WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
scw-bus-seat-reservation
Published
2025-05-22
Title
Bus Ticket Booking with Seat Reservation for WooCommerce <= 1.7 - Unauthenticated SQL Injection
Slug
scw-seat-reservation
Published
2025-05-01
Title
Advance Seat Reservation Management for WooCommerce < 3.4 - Unauthenticated SQL Injection
Slug
scw-seat-reservation
Published
2025-08-26
Title
Advance Seat Reservation Management for WooCommerce <= 3.1 - Unauthenticated SQL Injection
Slug
se-html5-album-audio-player
Published
2015-06-06
Title
SE HTML5 Album Audio Player <= 1.1.0 - Local File Include
Slug
seamless-donations
Published
2022-05-26
Title
Seamless Donations < 5.1.9 - Arbitrary Settings Update via CSRF
Slug
search-analytics
Published
2023-04-28
Title
WP Search Analytics < 1.4.6 - Admin+ Stored XSS
Slug
search-analytics
Published
2023-08-28
Title
WP Search Analytics < 1.4.8 - Reflected XSS
Slug
search-analytics
Published
2024-08-09
Title
WP Search Analytics < 1.4.10 - Missing Authorization
Slug
search-analytics
Published
2024-09-30
Title
WP Search Analytics < 1.4.11 - Reflected Cross-Site Scripting
Slug
search-and-replace
Published
2024-05-23
Title
Search & Replace < 3.2.2 - Admin+ SQL injection
Slug
search-and-replace
Published
2024-05-23
Title
Search & Replace < 3.2.2 - Administrator+ SQL injection
Slug
search-and-replace
Published
2024-07-11
Title
Search & Replace < 3.2.3 - Unauthenticated PHP Object Injection
Slug
search-and-share
Published
2014-08-01
Title
search-&-share 0.9.3 - SearchAndShare.php Direct Request Path Disclosure
Slug
search-and-share
Published
2014-08-01
Title
search-&-share <= 0.9.3 - XSS in ZeroClipboard
Slug
search-autocomplete
Published
2011-09-01
Title
SearchAutocomplete <= 1.0.8 - Unauthenticated SQL Injection
Slug
search-cloud-one
Published
2025-09-05
Title
Search Cloud One <= 2.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
search-console
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
search-everything
Published
2014-05-06
Title
Search Everything 8.1.0 - options.php Unspecified CSRF
Slug
search-everything
Published
2014-08-01
Title
Search Everything 7.0.2 - search-everything.php s Parameter SQL Injection
Slug
search-everything
Published
2017-03-20
Title
Search Everything < 8.1.7 - SQL Injection
Slug
search-everything
Published
2016-06-10
Title
Search Everything < 8.1.6 - SQL Injection
Slug
search-exclude
Published
2019-09-07
Title
Search Exclude < 1.2.4 - Arbitrary Settings Change
Slug
search-exclude
Published
2022-08-22
Title
Search Exclude < 1.2.7 - Author+ Stored Cross-Site Scripting
Slug
search-exclude
Published
2025-05-06
Title
Search Exclude < 2.5.0 - Missing Authorization to Unauthenticated Plugin Settings Modification
Slug
search-exclude
Published
2025-11-24
Title
Search Exclude < 2.5.8 – Missing Authorization to Authenticated (Contributor+) Search Settings Modification via REST API