WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-members
Published
2025-07-21
Title
WP-Members < 3.5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-members
Published
2025-09-08
Title
WP-Members Membership Plugin < 3.5.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names
Slug
wp-members
Published
2025-09-22
Title
WP-Members < 3.5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-members
Published
2026-01-06
Title
WP-Members Membership Plugin < 3.5.4.5 - Unauthenticated Information Exposure via Unprotected Files
Slug
wp-members
Published
2026-01-14
Title
WP-Members Membership Plugin < 3.5.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields
Slug
wp-members
Published
2026-03-03
Title
WP-Members Membership Plugin < 3.5.6 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute
Slug
wp-members
Published
2026-09-10
Title
WP-Members Membership Plugin < 3.5.7 - Reflected Cross-Site Scripting
Slug
wp-members
Published
2026-10-12
Title
WP-Members Membership Plugin < 3.5.8 - Missing Authorization
Slug
wp-membership
Published
2015-05-21
Title
WP Membership <= 1.2.3 - Multiple Vulnerabilities
Slug
wp-membership
Published
2023-03-06
Title
Multiple e-plugins - Subscriber+ Privilege Escalation
Slug
wp-membership
Published
2024-11-08
Title
WP Membership < 1.6.3 - Unauthenticated Arbitrary File Upload
Slug
wp-membership
Published
2025-08-14
Title
WP Membership < 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
wp-membership
Published
2026-01-22
Title
Membership <= 1.6.4 - Missing Authorization
Slug
wp-membership
Published
2026-01-22
Title
Membership <= 1.6.4 - Subscriber+ Privilege Escalation
Slug
wp-memory
Published
2022-11-21
Title
WP Memory < 2.46 - Subscriber+ Arbitrary Plugin Installation
Slug
wp-memory
Published
2025-07-26
Title
Memory Usage < 3.99 - Cross-Site Request Forgery to Limited Plugin Installation via wpmemory_install_plugin Function
Slug
wp-menu-creator
Published
2014-08-01
Title
Menu Creator <= 1.1.7 - SQL Injection
Slug
wp-menu-image
Published
2025-01-06
Title
WP Menu Image < 2.3 - Unauthenticated Menu Image Deletion
Slug
wp-menu-image
Published
2024-12-16
Title
WP Menu Image < 2.3 - Missing Authorization to Unauthenticated Menu Image Deletion
Slug
wp-mermaid
Published
2024-11-28
Title
WP Mermaid <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-meta-and-date-remover
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-meta-and-date-remover
Published
2023-10-09
Title
WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS
Slug
wp-meta-and-date-remover
Published
2023-11-16
Title
WP Meta and Date Remover < 2.3.1 - Cross-Site Request Forgery via updateSettings
Slug
wp-meta-and-date-remover
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
wp-meta-and-date-remover
Published
2026-05-27
Title
WP Meta and Date Remover < 2.3.7 - Missing Authorization