| Vulnerability Name |
CVE
CWE
|
CWE |
Severity |
|
WordPress Plugin Menu Image Malware/Addware Notification (2.6.9)
|
|
|
High
|
|
WordPress Plugin Menu Swapper Cross-Site Request Forgery (1.1.0.2)
|
|
|
High
|
|
WordPress Plugin Meow Gallery (+ Gallery Block) Security Bypass (4.1.9)
|
|
|
High
|
|
WordPress Plugin Meow Gallery (+ Gallery Block) SQL Injection (4.1.8)
|
|
|
High
|
|
WordPress Plugin Merge+Minify+Refresh Cross-Site Request Forgery (1.10.6)
|
|
|
High
|
|
WordPress Plugin Meta Box-WordPress Custom Fields Framework Arbitrary File Deletion (4.16.2)
|
|
|
High
|
|
WordPress Plugin Meta Box-WordPress Custom Fields Framework Arbitrary File Upload (4.16.1)
|
|
|
High
|
|
WordPress Plugin Meta Slider and Carousel with Lightbox Cross-Site Request Forgery (1.6.2)
|
|
|
High
|
|
WordPress Plugin MetaSlider Cross-Site Scripting (2.6.2)
|
|
|
High
|
|
WordPress Plugin MetaSlider Cross-Site Scripting (3.17.1)
|
|
|
High
|
|
WordPress Plugin MetaSlider Information Disclosure (3.3.1)
|
|
|
High
|
|
WordPress Plugin Meteor Slides Cross-Site Scripting (1.5.6)
|
|
|
High
|
|
WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Cross-Site Scripting (3.1.2)
|
|
|
High
|
|
WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Information Disclosure (2.1.3)
|
|
|
High
|
|
WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Security Bypass (3.2.1)
|
|
|
High
|
|
WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Security Bypass (3.3.0)
|
|
|
High
|
|
WordPress Plugin Metronet Tag Manager Cross-Site Request Forgery (1.2.7)
|
|
|
High
|
|
WordPress Plugin MF Gig Calendar 'page_id' Parameter Cross-Site Scripting (0.9.4.1)
|
|
|
High
|
|
WordPress Plugin MF Gig Calendar Cross-Site Scripting (1.1)
|
|
|
High
|
|
WordPress Plugin Microblog Poster SQL Injection (1.6.0)
|
|
|
High
|
|
WordPress Plugin Microblog Poster SQL Injection (1.6.1)
|
|
|
High
|
|
WordPress Plugin MicroCopy SQL Injection (1.1.0)
|
|
|
High
|
|
WordPress Plugin Migration, Backup, Staging-WPvivid Arbitrary File Deletion (0.9.76)
|
|
|
High
|
|
WordPress Plugin Migration, Backup, Staging-WPvivid Cross-Site Scripting (0.9.55)
|
|
|
High
|
|
WordPress Plugin Migration, Backup, Staging-WPvivid Directory Traversal (0.9.75)
|
|
|
High
|
|
WordPress Plugin Migration, Backup, Staging-WPvivid PHAR Deserialization (0.9.74)
|
|
|
High
|
|
WordPress Plugin Migration, Backup, Staging-WPvivid Security Bypass (0.9.35)
|
|
|
High
|
|
WordPress Plugin Migration, Backup, Staging-WPvivid SQL Injection (0.9.52)
|
|
|
High
|
|
WordPress Plugin Mikiurl WordPress Eklentisi Cross-Site Request Forgery (2.0)
|
|
|
High
|
|
WordPress Plugin Mimetic Books Cross-Site Scripting (0.2.13)
|
|
|
High
|
|
WordPress Plugin Mingle Forum 'edit_post_id' Parameter SQL Injection (1.0.31)
|
|
|
High
|
|
WordPress Plugin Mingle Forum Cross-Site Scripting (1.0.28)
|
|
|
High
|
|
WordPress Plugin Mingle Forum Multiple Cross-Site Request Forgery Vulnerabilities (1.0.34)
|
|
|
High
|
|
WordPress Plugin Mingle Forum Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (1.0.32.1)
|
|
|
High
|
|
WordPress Plugin Mingle Forum Multiple Cross-Site Scripting Vulnerabilities (1.0.33)
|
|
|
High
|
|
WordPress Plugin Mingle Forum Multiple Vulnerabilities (1.0.33.3)
|
|
|
High
|
|
WordPress Plugin Mingle Forum SQL Injection and Security Bypass Vulnerabilities (1.0.26)
|
|
|
High
|
|
WordPress Plugin MiniCart SQL Injection (1.00.1)
|
|
|
High
|
|
WordPress Plugin Mini Mail Dashboard Widget 'abspath' Parameter Remote File Include (1.36)
|
|
|
High
|
|
