WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-maintenance-mode
Published
2016-07-06
Title
WP Maintenance Mode <= 2.0.6 - Missing Settings Authorization
Slug
wp-maintenance-mode
Published
2022-06-20
Title
WP Maintenance Mode & Coming Soon < 2.4.5 - Subscribed Users Deletion via CSRF
Slug
wp-maintenance-mode
Published
2024-01-05
Title
LightStart < 2.6.9 - Subscriber+ Page design Update
Slug
wp-maintenance-mode-site-under-construction
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via CSRF
Slug
wp-maintenance-mode-site-under-construction
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via Low Privilege User
Slug
wp-maintenance-mode-site-under-construction
Published
2025-06-05
Title
WP Maintenance Mode & Site Under Construction < 4.4 - Cross-Site Request Forgery
Slug
wp-malware-removal
Published
2025-07-15
Title
Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal < 17.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
wp-malware-removal
Published
2025-06-12
Title
Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal < 16.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Slug
wp-malware-removal
Published
2025-09-03
Title
Malcure Malware Scanner < 16.9 - Missing Authorization
Slug
wp-management-controller
Published
2024-12-12
Title
WP Controller <= 3.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-manutencao
Published
2024-01-10
Title
WordPress Manutenção < 1.0.7 - IP Spoofing to Maintenance Mode Bypass
Slug
wp-map
Published
2025-01-03
Title
Free Google Maps <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-map-block
Published
2021-08-25
Title
WP Map Block < 1.2.3 - Contributor+ Stored Cross-Site Scripting
Slug
wp-map-block
Published
2025-06-06
Title
WP Map Block by aBlocks < 2.0.3 - Contributor+ Stored XSS via Marker
Slug
wp-map-route-planner
Published
2025-04-09
Title
WP Map Route Planner <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-mapa-politico-spain
Published
2021-08-05
Title
WP Mapa Politico Espana < 3.7.0 - Authenticated Stored Cross-Site Scripting
Slug
wp-mapa-politico-spain
Published
2025-05-19
Title
WP Mapa Politico España < 3.8.1 - Cross-Site Request Forgery
Slug
wp-mapbox-gl-js
Published
2025-10-10
Title
WP Mapbox GL JS Maps <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-mapit
Published
2023-11-06
Title
WP MapIt < 3.0.0 - Contributor+ Stored XSS
Slug
wp-mapit
Published
2026-01-04
Title
MapIt <= 3.0.3 - Missing Authorization
Slug
wp-markdown-editor
Published
2017-03-10
Title
WP Markdown Editor 2.3.0 - Authenticated "Self" Cross-Site Scripting (XSS)
Slug
wp-marketing-automations
Published
2022-07-26
Title
Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation
Slug
wp-marketing-automations
Published
2023-12-21
Title
Automation By Autonami < 2.7.0 - Authenticated(Administrator+) SQL Injection
Slug
wp-marketing-automations
Published
2024-03-18
Title
Automation By Autonami < 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-marketing-automations
Published
2024-09-25
Title
Automation By Autonami < 3.2.0 - Authenticated (Administrator+) SQL Injection