WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-db-booster
Published
2025-12-19
Title
WP DB Booster <= 1.0.1 - Cross-Site Request Forgery to Database Cleanup
Slug
wp-db-table-editor
Published
2024-06-03
Title
WP-DB-Table-Editor <= 1.8.4 - Missing Authorization to Authenticated(Contributor+) Database Access
Slug
wp-dbmanager
Published
2014-10-13
Title
WP-DBManager < 2.7.2 - Authenticated Command Injection
Slug
wp-dbmanager
Published
2018-10-22
Title
Download WP-DBManager <= 2.79.1 - Arbitrary File Delete
Slug
wp-dbmanager
Published
2022-07-25
Title
WP-DBManager < 2.80.8 - Admin+ Remote Command Execution
Slug
wp-debugging
Published
2021-09-27
Title
WP Debugging < 2.11.0 - Unauthenticated Plugin's Settings Update
Slug
wp-debugging
Published
2022-01-24
Title
WP Dependency Installer < 4.3.1 - Subscriber+ Arbitrary Plugin Activation
Slug
wp-debugging
Published
2022-01-24
Title
WP Dependency Installer < 4.3.1 - Arbitrary Plugin Installation from Dependency via CSRF
Slug
wp-default-feature-image
Published
2023-09-01
Title
WP Default Feature Image <= 1.0.1.1 - Admin+ Stored XSS
Slug
wp-delete-user-accounts
Published
2025-04-11
Title
WP Delete User Accounts < 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-delete-user-accounts
Published
2025-09-22
Title
WP Delete User Accounts <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-design-maps-places
Published
2021-09-09
Title
WP Design Maps & Places <= 1.2 - Reflected Cross-Site Scripting
Slug
wp-desklite
Published
2024-12-13
Title
WP DeskLite <= 1.0.0 - Reflected XSS
Slug
wp-dev-powers-acf-color-coded-field-types
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-dev-powers-display-screen-dimensions-to-admin
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-dev-powers-element-selector-jquery-powers
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-dialog
Published
2021-07-31
Title
WP Dialog <= 1.2.5.5 - Authenticated Stored Cross-Site Scripting
Slug
wp-directorybox-manager
Published
2025-02-08
Title
WP Directorybox Manager <= 2.5 - Authentication Bypass
Slug
wp-directorybox-manager
Published
2025-02-12
Title
WP Directorybox Manager <= 2.5 - Authentication Bypass
Slug
wp-disable
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-disable-sitemap
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-disable-sitemap
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-discord-invite
Published
2023-09-26
Title
WP Discord Invite < 2.5.1 - Arbitrary Settings Update via CSRF
Slug
wp-discord-invite
Published
2023-10-16
Title
WP Discord Invite < 2.5.2 - Admin+ Stored Cross Site Scripting
Slug
wp-discord-invite
Published
2023-09-24
Title
WP Discord Invite < 2.5.1 - Reflected Cross-Site Scripting via webhook