WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-10-24
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.5 - Unauthenticated Arbitrary Shortcode Execution
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2024-10-24
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-01-07
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.3.6 - Authenticated (Contributor+) SQL Injection
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-01-22
Title
MDTF – Meta Data and Taxonomies Filter < 1.3.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-08-18
Title
MDTF < 1.3.3.8 - Unauthenticated SQL Injection
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-10-16
Title
MDTF < 1.3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-10-16
Title
MDTF <= 1.3.4 - Missing Authorization
Slug
wp-meta-data-filter-and-taxonomy-filter
Published
2025-10-24
Title
MDTF < 1.3.4 - Missing Authorization
Slug
wp-meta-keywords-meta-description
Published
2025-04-28
Title
Meta Keywords & Description <= 0.8 - Unauthenticated Local File Inclusion
Slug
wp-meta-seo
Published
2022-05-02
Title
WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs
Slug
wp-meta-seo
Published
2022-06-28
Title
WP Meta SEO < 4.4.9 - Social Settings Update via CSRF
Slug
wp-meta-seo
Published
2023-02-27
Title
WP Meta SEO < 4.5.3 - Subscriber+ SQLi
Slug
wp-meta-seo
Published
2023-02-27
Title
WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect
Slug
wp-meta-seo
Published
2023-02-24
Title
WP Meta SEO < 4.5.4 - Subscriber+ SiteMap Settings Update
Slug
wp-meta-seo
Published
2023-02-24
Title
WP Meta SEO < 4.5.4 - Subscriber+ Google Analytics Settings Update
Slug
wp-meta-seo
Published
2023-03-27
Title
WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization
Slug
wp-meta-seo
Published
2024-04-16
Title
WP Meta SEO < 4.5.13 - Unauthenticated Stored Cross-Site Scripting via Referer header
Slug
wp-meta-seo
Published
2024-04-16
Title
WP Meta SEO < 4.5.13 - Unauthenticated Password Protected Content Access
Slug
wp-meta-seo
Published
2024-09-12
Title
WP Meta SEO < 4.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-seo
Published
2024-09-12
Title
WP Meta SEO < 4.5.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-meteor
Published
2024-07-23
Title
WP Meteor Website Speed Optimization Addon < 3.4.4 - Unauthenticated Full Path Disclosure
Slug
wp-microblogs
Published
2014-08-01
Title
WP Microblogs plugin < 0.4.0 - Cross-Site Scripting (XSS)
Slug
wp-microdata
Published
2025-09-27
Title
WP Microdata <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-migrate-2-aws
Published
2024-12-20
Title
WP on AWS < 5.2.2 - Reflected Cross-Site Scripting
Slug
wp-migrate-db
Published
2025-11-17
Title
WP Migrate Lite < 2.7.7 - Unauthenticated Blind Server-Side Request Forgery