WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
school-management
Published
2025-08-12
Title
School Management <= 1.93.1 (02-07-2025) - Authenticated (Student+) Arbitrary File Upload
Slug
school-management-pro
Published
2022-05-18
Title
The School Management < 9.9.7 - Unauthenticated RCE via REST api
Slug
school-management-pro
Published
2024-04-29
Title
School Management Pro <= 10.3.4 - Authenticated (School Admin+) SQL Injection
Slug
school-management-system
Published
2023-04-19
Title
The School Management < 4.2 - Admin+ SQLi
Slug
schreikasten
Published
2014-08-01
Title
Schreikasten 0.14.13 - wp-admin/admin-ajax.php Multiple Parameter XSS
Slug
schreikasten
Published
2021-10-07
Title
Schreikasten <= 0.14.18 - Author+ SQL Injections
Slug
scoreboard-for-html5-game-lite
Published
2026-03-20
Title
Scoreboard for HTML5 Games Lite < 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
scorerender
Published
2014-08-01
Title
scorerender <= 0.3.4 - XSS in ZeroClipboard
Slug
scormcloud
Published
2014-08-01
Title
SCORM Cloud < 1.0.7 - SQL Injection
Slug
scottcart
Published
2024-10-25
Title
ScottCart <= 1.1 - Unauthenticated Remote Code Execution
Slug
scoutnet-kalender
Published
2019-12-10
Title
Scoutnet Kalender <= 1.1.0 - Stored Cross-Site Scripting (XSS)
Slug
scratch-win-giveaways-for-website-facebook
Published
2024-12-02
Title
Scratch & Win – Giveaways and Contests < 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
scratch-win-giveaways-for-website-facebook
Published
2025-01-03
Title
Scratch & Win – Giveaways and Contests < 2.8.0 - Cross-Site Request Forgery via reset_installation Function
Slug
scratch-win-giveaways-for-website-facebook
Published
2025-02-17
Title
Scratch & Win – Giveaways and Contests < 2.9.0 - Missing Authorization to Unauthenticated Coupon Creation
Slug
scratchblocks-for-wp
Published
2026-05-11
Title
scratchblocks for WP <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'element' Shortcode Attribute
Slug
screenshot-machine-shortcode
Published
2025-01-17
Title
JSM Screenshot Machine Shortcode < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
screets-lcx
Published
2019-06-26
Title
Live Chat Unlimited <= 2.8.3 - Stored Cross-Site Scripting (XSS)
Slug
scribble-maps
Published
2021-08-13
Title
Scribble Maps <= 1.2 - Reflected Cross-Site Scripting
Slug
script-compressor
Published
2025-04-09
Title
Script Compressor <= 1.7.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
script-planner
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
script-planner
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
scriptless-social-sharing
Published
2023-02-09
Title
Scriptless Social Sharing < 3.2.2 - Contributor+ Stored XSS
Slug
scriptless-social-sharing
Published
2025-04-16
Title
Scriptless Social Sharing < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
scripts-n-styles
Published
2023-05-18
Title
Scripts n Styles < 3.5.8 - Admin+ Stored XSS
Slug
scripts-organizer
Published
2022-09-05
Title
Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload