WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-multitasking
Published
2024-08-17
Title
WP MultiTasking <= 0.1.12 - Exit Popup Update via CSRF
Slug
wp-multitasking
Published
2024-08-17
Title
WP MultiTasking <= 0.1.12 - SMTP Settings Update via CSRF
Slug
wp-multitasking
Published
2024-09-27
Title
WP MultiTasking - WP Utilities < 0.1.18 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-multitasking
Published
2025-03-19
Title
WP MultiTasking <= 0.1.12 - Header/Footer/Body Script Update via CSRF
Slug
wp-multitasking
Published
2025-03-19
Title
WP MultiTasking <= 0.1.12 - Permalink Suffix Update via CSRF
Slug
wp-munich-blocks
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-munich-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-munich-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-music-player
Published
2025-01-07
Title
WP Music Player <= 1.3 - Authenticated (Administrator+) SQL Injection
Slug
wp-my-admin-bar
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-my-admin-bar
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-mylinks
Published
2024-09-30
Title
WP MyLinks < 1.0.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-nano-ad
Published
2026-06-01
Title
wp-nano-ad <= 1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting via blogrole_link Parameter
Slug
wp-native-articles
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-nerd-toolkit
Published
2024-12-11
Title
WP-NERD Toolkit <= 1.1 - Unauthenticated Information Exposure
Slug
wp-nested-pages
Published
2019-03-26
Title
Nested Pages <= 3.0.7 - Post Edit Bypass
Slug
wp-nested-pages
Published
2021-08-25
Title
Nested Pages < 3.1.16 - CSRF to Arbitrary Post Deletion and Modification
Slug
wp-nested-pages
Published
2021-08-25
Title
Nested Pages < 3.1.16 - Open Redirect
Slug
wp-nested-pages
Published
2022-06-06
Title
Nested Pages < 3.1.21 - Admin+ Stored Cross Site Scripting
Slug
wp-nested-pages
Published
2023-05-30
Title
Nested Pages < 3.2.4 - Editor+ Plugin Settings Reset
Slug
wp-nested-pages
Published
2023-12-01
Title
Nested Pages < 3.2.7 - Admin+ Stored XSS
Slug
wp-nested-pages
Published
2024-07-03
Title
Nested Pages < 3.2.8 - Cross-Site Request Forgery to Local File Inclusion
Slug
wp-nested-pages
Published
2024-08-28
Title
Nested Pages <= 3.2.8 - Editor+ Stored XSS
Slug
wp-nested-pages
Published
2025-01-24
Title
Nested Pages < 3.2.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-nested-pages
Published
2025-03-02
Title
Nested Pages < 3.2.13 - Contributor+ Stored XSS