WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-meetup
Published
2025-01-16
Title
WP Meetup <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
wp-megamenu
Published
2021-09-21
Title
WP Mega Menu < 1.4.1 - Subscriber+ Arbitrary Post Access
Slug
wp-megamenu
Published
2021-09-21
Title
WP Mega Menu < 1.4.0 - Unauthenticated Arbitrary Post Access
Slug
wp-megamenu
Published
2021-09-17
Title
WP Mega Menu < 1.4.1 - Reflected Cross-Site Scripting
Slug
wp-megamenu
Published
2024-12-11
Title
WP Mega Menu <= 1.4.2 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-members
Published
2014-08-01
Title
WP-Members 2.8.9 - profile.php Multiple Parameter Stored XSS
Slug
wp-members
Published
2014-08-01
Title
WP-Members 2.8.9 - wp-login.php register Action Multiple Parameter Reflected XSS
Slug
wp-members
Published
2017-07-13
Title
WP-Members <= 3.1.7 - Authenticated Cross-Site Scripting (XSS)
Slug
wp-members
Published
2019-06-13
Title
WP-Members < 3.2.8.1 - Cross-Site Request Forgery (CSRF)
Slug
wp-members
Published
2023-06-08
Title
WP-Members Membership < 3.4.8 - Subscriber+ Unauthorized Plugin Settings Update
Slug
wp-members
Published
2024-01-03
Title
WP-Members Membership Plugin < 3.4.9 - Contributor+ Sensitive Information Exposure
Slug
wp-members
Published
2024-03-07
Title
WP-Members Membership Plugin < 3.4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-members
Published
2024-04-01
Title
WP-Members Membership Plugin < 3.4.9.3 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-members
Published
2024-04-25
Title
WP-Members Membership Plugin < 3.4.9.4 - Unprotected Storage of Potentially Sensitive Files
Slug
wp-members
Published
2024-10-21
Title
WP-Members Membership Plugin < 3.4.9.6 - Reflected Cross-Site Scripting
Slug
wp-members
Published
2024-10-24
Title
WP-Members < 3.4.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode
Slug
wp-members
Published
2025-05-16
Title
WP-Members < 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode
Slug
wp-members
Published
2025-06-19
Title
WP-Members < 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-members
Published
2025-07-21
Title
WP-Members < 3.5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-members
Published
2025-09-08
Title
WP-Members Membership Plugin < 3.5.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names
Slug
wp-members
Published
2025-09-22
Title
WP-Members < 3.5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-members
Published
2026-01-06
Title
WP-Members Membership Plugin < 3.5.4.5 - Unauthenticated Information Exposure via Unprotected Files
Slug
wp-members
Published
2026-01-14
Title
WP-Members Membership Plugin < 3.5.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields
Slug
wp-members
Published
2026-03-03
Title
WP-Members Membership Plugin < 3.5.6 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute
Slug
wp-membership
Published
2015-05-21
Title
WP Membership <= 1.2.3 - Multiple Vulnerabilities