WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
s-dev-seo
Published
2025-01-14
Title
S-DEV SEO <= 1.88 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
s2b-ai-assistant
Published
2025-11-20
Title
S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator < 1.7.9 - Authenticated (Editor+) Arbitrary File Upload
Slug
s2member
Published
2024-03-18
Title
s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions < 240315 - Information Exposure
Slug
s2member
Published
2024-04-05
Title
s2Member < 240325 - Limited Privilege Escalation
Slug
s2member
Published
2024-12-02
Title
s2Member (Pro) < 241216 - Unauthenticated Remote Code Execution
Slug
s2member
Published
2024-12-16
Title
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions < 241216 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
s2member
Published
2025-02-17
Title
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions < 250214 - Reflected Cross-Site Scripting
Slug
s2member
Published
2025-02-22
Title
s2Member Pro < 250214 - Reflected Cross-Site Scripting
Slug
s2member
Published
2025-04-04
Title
s2Member < 250424 - Administrator+ Local File Inclusion
Slug
s2member
Published
2025-10-01
Title
s2Member < 251005 - Unauthenticated Remote Code Execution
Slug
s2member
Published
2025-08-21
Title
s2Member < 250905 - Unauthenticated PHP Object Injection
Slug
s2member-pro
Published
2025-02-14
Title
s2Member Pro < 250214 - Unauthenticated PHP Object Injection
Slug
s2member-pro
Published
2025-03-18
Title
s2Member Pro < 250419 - Authenticated (Contributor+) Local File Inclusion to Remote Code Execution via Shortcode
Slug
s2member-secure-file-browser
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
s3-video
Published
2014-08-01
Title
S3 Video <= 0.97 - VideoJS Cross Site Scripting
Slug
s3-video
Published
2014-08-01
Title
S3 Video 0.982 - preview_video.php base Parameter XSS
Slug
s3-video
Published
2016-04-12
Title
S3 Video Plugin <= 0.983 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
s3bubble-amazon-s3-audio-streaming
Published
2015-07-07
Title
S3Bubble Amazon S3 Video And Audio Streaming With Analytics <= 2.0 - Arbitrary File Download
Slug
s3bubble-amazon-s3-html-5-video-with-adverts
Published
2015-07-05
Title
S3Bubble <= 0.7 - Directory Traversal leading to Arbitrary File Access
Slug
s3bubble-amazon-web-services-oembed-media-streaming-support
Published
2025-02-18
Title
S3Bubble Media Streaming <= 8.0 - Reflected XSS
Slug
sa-post-author-filter
Published
2025-01-03
Title
Kikx Simple Post Author Filter <= 1.0 - Reflected Cross-Site Scripting
Slug
saan-world-clock
Published
2023-02-21
Title
Saan World Clock <= 1.8 - Contributor+ Stored XSS
Slug
saaspricing
Published
2024-12-19
Title
SaasPricing < 1.2.5 - Contributor+ Stored XSS
Slug
sabai-discuss
Published
2022-09-26
Title
Sabai Discuss < 1.4.14 - Reflected Cross Site Scripting
Slug
sabre
Published
2014-08-01
Title
SABRE < 1.2.2 - Cross Site Scripting