WordPress Plugin Vulnerabilities | Page 233 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2026-05-14

Title

WP Directory Kit < 1.5.2 - Unauthenticated SQL Injection

Slug

Published

2016-05-30

Title

wpDiscuz < 3.2.0 - Reflected Cross-Site Scripting (XSS)

Slug

Published

2020-06-12

Title

wpDiscuz < 5.3.6 - Unauthenticated SQL Injection

Slug

Published

2020-07-28

Title

Comments - wpDiscuz 7.0.0 - 7.0.4 - Unauthenticated Arbitrary File Upload

Slug

Published

2021-09-13

Title

Comments - wpDiscuz < 7.3.2 - Admin+ Stored Cross-Site Scripting

Slug

Published

2021-10-11

Title

wpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRF

Slug

Published

2022-02-10

Title

wpDiscuz < 7.3.12 - Sensitive Information Disclosure

Slug

Published

2022-10-28

Title

Comments - wpDiscuz 7.4.2 - Subscriber+ IDOR

Slug

Published

2023-09-12

Title

wpDiscuz < 7.6.4 - Unauthenticated Data Modification via IDOR

Slug

Published

2023-09-12

Title

wpDiscuz < 7.6.4 - Post Rating Increase/Decrease iva IDOR

Slug

Published

2023-10-31

Title

wpDiscuz < 7.6.12 - Unauthenticated Stored XSS

Slug

Published

2023-09-18

Title

wpDiscuz < 7.6.6 - Unauthenticated SQL Injection

Slug

Published

2023-10-22

Title

wpDiscuz < 7.6.4 - Author+ IDOR

Slug

Published

2023-10-22

Title

wpDiscuz < 7.6.11 - Unauthenticated Content Injection

Slug

Published

2023-10-20

Title

wpDiscuz < 7.6.11 - Insufficient Authorization to Comment Submission on Deleted Posts

Slug

Published

2023-10-12

Title

wpDiscuz < 7.6.12 - Missing Authorization in AJAX Actions

Slug

Published

2023-11-14

Title

wpDiscuz < 7.6.12 - Cross-Site Request Forgery

Slug

Published

2023-09-18

Title

wpDiscuz < 7.6.6 - Unauthenticated SQL Injection

Slug

Published

2023-11-17

Title

wpDiscuz < 7.6.13 - Admin+ Stored XSS

Slug

Published

2024-04-22

Title

wpDiscuz < 7.6.16 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text

Slug

Published

2024-06-06

Title

Comments – wpDiscuz < 7.6.19 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2024-08-01

Title

Comments – wpDiscuz < 7.6.22 - Unauthenticated HTML Injection

Slug

Published

2024-10-24

Title

Comments – wpDiscuz < 7.6.25 - Authentication Bypass

Slug

Published

2025-09-22

Title

wpDiscuz < 7.6.34 - Missing Authorization

Slug

Published

2025-12-11

Title

Comments – wpDiscuz < 7.6.40 - Unauthenticated Account Takeover