WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
stock-ticker
Published
2023-08-11
Title
Stock Ticker < 3.23.4 - Reflected XSS
Slug
stock-ticker
Published
2023-12-27
Title
Stock Ticker < 3.23.5 - Authenticated (Contributor+) Stored Cross-Site Scritping
Slug
stock-ticker
Published
2024-06-28
Title
Stock Ticker < 3.24.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock_ticker Shortcode
Slug
stock-tools
Published
2025-11-20
Title
Stock Tools <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stockdio-historical-chart
Published
2021-01-20
Title
Stockdio Historical Chart < 2.8.1 - Reflected Cross-Site Scripting (XSS)
Slug
stockdio-historical-chart
Published
2025-01-30
Title
Stockdio Historical Chart < 2.8.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stockholm-core
Published
2024-05-07
Title
Stockholm Core < 2.4.2 - Reflected Cross-Site Scripting
Slug
stockholm-core
Published
2024-05-07
Title
Stockholm Core < 2.4.2 - Authenticated (Contributor+) Local File Inclusion
Slug
stockholm-core
Published
2025-10-18
Title
Stockholm Core <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stockholm-core
Published
2025-10-18
Title
Stockholm Core <= 2.4.6 - Authenticated (Contributor+) Local File Inclusion
Slug
stockie-extra
Published
2025-10-21
Title
Stockie Extra < 1.2.12 - Cross-Site Request Forgery
Slug
stockie-extra
Published
2025-10-21
Title
Stockie Extra < 1.2.12 - Unauthenticated Arbitrary Shortcode Execution
Slug
stockists-manager
Published
2022-07-22
Title
Stockists Manager for Woocommerce <= 1.0.2.1 - Stored Cross-Site Scripting via CSRF
Slug
stonehenge-em-osm
Published
2025-09-22
Title
Events Manager – OpenStreetMaps <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stop-comment-spam
Published
2025-01-16
Title
Stop Comment Spam < 0.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
stop-referrer-spam
Published
2023-11-13
Title
Stop Referrer Spam < 1.3.1 - CSRF
Slug
stop-registration-spam
Published
2024-12-16
Title
Stop Registration Spam < 1.24 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
stop-registration-spam
Published
2025-04-10
Title
Stop Registration Spam <= 1.24 - Reflected Cross-Site Scripting
Slug
stop-spam-comments
Published
2022-08-08
Title
Stop Spam Comments <= 0.2.1.2 - Access Token Bypass
Slug
stop-spammer-registrations-plugin
Published
2021-04-08
Title
Stop Spammers < 2021.9 - Reflected Cross-Site Scripting (XSS)
Slug
stop-spammer-registrations-plugin
Published
2021-08-09
Title
Stop Spammers Security < 2021.18 - Authenticated Stored XSS
Slug
stop-spammer-registrations-plugin
Published
2022-12-05
Title
Stop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection
Slug
stop-spammer-registrations-plugin
Published
2023-05-15
Title
Stop Spammers Security < 2023 - Reflected XSS
Slug
stop-spammer-registrations-plugin
Published
2023-05-15
Title
Stop Spammers Security < 2023 - Admin+ Stored XSS
Slug
stop-spammer-registrations-plugin
Published
2024-05-03
Title
Stop Spammers Security | Block Spam Users, Comments, Forms < 2024.5 - Cross-Site Request Forgery (CSRF) via sfs_process