WordPress Plugin Mini Mail Dashboard Widget Cross-Site Scripting (1.42)
|
|
|
High
|
|
WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page Cross-Site Request Forgery (2.10)
|
|
|
High
|
|
WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page Open Redirect (1.85)
|
|
|
High
|
|
WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page Security Bypass (1.87)
|
|
|
High
|
|
WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page Security Bypass (2.15)
|
|
|
High
|
|
WordPress Plugin MiniMax-Page Layout Builder Arbitrary File Upload (1.7.1)
|
|
|
High
|
|
WordPress Plugin MiniMax-Page Layout Builder Cross-Site Scripting (1.3.4)
|
|
|
High
|
|
WordPress Plugin MiniMax-Page Layout Builder Cross-Site Scripting (1.9.3)
|
|
|
High
|
|
WordPress Plugin miniOrange's Google Authenticator-WordPress Two Factor Authentication (2FA, MFA, OTP SMS and Email)-Passwordless login Cross-Site Scripting (5.4.39)
|
|
|
High
|
|
WordPress Plugin miniOrange Discord Integration Security Bypass (2.1.5)
|
|
|
High
|
|
WordPress Plugin Missed Schedule Fix WP Failed Future Posts Multiple Unspecified Vulnerabilities (2014.1231.2015.4)
|
|
|
High
|
|
WordPress Plugin Mitsol Social Post Feed Cross-Site Scripting (1.10)
|
|
|
High
|
|
WordPress Plugin MiwoEvents-Manage & Book Events Unspecified Vulnerability (1.2.0)
|
|
|
High
|
|
WordPress Plugin MiwoFTP-File & Folder Manager Arbitrary File Disclosure (1.0.4)
|
|
|
High
|
|
WordPress Plugin MiwoFTP-File & Folder Manager Arbitrary File Download (1.0.5)
|
|
|
High
|
|
WordPress Plugin MiwoFTP-File & Folder Manager Multiple Vulnerabilities (1.0.5)
|
|
|
High
|
|
WordPress Plugin mklasen's Photobox Cross-Site Scripting (1.0)
|
|
|
High
|
|
WordPress Plugin MM Duplicate 'index.php' SQL Injection (1.2)
|
|
|
High
|
|
WordPress Plugin MM Forms Community 'doajaxfileupload.php' Arbitrary File Upload (2.2.6)
|
|
|
High
|
|
WordPress Plugin MM Forms Community 'edit_details.php' SQL Injection (1.2.3)
|
|
|
High
|
|
WordPress Plugin Mobile App Native (Make a mobile app-Native iPhone & Android Mobile App FREE) Arbitrary File Upload (3.0)
|
|
|
High
|
|
WordPress Plugin Mobile Apps by Wiziapp (Native iPhone & Android mobile Apps) Multiple Unspecified Vulnerabilities (4.1.2)
|
|
|
High
|
|
WordPress Plugin Mobile blocks Security Bypass (1.0)
|
|
|
High
|
|
WordPress Plugin Mobile Booster Security Bypass (1.0)
|
|
|
High
|
|
WordPress Plugin Mobile browser color select Cross-Site Request Forgery (1.0.1)
|
|
|
High
|
|
WordPress Plugin MobileChief-Mobile Site Builder Cross-Site Scripting (1.5.7)
|
|
|
High
|
|
WordPress Plugin Mobile Device Detection by 51Degrees Cross-Site Scripting (3.1.5.2)
|
|
|
High
|
|
WordPress Plugin Mobile Domain Multiple Vulnerabilities (1.5.2)
|
|
|
High
|
|
WordPress Plugin Mobile Events Manager CSV Injection (1.4.7)
|
|
|
High
|
|
WordPress Plugin MobileView by ColorLabs & Company Cross-Site Scripting (1.0.7)
|
|
|
High
|
|
WordPress Plugin Mobiloud-Native Mobile Apps for your WordPress site (iPhone, iPad, Android) Multiple Cross-Site Scripting Vulnerabilities (2.3.7)
|
|
|
High
|
|
WordPress Plugin MobiLoud-WordPress Mobile Apps-Convert your WordPress Website to Native Mobile Apps Remote Code Execution (4.0.1)
|
|
|
High
|
|
WordPress Plugin Modern Events Calendar Arbitrary File Upload (7.11.0)
|
|
|
High
|
|
WordPress Plugin Modern Events Calendar Lite Arbitrary File Upload (7.11.0)
|
|
|
High
|
|
WordPress Plugin Modern Events Calendar Lite Cross-Site Scripting (5.22.1)
|
|
|
High
|
|
WordPress Plugin Modern Events Calendar Lite Cross-Site Scripting (5.22.2)
|
|
|
High
|
