WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
scroll-top-advanced
Published
2025-01-16
Title
Scroll Top Advanced <= 2.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
scroll-triggered-animations
Published
2023-11-09
Title
Animator < 3.0.11 - Missing Authorization to Plugin Settings Update
Slug
scroll-triggered-animations
Published
2024-10-15
Title
Animator < 3.0.16 - Reflected Cross-Site Scripting
Slug
scroll-triggered-animations
Published
2025-07-16
Title
Animator < 3.0.17 - Cross-Site Request Forgery
Slug
scrollbar-by-webxapp
Published
2024-10-24
Title
Scrollbar by webxapp – Best vertical/horizontal scrollbars plugin <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
scrollbar-customizer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
scroller
Published
2025-12-10
Title
Scroller <= 2.0.2 - Missing Authorization
Slug
scrollrevealjs-effects
Published
2022-04-25
Title
ScrollReveal.js Effects <= 1.2 - Admin+ Stored Cross-Site Scripting
Slug
scrollsequence
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
scrollsequence
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
scrollsequence
Published
2024-03-16
Title
Scrollsequence < 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
scrollto-bottom
Published
2024-07-08
Title
ScrollTo Bottom <= 1.1.1 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
scrollto-top
Published
2024-07-08
Title
ScrollTo Top <= 1.2.2 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
scrollup
Published
2024-11-08
Title
scrollup <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
scss-library
Published
2025-04-24
Title
SCSS-Library <= 0.4.1 - Cross-Site Request Forgery
Slug
scss-wp-editor
Published
2025-04-01
Title
SCSS WP Editor <= 1.1.8 - Cross-Site Request Forgery
Slug
scw-bus-seat-reservation
Published
2025-05-22
Title
Bus Ticket Booking with Seat Reservation for WooCommerce <= 1.7 - Unauthenticated SQL Injection
Slug
scw-seat-reservation
Published
2025-05-01
Title
Advance Seat Reservation Management for WooCommerce < 3.4 - Unauthenticated SQL Injection
Slug
scw-seat-reservation
Published
2025-08-26
Title
Advance Seat Reservation Management for WooCommerce <= 3.1 - Unauthenticated SQL Injection
Slug
se-html5-album-audio-player
Published
2015-06-06
Title
SE HTML5 Album Audio Player <= 1.1.0 - Local File Include
Slug
seamless-donations
Published
2022-05-26
Title
Seamless Donations < 5.1.9 - Arbitrary Settings Update via CSRF
Slug
search-analytics
Published
2023-04-28
Title
WP Search Analytics < 1.4.6 - Admin+ Stored XSS
Slug
search-analytics
Published
2023-08-28
Title
WP Search Analytics < 1.4.8 - Reflected XSS
Slug
search-analytics
Published
2024-08-09
Title
WP Search Analytics < 1.4.10 - Missing Authorization
Slug
search-analytics
Published
2024-09-30
Title
WP Search Analytics < 1.4.11 - Reflected Cross-Site Scripting