WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-map-block
Published
2025-06-06
Title
WP Map Block by aBlocks < 2.0.3 - Contributor+ Stored XSS via Marker
Slug
wp-map-route-planner
Published
2025-04-09
Title
WP Map Route Planner <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-mapa-politico-spain
Published
2021-08-05
Title
WP Mapa Politico Espana < 3.7.0 - Authenticated Stored Cross-Site Scripting
Slug
wp-mapa-politico-spain
Published
2025-05-19
Title
WP Mapa Politico España < 3.8.1 - Cross-Site Request Forgery
Slug
wp-mapbox-gl-js
Published
2025-10-10
Title
WP Mapbox GL JS Maps <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-mapit
Published
2023-11-06
Title
WP MapIt < 3.0.0 - Contributor+ Stored XSS
Slug
wp-mapit
Published
2026-01-04
Title
MapIt <= 3.0.3 - Missing Authorization
Slug
wp-markdown-editor
Published
2017-03-10
Title
WP Markdown Editor 2.3.0 - Authenticated "Self" Cross-Site Scripting (XSS)
Slug
wp-marketing-automations
Published
2022-07-26
Title
Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation
Slug
wp-marketing-automations
Published
2023-12-21
Title
Automation By Autonami < 2.7.0 - Authenticated(Administrator+) SQL Injection
Slug
wp-marketing-automations
Published
2024-03-18
Title
Automation By Autonami < 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-marketing-automations
Published
2024-09-25
Title
Automation By Autonami < 3.2.0 - Authenticated (Administrator+) SQL Injection
Slug
wp-marketing-automations
Published
2024-10-24
Title
Automation By Autonami < 3.3.0 - Unauthenticated SQLi
Slug
wp-marketing-automations
Published
2025-03-21
Title
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit < 3.5.2 - Unauthenticated SQL Injection via 'automationId'
Slug
wp-marketing-automations
Published
2025-03-27
Title
Automation By Autonami < 3.5.2 - Open Redirect
Slug
wp-marketing-automations
Published
2025-06-12
Title
Automation By Autonami < 3.6.1 - Open Redirect
Slug
wp-marketing-automations
Published
2025-06-17
Title
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit < 3.6.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation
Slug
wp-marketing-automations
Published
2025-08-18
Title
Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library
Slug
wp-marketing-automations
Published
2025-11-04
Title
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce < 3.6.4.2 - Unauthenticated Sensitive Information Exposure
Slug
wp-marketing-automations
Published
2025-11-04
Title
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce < 3.6.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Slug
wp-marketing-automations
Published
2026-04-22
Title
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce < 3.8.0 - Missing Authorization
Slug
wp-marketplace
Published
2014-08-01
Title
WP Marketplace 1.1.0 - Shell Upload
Slug
wp-masonry-infinite-scroll
Published
2025-06-25
Title
WP Masonry & Infinite Scroll < 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-masquerade
Published
2024-04-25
Title
WP Masquerade <= 1.1.0 - Subscriber+ Account Takeover
Slug
wp-mathjax-plus
Published
2024-11-28
Title
WP MathJax <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting