WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sr-wp-minify-html
Published
2026-03-20
Title
SR WP Minify HTML <= 2.1 - Cross-Site Request Forgery to Settings Update
Slug
srbtranslatin
Published
2018-01-11
Title
SrbTransLatin <= 1.46 - Stored XSS & CSRF
Slug
srbtranslatin
Published
2023-06-19
Title
Multiple Plugins - Cross-Site Scripting From Third-party Library
Slug
srbtranslatin
Published
2025-04-01
Title
Srbtranslatin <= 3.2.0 - Unauthenticated Sensitive Information Exposure
Slug
srs-player
Published
2025-02-24
Title
Live Streaming Video Player – by SRS Player <= 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
srs-simple-hits-counter
Published
2020-07-10
Title
SRS Simple Hits Counter 1.0.3 - 1.0.4 - Unauthenticated Blind SQL Injection
Slug
srs-simple-hits-counter
Published
2023-01-19
Title
SRS Simple Hits Counter < 1.1.1 - Settings Update via CSRF
Slug
ss-downloads
Published
2014-08-01
Title
SS Downloads 1.4.4.1 - services/getfile.php file Parameter XSS
Slug
ss-downloads
Published
2014-08-01
Title
SS Downloads 1.4.4.1 - ss-downloads.php Multiple Variables XSS
Slug
ss-downloads
Published
2014-08-01
Title
SS Downloads 1.4.4.1 - templates/download.php Multiple Parameters Reflected XSS
Slug
ss-downloads
Published
2014-08-01
Title
SS Downloads 1.4.4.1 - templates/register.php Multiple Parameter Reflected XSS
Slug
ss-downloads
Published
2014-08-01
Title
SS Downloads 1.4.4.1 - templates/emailsent.php Multiple Parameter Reflected XSS
Slug
ss-downloads
Published
2014-08-01
Title
SS Downloads 1.4.4.1 - templates/emailform.php Multiple Parameter Reflected XSS
Slug
ss-downloads
Published
2014-08-01
Title
SS Downloads 1.4.4.1 - templates/email&nameform.php Multiple Parameter Reflected XSS
Slug
ss-font-awesome-icon
Published
2025-09-05
Title
SS Font Awesome Icon <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ssl-atlas-free-ssl-certificate-https-redirect
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ssl-wireless-sms-notification
Published
2025-01-03
Title
SSL Wireless SMS Notification < 3.6.0 - Unauthenticated SQL Injection
Slug
ssl-wireless-sms-notification
Published
2024-12-19
Title
SSL Wireless SMS Notification < 3.7.0 - Unauthenticated Privilege Escalation
Slug
ssl-zen
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ssl-zen
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ssl-zen
Published
2024-04-17
Title
SSL Zen <= 4.5.3 - Unauthenticated Private Keys Access
Slug
ssp-debugging
Published
2025-12-04
Title
SSP Debug <= 1.0.0 - Unauthenticated Sensitive Information Exposure
Slug
ssquiz
Published
2014-08-01
Title
SS Quiz - Multiple Unspecified Vulnerabilities
Slug
ssquiz
Published
2025-02-21
Title
SS Quiz <= 2.0.5 - Unauthenticated PHP Object Injection
Slug
ssv-events
Published
2024-10-15
Title
SSV Events <= 3.2.7 - Unauthenticated Local File Inclusion