Vulnerability Name CVE Severity
WordPress Plugin Mailing List 'wpabspath' Parameter Remote File Include (1.3.3)
WordPress Plugin Mail logging-WP Mail Catcher Cross-Site Scripting (2.1.2)
WordPress Plugin Mail Masta Local File Inclusion (1.0)
WordPress Plugin Mail Masta Multiple SQL Injection Vulnerabilities (1.0)
WordPress Plugin Mail On Update Cross-Site Request Forgery (5.1.0)
WordPress Plugin MailPoet-emails and newsletters in WordPress Cross-Site Scripting (3.23.1)
WordPress Plugin MailPoet Newsletters (Previous) 'swfupload.swf' Cross-Site Scripting (2.1.6)
WordPress Plugin MailPoet Newsletters (Previous) Arbitrary File Upload (2.6.7)
WordPress Plugin MailPoet Newsletters (Previous) Cross-Site Request Forgery (2.6.10)
WordPress Plugin MailPoet Newsletters (Previous) Cross-Site Scripting (2.6.11)
WordPress Plugin MailPoet Newsletters (Previous) Cross-Site Scripting (2.6.19)
WordPress Plugin MailPoet Newsletters (Previous) Multiple Unspecified Vulnerabilities (2.7.1)
WordPress Plugin MailPoet Newsletters (Previous) Multiple Vulnerabilities (2.7.2)
WordPress Plugin MailPoet Newsletters (Previous) Security Bypass (2.8.1)
WordPress Plugin MailPoet Newsletters (Previous) SQL Injection (2.2)
WordPress Plugin MailPoet Newsletters (Previous) Unspecified Vulnerability (2.7.8)
WordPress Plugin MailPress Multiple Vulnerabilities (5.4.4)
WordPress Plugin MailPress Remote Code Execution (7.0.2)
WordPress Plugin Mail Queue Cross-Site Scripting (1.1)
WordPress Plugin Mailster-Email Newsletter for WordPress Cross-Site Scripting (2.4.5.1)
WordPress Plugin Mailster-Email Newsletter for WordPress Local File Inclusion (4.0.6)
WordPress Plugin Mail Subscribe List Unspecified Vulnerability (2.0.9)
WordPress Plugin Mailtree Log Mail Cross-Site Scripting (1.0.0)
WordPress Plugin MailUp newsletter sign-up form Security Bypass (1.3.2)
WordPress Plugin Maintenance Cross-Site Request Forgery (3.6.4)
WordPress Plugin Maintenance Cross-Site Scripting (4.02)
WordPress Plugin Maintenance Mode Under Construction Page Landing Page Possible Remote Code Execution (1.0.9)
WordPress Plugin Maintenance Mode Unspecified Vulnerability (1.3.3)
WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Cross-Site Scripting (2.0.12)
WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Security Bypass (2.0.9.1)
WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Security Bypass (3.4.4)
WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard SQL Injection (4.1.7.1)
WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Unspecified Vulnerability (2.0.27)
WordPress Plugin MainWP Child Reports SQL Injection (2.0.7)
WordPress Plugin MainWP Dashboard Cross-Site Scripting (3.1.2)
WordPress Plugin MainWP Dashboard Unspecified Vulnerability (2.0.22)
WordPress Plugin MalCare Security-Free Malware Scanner, Protection & Security for WordPress Cross-Site Scripting (4.57)
WordPress Plugin Malware Finder Cross-Site Scripting (1.1)
WordPress Plugin Malware Scanner Privilege Escalation (4.7.2)
WordPress Plugin Malware Scanner SQL Injection (4.7.2)
WordPress Plugin Malware Scanner Unspecified Vulnerability (4.7.3)
WordPress Plugin Manage and respond to conversations with leads-HappyForms PHP Object Injection (1.0.0)
WordPress Plugin Manage Calameo Publications by Athlon Cross-Site Scripting (1.1.0)
WordPress Plugin Management App for WooCommerce-Order notifications, Order management, Lead management, Uptime Monitoring Arbitrary File Upload (1.2.2)
WordPress Plugin Management App for WooCommerce-Order notifications, Order management, Lead management, Uptime Monitoring Unspecified Vulnerability (1.2.3)
WordPress Plugin Manage Notification E-mails Cross-Site Request Forgery (1.8.2)
WordPress Plugin ManageWP Worker Unspecified Vulnerability (4.1.7)
WordPress Plugin Mang Board WP SQL Injection (1.9.9)
WordPress Plugin Mang Board WP Unspecified Vulnerability (2.0.3)
WordPress Plugin Mang Board WP Unspecified Vulnerability (2.0.5)
WordPress Plugin Manual Image Crop Cross-Site Scripting (1.10)
WordPress Plugin Map Block for Google Maps Unspecified Vulnerability (1.31)
WordPress Plugin MapifyLite (by MapifyPro) Cross-Site Scripting (3.3)
WordPress Plugin Mapplic-Custom Interactive Map Server-Side Request Forgery (6.1)
WordPress Plugin Mapplic Lite Server-Side Request Forgery (1.0)
WordPress Plugin MapPress Maps for WordPress Cross-Site Request Forgery (2.53.8)
WordPress Plugin MapPress Maps for WordPress Security Bypass (2.54.5)
WordPress Plugin MapSVG Lite Arbitrary File Disclosure (4.2.3.1)
WordPress Plugin MapSVG Lite Arbitrary File Upload (4.0.5)
WordPress Plugin MapSVG Lite Arbitrary File Upload (4.2.4)
WordPress Plugin MapSVG Lite Cross-Site Request Forgery (4.2.4)
WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Cross-Site Scripting (2.30)
WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Open Redirect (4.0)
WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Security Bypass (4.16)
WordPress Plugin Mapwiz SQL Injection (1.0.1)
WordPress Plugin Marekkis Watermark Cross-Site Scripting (0.9.1)
WordPress Plugin Markdown on Save Improved Cross-Site Scripting (2.5)
WordPress Plugin Marketo Forms and Tracking Cross-Site Request Forgery (1.0.2)
WordPress Plugin MarketPress-WordPress eCommerce PHP Object Injection (3.2.6)
WordPress Plugin Markup (JSON-LD) structured in schema.org Cross-Site Scripting (4.8.1)
WordPress Plugin Mashshare-Social Media Icons SEO Share Buttons for Facebook, Twitter, Subscribe Information Disclosure (2.3.0)
WordPress Plugin Mass Delete Taxonomies Cross-Site Request Forgery (3.0.0)
WordPress Plugin Mass Delete Unused Tags Cross-Site Request Forgery (2.0.0)
WordPress Plugin Mass Pages/Posts Creator Cross-Site Scripting (1.2.2)
WordPress Plugin Master Popups Remote Code Execution (1.0.0)