WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mailz
Published
2014-08-01
Title
Mailing List - Arbitrary file download
Slug
maintenance
Published
2021-07-21
Title
Maintenance < 4.03 - Authenticated Stored XSS
Slug
maintenance-and-noindex-nofollow
Published
2024-12-12
Title
LionScripts: Site Maintenance & Noindex Nofollow Plugin <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
maintenance-coming-soon-redirect-animation
Published
2024-08-26
Title
Maintenance & Coming Soon Redirect Animation <= 2.3.3 - IP Spoofing to Bypass
Slug
maintenance-coming-soon-redirect-animation
Published
2024-12-19
Title
Maintenance & Coming Soon Redirect Animation < 2.3.0 - Missing Authorization to Settings Update
Slug
maintenance-mode-based-on-user-roles
Published
2025-11-24
Title
Conditional Maintenance Mode for WordPress < 2.0.0 - Cross-Site Request Forgery
Slug
maintenance-notice
Published
2025-03-11
Title
Maintenance Notice < 1.0.7 - Settings Reset via CSRF
Slug
maintenance-page
Published
2024-02-21
Title
Maintenance Page < 1.0.9 - Missing Authorization to Sensitive Information Exposure
Slug
maintenance-page
Published
2024-02-21
Title
Maintenance Page < 1.0.9 - Security Mechanism Bypass via REST API
Slug
maintenance-switch
Published
2023-04-28
Title
Maintenance Switch < 1.6.3 - Reflected XSS
Slug
maintenance-switch
Published
2023-08-28
Title
Maintenance Switch <= 1.7.1 - Theme Files Creation/Deletion via CSRF
Slug
mainwp
Published
2015-08-08
Title
MainWP <= 2.0.22 - Unspecified
Slug
mainwp
Published
2016-04-29
Title
MainWP <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
mainwp
Published
2023-10-20
Title
MainWP Dashboard < 4.5.1.3 - Authenticated(Administrator+) CSS Injection
Slug
mainwp
Published
2023-11-09
Title
MainWP < 4.4.3.4 - Authenticated (Administrator+) SQL Injection
Slug
mainwp
Published
2024-02-27
Title
MainWP Dashboard < 5.0 - Cross-Site Request Forgery via posting_bulk
Slug
mainwp-broken-links-checker-extension
Published
2023-01-18
Title
MainWP Broken Links Checker Extension <= 4.0 - Unauthenticated SQLi
Slug
mainwp-child
Published
2015-03-09
Title
MainWP Child <= 2.0.9.1 - Authentication Bypass
Slug
mainwp-child
Published
2015-08-08
Title
MainWP <= 2.0.22 - Unspecified
Slug
mainwp-child
Published
2018-02-28
Title
MainWP Child <= 3.4.4 - Authentication Bypass
Slug
mainwp-child
Published
2021-10-25
Title
MainWP Child < 4.1.8 - Admin+ SQL Injection
Slug
mainwp-child
Published
2023-06-23
Title
MainWP Child < 4.4.1.2 - Sensitive File Disclosure
Slug
mainwp-child
Published
2024-11-12
Title
MainWP Child < 5.3 - Authentication Bypass
Slug
mainwp-child-reports
Published
2021-09-20
Title
MainWP Child Reports < 2.0.8 - Admin+ SQL Injection
Slug
mainwp-child-reports
Published
2024-04-26
Title
MainWP Child Reports < 2.2 - Cross-Site Request Forgery