WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
stop-user-enumeration
Published
2013-10-25
Title
Stop User Enumeration 1.2.4 - POST Request Protection Bypass
Slug
stop-user-enumeration
Published
2016-04-01
Title
Stop User Enumeration <= 1.3.3 - Username Enumeration Bypass
Slug
stop-user-enumeration
Published
2017-01-04
Title
Stop User Enumeration <= 1.3.4 - Username Enumeration Bypasses
Slug
stop-user-enumeration
Published
2017-01-15
Title
Stop User Enumeration 1.3.5-1.3.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
stop-user-enumeration
Published
2017-07-25
Title
Stop User Enumeration <= 1.3.8 - REST API Bypass
Slug
stop-user-enumeration
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
stop-user-enumeration
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
stop-user-enumeration
Published
2025-06-26
Title
Stop User Enumeration < 1.7.3 - Protection Bypass
Slug
stop-wp-emails-going-to-spam
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
stopbadbots
Published
2021-08-06
Title
Block and Stop Bad Bots < 6.60 - Authenticated SQL Injections
Slug
stopbadbots
Published
2021-08-25
Title
Block and Stop Bad Bots < 6.62 - Reflected Cross-Site Scripting
Slug
stopbadbots
Published
2021-11-15
Title
StopBadBots < 6.67 - Unauthenticated SQL Injection
Slug
stopbadbots
Published
2022-03-08
Title
WP Block and Stop Bad Bots < 6.88 - Unauthenticated SQLi
Slug
stopbadbots
Published
2022-03-16
Title
WP Block and Stop Bad Bots < 6.930 - Unauthenticated SQLi
Slug
stopbadbots
Published
2022-11-21
Title
StopBadBots < 7.24 - Subscriber+ Arbitrary Plugin Installation
Slug
stopbadbots
Published
2023-05-09
Title
StopBadBots < 7.32 - Admin+ Stored XSS
Slug
stopbadbots
Published
2024-05-29
Title
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection < 10.24 - Missing Authorization to Information Expsoure
Slug
stopbadbots
Published
2025-08-27
Title
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection < 11.59 - Insufficient Authorization to Unauthenticated Blocklist Bypass
Slug
stops-core-theme-and-plugin-updates
Published
2019-03-28
Title
Stops Core Theme And Plugin Updates < 8.0.5 - Insufficient Restrictions on Option Changes
Slug
stopwords-for-comments
Published
2026-01-13
Title
Stopwords for comments <= 1.1 - Missing Authorization to Cross-Site Request Forgery
Slug
store-credit-for-woocommerce
Published
2025-01-06
Title
Store credit / Gift cards for woocommerce < 1.0.49.47 - Reflected Cross-Site Scripting
Slug
store-locator
Published
2014-08-01
Title
Store Locator < 2.12 - Cross-Site Request Forgery
Slug
store-locator
Published
2015-02-19
Title
WordPress Store Locator 3.33.1 - SQL Injection
Slug
store-locator
Published
2014-11-05
Title
WordPress Store Locator 2.3-3.11 - SQL Injection
Slug
store-locator
Published
2023-05-24
Title
Store Locator <= 3.98.7 - Settings Update via CSRF