WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-database-optimizer
Published
2025-03-28
Title
WP Database Optimizer <= 1.2.1.3 - Cross-Site Request Forgery
Slug
wp-database-optimizer
Published
2025-03-28
Title
WP Database Optimizer <= 1.2.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-database-optimizer-tools
Published
2025-08-14
Title
WP-Database-Optimizer-Tools <= 0.2 - Cross-Site Request Forgery
Slug
wp-datatable
Published
2025-01-30
Title
WP DataTable < 0.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
wp-datatable
Published
2025-06-27
Title
WP DataTable <= 0.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-date-and-time-shortcode
Published
2025-03-31
Title
WP Date and Time Shortcode < 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-datepicker
Published
2024-04-23
Title
WP Datepicker < 2.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
wp-datepicker
Published
2024-09-23
Title
WP Datepicker < 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-datepicker
Published
2024-09-25
Title
WP Datepicker < 2.1.2 - Missing Authorization
Slug
wp-datepicker
Published
2024-12-23
Title
WP Datepicker < 2.1.5 - Reflected Cross-Site Scripting
Slug
wp-db-backup
Published
2014-11-04
Title
WP DB Backup < 2.3.0 - Backup Filename Brute Forcing
Slug
wp-db-backup
Published
2021-05-16
Title
Database Backup for WordPress < 2.4 - Authenticated Persistent Cross-Site Scripting (XSS)
Slug
wp-db-backup
Published
2022-01-24
Title
Database Backup for WordPress < 2.5.1 - Admin+ SQL Injection
Slug
wp-db-backup
Published
2022-05-11
Title
Database Backup for WordPress < 2.5.2 - Arbitrary Schedule Settings Update via CSRF
Slug
wp-db-booster
Published
2025-06-27
Title
WP DB Booster <= 1.0.1 - Missing Authorization
Slug
wp-db-booster
Published
2025-12-19
Title
WP DB Booster <= 1.0.1 - Cross-Site Request Forgery to Database Cleanup
Slug
wp-db-table-editor
Published
2024-06-03
Title
WP-DB-Table-Editor <= 1.8.4 - Missing Authorization to Authenticated(Contributor+) Database Access
Slug
wp-dbmanager
Published
2014-10-13
Title
WP-DBManager < 2.7.2 - Authenticated Command Injection
Slug
wp-dbmanager
Published
2018-10-22
Title
Download WP-DBManager <= 2.79.1 - Arbitrary File Delete
Slug
wp-dbmanager
Published
2022-07-25
Title
WP-DBManager < 2.80.8 - Admin+ Remote Command Execution
Slug
wp-debugging
Published
2021-09-27
Title
WP Debugging < 2.11.0 - Unauthenticated Plugin's Settings Update
Slug
wp-debugging
Published
2022-01-24
Title
WP Dependency Installer < 4.3.1 - Subscriber+ Arbitrary Plugin Activation
Slug
wp-debugging
Published
2022-01-24
Title
WP Dependency Installer < 4.3.1 - Arbitrary Plugin Installation from Dependency via CSRF
Slug
wp-default-feature-image
Published
2023-09-01
Title
WP Default Feature Image <= 1.0.1.1 - Admin+ Stored XSS
Slug
wp-delete-user-accounts
Published
2025-04-11
Title
WP Delete User Accounts < 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting