WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-members
Published
2025-09-22
Title
WP-Members < 3.5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-members
Published
2026-01-06
Title
WP-Members Membership Plugin < 3.5.4.5 - Unauthenticated Information Exposure via Unprotected Files
Slug
wp-membership
Published
2015-05-21
Title
WP Membership <= 1.2.3 - Multiple Vulnerabilities
Slug
wp-membership
Published
2023-03-06
Title
Multiple e-plugins - Subscriber+ Privilege Escalation
Slug
wp-membership
Published
2024-11-08
Title
WP Membership < 1.6.3 - Unauthenticated Arbitrary File Upload
Slug
wp-membership
Published
2025-08-14
Title
WP Membership < 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
wp-memory
Published
2022-11-21
Title
WP Memory < 2.46 - Subscriber+ Arbitrary Plugin Installation
Slug
wp-memory
Published
2025-07-26
Title
Memory Usage < 3.99 - Cross-Site Request Forgery to Limited Plugin Installation via wpmemory_install_plugin Function
Slug
wp-menu-creator
Published
2014-08-01
Title
Menu Creator <= 1.1.7 - SQL Injection
Slug
wp-menu-image
Published
2025-01-06
Title
WP Menu Image < 2.3 - Unauthenticated Menu Image Deletion
Slug
wp-menu-image
Published
2024-12-16
Title
WP Menu Image < 2.3 - Missing Authorization to Unauthenticated Menu Image Deletion
Slug
wp-mermaid
Published
2024-11-28
Title
WP Mermaid <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-and-date-remover
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-meta-and-date-remover
Published
2023-10-09
Title
WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS
Slug
wp-meta-and-date-remover
Published
2023-11-16
Title
WP Meta and Date Remover < 2.3.1 - Cross-Site Request Forgery via updateSettings
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2021-07-08
Title
MDTF < 1.2.8 / 2.2.8 - Arbitrary Settings Update via CSRF
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2023-03-22
Title
MDTF < 1.3.1 - Reflected XSS
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-03-25
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-03-25
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-03-25
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-03-28
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.2 - Cross-Site Request Forgery
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-04-22
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.1 - Missing Authorization
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-05-03
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-09-23
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.3.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-09-23
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.3.4 - Authenticated (Contributor+) SQL Injection