WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-mailster
Published
2024-12-02
Title
WP Mailster < 1.8.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-mailster
Published
2024-12-02
Title
WP Mailster < 1.8.17.0 - Authenticated (Contributor+) SQL Injection via orderby
Slug
wp-mailster
Published
2024-12-02
Title
WP Mailster < 1.8.17.0 - Missing Authorization
Slug
wp-mailster
Published
2024-12-02
Title
WP Mailster < 1.8.17.0 - Missing Authorization
Slug
wp-mailster
Published
2024-11-23
Title
WP Mailster < 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-mailster
Published
2024-12-02
Title
WP Mailster < 1.8.17.0 - Unauthenticated Information Exposure
Slug
wp-mailster
Published
2024-12-11
Title
WP Mailster < 1.8.18.0 - Cross-Site Request Forgery
Slug
wp-mailster
Published
2025-01-06
Title
WP Mailster < 1.8.18.0 - Unauthenticated Sensitive Information Exposure
Slug
wp-mailster
Published
2024-12-07
Title
WP Mailster < 1.8.17.0 - Unauthenticated Sensitive Information Exposure
Slug
wp-mailster
Published
2024-11-23
Title
WP Mailster < 1.8.16.0 - Reflected Cross-Site Scripting
Slug
wp-mailster
Published
2024-12-22
Title
WP Mailster < 1.8.18.0 - Reflected Cross-Site Scripting
Slug
wp-mailster
Published
2025-01-28
Title
WP Mailster < 1.8.21.0 - Reflected Cross-Site Scripting
Slug
wp-mailto-links
Published
2023-09-22
Title
WP Mailto Links – Protect Email Addresses < 3.1.4 - Contributor+ Stored XSS
Slug
wp-mailto-links
Published
2025-09-22
Title
WP Mailto Links <= 3.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-mailup
Published
2014-08-01
Title
MailUp 1.3.2 - ajax.functions.php Ajax Function Call H&ling XSS Weakness
Slug
wp-maintenance
Published
2019-11-19
Title
WP Maintenance < 5.0.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-maintenance
Published
2022-04-15
Title
WP Maintenance < 6.0.6 - Admin+ Stored Cross-Site Scripting
Slug
wp-maintenance
Published
2022-06-28
Title
WP Maintenance < 6.0.8 - Admin+ Stored Cross-Site Scripting
Slug
wp-maintenance
Published
2023-11-14
Title
WP Maintenance < 6.1.4 - IP Restriction Bypass
Slug
wp-maintenance
Published
2024-02-16
Title
WP Maintenance < 6.1.7 - Information Exposure
Slug
wp-maintenance
Published
2024-06-18
Title
WP Maintenance < 6.1.9.3 - IP Spoofing to Maintenance Mode Bypass
Slug
wp-maintenance
Published
2025-05-07
Title
WP Maintenance < 6.1.9.8 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-maintenance-mode
Published
2014-08-01
Title
WP Maintenance Mode 1.8.7 - Setting Manipulation CSRF
Slug
wp-maintenance-mode
Published
2016-07-06
Title
WP Maintenance Mode <= 2.0.6 - Authenticated Multisite Remote Code Execution
Slug
wp-maintenance-mode
Published
2016-07-06
Title
WP Maintenance Mode <= 2.0.6 - Subscriber Information Disclosure