WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-multi-store-locator
Published
2023-05-12
Title
WP Multi Store Locator < 2.5.1 - Contributor+ Stored XSS
Slug
wp-multi-store-locator
Published
2025-01-03
Title
WP Multi Store Locator < 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-multi-store-locator
Published
2025-01-27
Title
WP Multistore Locator — WP Store Locator Plugin: Effortless Integration With Snazzy Maps < 2.5.1 - Reflected Cross-Site Scripting
Slug
wp-multi-store-locator
Published
2025-02-23
Title
WP Multistore Locator < 2.5.2 - Unauthenticated SQL Injection
Slug
wp-multi-store-locator
Published
2025-03-24
Title
WP Multistore Locator <= 2.5.2 - Unauthenticated SQL Injection
Slug
wp-multi-store-locator
Published
2025-03-12
Title
WP Multistore Locator <= 2.5.2 - Cross-Site Request Forgery
Slug
wp-multi-store-locator-pro
Published
2026-09-17
Title
WP Multi Store Locator Pro < 4.5.2 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameter
Slug
wp-multilang
Published
2025-06-05
Title
WP Multilang < 2.4.19.1 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-multilang
Published
2026-08-18
Title
WP Multilang – Translation and Multilingual Plugin < 2.4.32 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-multilang
Published
2026-09-23
Title
WP Multilang – Translation and Multilingual Plugin < 2.4.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
Slug
wp-multisite-content-copier
Published
2024-07-10
Title
Multisite Content Copier/Updater < 2.0.1 - Reflected Cross-Site Scripting
Slug
wp-multisite-content-copier-pro
Published
2022-02-07
Title
Multisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site Scripting
Slug
wp-multisite-content-copier-pro
Published
2022-02-21
Title
Multisite Content Copier/Updater < 2.1.2 - Reflected Cross-Site Scripting
Slug
wp-multitasking
Published
2024-08-17
Title
WP MultiTasking <= 0.1.12 - Reflected XSS via Shortcode
Slug
wp-multitasking
Published
2024-08-17
Title
WP MultiTasking <= 0.1.12 - Settings Update via CSRF
Slug
wp-multitasking
Published
2024-08-17
Title
WP MultiTasking <= 0.1.12 - Welcome Popup Update via CSRF
Slug
wp-multitasking
Published
2024-08-17
Title
WP MultiTasking <= 0.1.12 - Exit Popup Update via CSRF
Slug
wp-multitasking
Published
2024-08-17
Title
WP MultiTasking <= 0.1.12 - SMTP Settings Update via CSRF
Slug
wp-multitasking
Published
2024-09-27
Title
WP MultiTasking - WP Utilities < 0.1.18 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-multitasking
Published
2025-03-19
Title
WP MultiTasking <= 0.1.12 - Header/Footer/Body Script Update via CSRF
Slug
wp-multitasking
Published
2025-03-19
Title
WP MultiTasking <= 0.1.12 - Permalink Suffix Update via CSRF
Slug
wp-munich-blocks
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-munich-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-munich-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-music-player
Published
2025-01-07
Title
WP Music Player <= 1.3 - Authenticated (Administrator+) SQL Injection