WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
stockholm-core
Published
2025-10-18
Title
Stockholm Core <= 2.4.6 - Authenticated (Contributor+) Local File Inclusion
Slug
stockie-extra
Published
2025-10-21
Title
Stockie Extra < 1.2.12 - Cross-Site Request Forgery
Slug
stockie-extra
Published
2025-10-21
Title
Stockie Extra < 1.2.12 - Unauthenticated Arbitrary Shortcode Execution
Slug
stockists-manager
Published
2022-07-22
Title
Stockists Manager for Woocommerce <= 1.0.2.1 - Stored Cross-Site Scripting via CSRF
Slug
stonehenge-em-osm
Published
2025-09-22
Title
Events Manager – OpenStreetMaps <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stop-comment-spam
Published
2025-01-16
Title
Stop Comment Spam < 0.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
stop-referrer-spam
Published
2023-11-13
Title
Stop Referrer Spam < 1.3.1 - CSRF
Slug
stop-registration-spam
Published
2024-12-16
Title
Stop Registration Spam < 1.24 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
stop-registration-spam
Published
2025-04-10
Title
Stop Registration Spam <= 1.24 - Reflected Cross-Site Scripting
Slug
stop-spam-comments
Published
2022-08-08
Title
Stop Spam Comments <= 0.2.1.2 - Access Token Bypass
Slug
stop-spammer-registrations-plugin
Published
2021-04-08
Title
Stop Spammers < 2021.9 - Reflected Cross-Site Scripting (XSS)
Slug
stop-spammer-registrations-plugin
Published
2021-08-09
Title
Stop Spammers Security < 2021.18 - Authenticated Stored XSS
Slug
stop-spammer-registrations-plugin
Published
2022-12-05
Title
Stop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection
Slug
stop-spammer-registrations-plugin
Published
2023-05-15
Title
Stop Spammers Security < 2023 - Admin+ Stored XSS
Slug
stop-spammer-registrations-plugin
Published
2023-05-15
Title
Stop Spammers Security < 2023 - Reflected XSS
Slug
stop-spammer-registrations-plugin
Published
2024-05-03
Title
Stop Spammers Security | Block Spam Users, Comments, Forms < 2024.5 - Cross-Site Request Forgery (CSRF) via sfs_process
Slug
stop-spammer-registrations-plugin
Published
2025-06-05
Title
Anti-Spam: Spam Protection < 2025 - Multiple Administrative Actions via CSRF
Slug
stop-spammer-registrations-plugin
Published
2026-01-27
Title
Stop Spammers Classic < 2026.2 - Cross-Site Request Forgery via Email Allowlist
Slug
stop-user-enumeration
Published
2013-10-25
Title
Stop User Enumeration 1.2.4 - POST Request Protection Bypass
Slug
stop-user-enumeration
Published
2016-04-01
Title
Stop User Enumeration <= 1.3.3 - Username Enumeration Bypass
Slug
stop-user-enumeration
Published
2017-01-04
Title
Stop User Enumeration <= 1.3.4 - Username Enumeration Bypasses
Slug
stop-user-enumeration
Published
2017-01-15
Title
Stop User Enumeration 1.3.5-1.3.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
stop-user-enumeration
Published
2017-07-25
Title
Stop User Enumeration <= 1.3.8 - REST API Bypass
Slug
stop-user-enumeration
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
stop-user-enumeration
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting