WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-media-cleaner
Published
2015-02-26
Title
WP Media Cleaner <= 2.2.6 - Cross-Site Scripting (XSS)
Slug
wp-media-file-type-manager
Published
2025-06-05
Title
WP Media File Type Manager <= 2.3.1 - Settings Update via CSRF
Slug
wp-media-folder
Published
2024-02-12
Title
WP Media folder < 5.7.3 - Missing Authorization to Authenticated(Subscriber+) Plugin settings change
Slug
wp-media-folder
Published
2024-02-15
Title
WP Media folder < 5.7.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
wp-media-folder
Published
2024-02-12
Title
WP Media folder < 5.7.3 - Missing Authorization to Authenticated(Subscriber+) Title Modification
Slug
wp-media-folder-addon
Published
2026-06-04
Title
Media folder Addon < 4.0.2 - Unauthenticated Arbitrary File Download
Slug
wp-media-folder-addon
Published
2026-07-08
Title
Media folder Addon <= 4.1.6 - Unauthenticated Arbitrary File Download
Slug
wp-media-library-categories
Published
2023-01-20
Title
Media Library Categories < 2.0.0 - Admin+ Stored XSS
Slug
wp-media-library-categories
Published
2023-07-20
Title
Media Library Categories < 2.0.1 - Admin+ Stored XSS
Slug
wp-media-manager-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-media-optimizer-webp
Published
2024-12-05
Title
WP Media Optimizer (.webp) <= 1.4.0 - Reflected Cross-Site Scripting via wpmowebp-css-resources and wpmowebp-js-resources Parameters
Slug
wp-media-player
Published
2014-08-01
Title
WP Silverlight Media Player < 0.8 - Cross-Site Scripting (XSS)
Slug
wp-mediatagger
Published
2025-01-10
Title
WP MediaTagger <= 4.1.1 - Contributor+ Stored XSS
Slug
wp-mediatagger
Published
2025-01-10
Title
WP MediaTagger <= 4.1.1 - Reflected XSS
Slug
wp-meetup
Published
2025-01-16
Title
WP Meetup <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
wp-megamenu
Published
2021-09-21
Title
WP Mega Menu < 1.4.1 - Subscriber+ Arbitrary Post Access
Slug
wp-megamenu
Published
2021-09-21
Title
WP Mega Menu < 1.4.0 - Unauthenticated Arbitrary Post Access
Slug
wp-megamenu
Published
2021-09-17
Title
WP Mega Menu < 1.4.1 - Reflected Cross-Site Scripting
Slug
wp-megamenu
Published
2024-12-11
Title
WP Mega Menu <= 1.4.2 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-members
Published
2014-08-01
Title
WP-Members 2.8.9 - profile.php Multiple Parameter Stored XSS
Slug
wp-members
Published
2014-08-01
Title
WP-Members 2.8.9 - wp-login.php register Action Multiple Parameter Reflected XSS
Slug
wp-members
Published
2017-07-13
Title
WP-Members <= 3.1.7 - Authenticated Cross-Site Scripting (XSS)
Slug
wp-members
Published
2019-06-13
Title
WP-Members < 3.2.8.1 - Cross-Site Request Forgery (CSRF)
Slug
wp-members
Published
2023-06-08
Title
WP-Members Membership < 3.4.8 - Subscriber+ Unauthorized Plugin Settings Update
Slug
wp-members
Published
2024-01-03
Title
WP-Members Membership Plugin < 3.4.9 - Contributor+ Sensitive Information Exposure