WordPress HTML2WP plugin <= 1.0.0 - Authenticated Arbitrary File Deletion vulnerability

Authenticated Arbitrary File Deletion vulnerability discovered by Daniel Ruf in WordPress HTML2WP plugin versions = 1.0.0. Solution Deactivate and delete. This plugin has been closed as of May 4, 2022 and is not available for download. This closure is temporary, pending a full review...

WordPress Social Tape plugin <= 1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS discovered by Ashish Upsham in WordPress Social Tape plugin versions = 1.0. Solution This plugin has been closed as of June 15, 2021 and is not available for download. Reason: Security Issue...

WordPress Mimetic Books plugin <= 0.2.13 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Vikas Srivastava in WordPress Mimetic Books plugin versions = 0.2.13. Solution This plugin has been closed as of July 19, 2021 and is not available for download. This closure is temporary, pending a full review...

WordPress Contact Form 7 Datepicker plugin <= 2.6.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by WordFence in WordPress Contact Form 7 Datepicker plugin versions = 2.6.0. Solution This plugin has been closed as of April 1, 2020 and is not available for download. Reason: Security Issue...

WordPress Media File Manager plugin <= 1.4.2 - Directory Traversal vulnerability

Directory Traversal vulnerability found by boombyte in WordPress Media File Manager plugin versions = 1.4.2. Solution WordPress Media File Manager plugin was closed on 2018 November 8 and is no longer available for download. Please deactivate and uninstall plugin as soon as possible...

Mikiurl Wordpress Eklentisi <= 2.0 - Multiple CSRF

Plugin is still affected and has been closed...

WP Guestmap <= 1.8 - Multiple XSS

Plugin is still affected and has been closed...

Malware Finder <= 1.1 - Cross-Site Scripting (XSS)

Plugin is still affected and has been closed...

Conversador <= 2.61 - Cross-Site Scripting (XSS)

The last time it was checked the plugin was still affected and had been closed...

Ooorl <= 1.0.0 - XSS

Plugin is still affected and has been closed...