WordPress Plugin Vulnerabilities | Page 242 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2026-04-20

Title

wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin < 6.5.0.5 - Unauthenticated Stored Cross-Site Scripting via CSV/Excel Data Import

Slug

Published

2026-06-08

Title

wpDataTables (Premium) < 7.4 - Unauthenticated SQL Injection

Slug

Published

2026-06-17

Title

wpDataTables (Premium) < 7.4.1 - Unauthenticated SQL Injection

Slug

Published

2026-06-30

Title

wpDataTables (Premium) < 6.5.1.2 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-07-28

Title

wpDataTables (Premium) < 7.5.2 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-08-19

Title

wpDataTables (Premium) < 6.5.1.5 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2025-01-16

Title

WPDB to Sql <= 1.2 - Unauthenticated Sensitive Information Exposure

Slug

wpdbspringclean

Published

2023-11-07

Title

WPDBSpringClean <= 1.6 - Reflected XSS

Slug

Published

2022-10-31

Title

DeepL Pro API Translation < 1.7.5 - API Key Disclosure

Slug

Published

2023-10-25

Title

DeepL Pro API translation < 2.4.1.2 - Log Pruning via CSRF

Slug

Published

2020-02-27

Title

wpdefault - Backdoor Plugin

Slug

wpdevart-pricing-table

Published

2025-06-29

Title

Pricing Table builder <= 1.5.1 - Cross-Site Request Forgery

Slug

wpdevart-vertical-menu

Published

2023-02-28

Title

Responsive Vertical Icon Menu < 1.5.9 - Theme Deletion via CSRF

Slug

wpdevart-vertical-menu

Published

2023-01-20

Title

Responsive Vertical Icon Menu < 1.5.9 - Admin+ Stored XSS

Slug

Published

2025-01-16

Title

WpDevTool <= 0.1.1 - Reflected Cross-Site Scripting

Slug

Published

2023-06-01

Title

WP Directory Kit < 1.2.4 - Reflected Cross-Site Scripting via search parameter

Slug

Published

2023-05-02

Title

WP Directory Kit < 1.2.3 - Unauthenticated Arbitrary Settings Update

Slug

Published

2023-04-28

Title

WP Directory Kit < 1.2.0 - Cross-Site Request Forgery

Slug

Published

2023-05-26

Title

WP Directory Kit < 1.2.0 - Unauthenticated Local File Inclusion

Slug

Published

2023-06-12

Title

WP Directory Kit < 1.2.4 - Missing Authorization for Plugin Settings Update

Slug

Published

2023-04-28

Title

WP Directory Kit < 1.2.2 - Cross-Site Request Forgery to Plugin Settings Update

Slug

Published

2023-04-27

Title

WP Directory Kit < 1.2.0 - Open Redirect

Slug

Published

2023-09-05

Title

WP Directory Kit < 1.2.7 - Missing Authorization

Slug

Published

2024-03-25

Title

WP Directory Kit < 1.3.0 - Reflected Cross-Site Scripting

Slug

Published

2024-04-04

Title

WP Directory Kit < 1.3.1 - Authenticated (Subscriber+) SQL Injection