WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-members
Published
2024-03-07
Title
WP-Members Membership Plugin < 3.4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-members
Published
2024-04-01
Title
WP-Members Membership Plugin < 3.4.9.3 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-members
Published
2024-04-25
Title
WP-Members Membership Plugin < 3.4.9.4 - Unprotected Storage of Potentially Sensitive Files
Slug
wp-members
Published
2024-10-21
Title
WP-Members Membership Plugin < 3.4.9.6 - Reflected Cross-Site Scripting
Slug
wp-members
Published
2024-10-24
Title
WP-Members < 3.4.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode
Slug
wp-members
Published
2025-05-16
Title
WP-Members < 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode
Slug
wp-members
Published
2025-06-19
Title
WP-Members < 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-members
Published
2025-07-21
Title
WP-Members < 3.5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-members
Published
2025-09-08
Title
WP-Members Membership Plugin < 3.5.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names
Slug
wp-members
Published
2025-09-22
Title
WP-Members < 3.5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-members
Published
2026-01-06
Title
WP-Members Membership Plugin < 3.5.4.5 - Unauthenticated Information Exposure via Unprotected Files
Slug
wp-members
Published
2026-01-14
Title
WP-Members Membership Plugin < 3.5.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields
Slug
wp-members
Published
2026-03-03
Title
WP-Members Membership Plugin < 3.5.6 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute
Slug
wp-membership
Published
2015-05-21
Title
WP Membership <= 1.2.3 - Multiple Vulnerabilities
Slug
wp-membership
Published
2023-03-06
Title
Multiple e-plugins - Subscriber+ Privilege Escalation
Slug
wp-membership
Published
2024-11-08
Title
WP Membership < 1.6.3 - Unauthenticated Arbitrary File Upload
Slug
wp-membership
Published
2025-08-14
Title
WP Membership < 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
wp-membership
Published
2026-01-22
Title
Membership <= 1.6.4 - Missing Authorization
Slug
wp-membership
Published
2026-01-22
Title
Membership <= 1.6.4 - Subscriber+ Privilege Escalation
Slug
wp-memory
Published
2022-11-21
Title
WP Memory < 2.46 - Subscriber+ Arbitrary Plugin Installation
Slug
wp-memory
Published
2025-07-26
Title
Memory Usage < 3.99 - Cross-Site Request Forgery to Limited Plugin Installation via wpmemory_install_plugin Function
Slug
wp-menu-creator
Published
2014-08-01
Title
Menu Creator <= 1.1.7 - SQL Injection
Slug
wp-menu-image
Published
2025-01-06
Title
WP Menu Image < 2.3 - Unauthenticated Menu Image Deletion
Slug
wp-menu-image
Published
2024-12-16
Title
WP Menu Image < 2.3 - Missing Authorization to Unauthenticated Menu Image Deletion
Slug
wp-mermaid
Published
2024-11-28
Title
WP Mermaid <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting