MZ Mindbody API < 2.8.3 - Unauthorised AJAX Calls