WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-delete-user-accounts
Published
2025-09-22
Title
WP Delete User Accounts <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-design-maps-places
Published
2021-09-09
Title
WP Design Maps & Places <= 1.2 - Reflected Cross-Site Scripting
Slug
wp-desklite
Published
2024-12-13
Title
WP DeskLite <= 1.0.0 - Reflected XSS
Slug
wp-dev-powers-acf-color-coded-field-types
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-dev-powers-display-screen-dimensions-to-admin
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-dev-powers-element-selector-jquery-powers
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-dialog
Published
2021-07-31
Title
WP Dialog <= 1.2.5.5 - Authenticated Stored Cross-Site Scripting
Slug
wp-directorybox-manager
Published
2025-02-08
Title
WP Directorybox Manager <= 2.5 - Authentication Bypass
Slug
wp-directorybox-manager
Published
2025-02-12
Title
WP Directorybox Manager <= 2.5 - Authentication Bypass
Slug
wp-disable
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-disable-sitemap
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-disable-sitemap
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-discord-invite
Published
2023-09-26
Title
WP Discord Invite < 2.5.1 - Arbitrary Settings Update via CSRF
Slug
wp-discord-invite
Published
2023-10-16
Title
WP Discord Invite < 2.5.2 - Admin+ Stored Cross Site Scripting
Slug
wp-discord-invite
Published
2023-09-24
Title
WP Discord Invite < 2.5.1 - Reflected Cross-Site Scripting via webhook
Slug
wp-discord-invite
Published
2025-05-07
Title
WP Discord Invite < 2.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-discord-post
Published
2025-03-02
Title
WP Discord Post <= 2.1.0 - Reflected Cross-Site Scripting
Slug
wp-discord-post-plus
Published
2025-08-15
Title
WP Discord Post Plus <= 1.0.2 - Cross-Site Request Forgery
Slug
wp-discourse
Published
2024-05-10
Title
WP Discourse < 2.5.2 - Missing Authorization
Slug
wp-discourse
Published
2025-10-31
Title
WP Discourse < 2.6.0 - Authenticated (Author+) Information Exposure
Slug
wp-discussion-board
Published
2025-10-24
Title
Discussion Board – WordPress Forum Plugin < 2.5.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
wp-discussion-board
Published
2025-12-28
Title
Discussion Board < 2.5.8 - Missing Authorization
Slug
wp-dispatcher
Published
2025-10-02
Title
WP Dispatcher <= 1.2.0 - Authenticated (Contributor+) SQL Injection
Slug
wp-dispatcher
Published
2025-10-02
Title
WP Dispatcher <= 1.2.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
wp-dispensary
Published
2025-01-30
Title
WP Dispensary <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting