WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-migrate-db-pro
Published
2024-04-26
Title
WP Migrate Pro < 2.6.11 - Unauthenticated PHP Object Injection
Slug
wp-migration-duplicator
Published
2023-11-06
Title
WordPress Backup & Migration < 1.4.4 - Subscriber+ Plugin Settings Update
Slug
wp-migration-duplicator
Published
2023-11-06
Title
WordPress Backup & Migration < 1.4.5 - Subscriber+ Stored XSS
Slug
wp-migration-duplicator
Published
2023-10-11
Title
WordPress Backup & Migration < 1.4.2 - Missing Authorization to Settings and Schedule Modification
Slug
wp-migration-duplicator
Published
2024-04-05
Title
WordPress Backup & Migration < 1.4.8 - Unauthenticated Sensitive Information Exposure
Slug
wp-migration-duplicator
Published
2024-04-22
Title
WordPress Backup & Migration < 1.4.9 - Missing Authorization to Directory Traversal
Slug
wp-migration-duplicator
Published
2025-01-13
Title
WebToffee WP Backup and Migration < 1.5.4 - Unauthenticated Sensitive Information Exposure
Slug
wp-mini-program
Published
2024-12-06
Title
Mini Program API <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-miniaudioplayer
Published
2014-08-01
Title
mb.miniAudioPlayer 1.4.2 - TinyMCE Popup Unspecified Issue
Slug
wp-miniaudioplayer
Published
2014-03-27
Title
miniAudioPlayer < 1.3.9 - maplayertinymce.php Multiple Parameter XSS
Slug
wp-mlm
Published
2023-12-27
Title
WP MLM Unilevel <= 4.0 - Unauthenticated Privilege Escalation
Slug
wp-mlm
Published
2023-12-27
Title
WP MLM <= 4.0 - Unauthenticated Arbitrary File Upload
Slug
wp-mmenu-lite
Published
2024-11-04
Title
WP MMenu Lite <= 1.0.0 - Reflected Cross-Site Scripting
Slug
wp-mobile-detector
Published
2015-06-25
Title
WP Mobile Detector <= 3.2 - Stored Cross-Site Scripting (XSS)
Slug
wp-mobile-detector
Published
2016-06-03
Title
WP Mobile Detector < 3.6 - Unauthenticated Arbitrary File Upload
Slug
wp-mobile-edition
Published
2015-04-13
Title
WP Mobile Edition < 2.3 - Remote File Disclosure
Slug
wp-mobile-edition
Published
2015-06-08
Title
WP Mobile Edition < 2.3 - Local File Inclusion (LFI)
Slug
wp-mobile-themes
Published
2025-03-11
Title
Mobile Themes <= 1.1.1 - Cross-Site Request Forgery
Slug
wp-modal-popup-with-cookie-integration
Published
2025-04-01
Title
WP Modal Popup with Cookie Integration < 2.5 - Admin+ Stored XSS
Slug
wp-modal-popup-with-cookie-integration
Published
2025-07-30
Title
WP Modal Popup with Cookie Integration < 2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-mon
Published
2015-04-16
Title
WP-Mon - Arbitrary File Download
Slug
wp-monalisa
Published
2024-10-09
Title
wp-Monalisa < 6.5 - Cross-Site Request Forgery
Slug
wp-mpdf
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Slug
wp-mpdf
Published
2024-03-13
Title
wp-mpdf < 3.8 - Reflected Cross-Site Scripting
Slug
wp-mpdf
Published
2025-09-26
Title
wp-mpdf < 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting