WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
stratum
Published
2025-12-27
Title
Stratum Widgets for Elementor < 1.6.2 - Missing Authorization
Slug
stray-quotes
Published
2025-01-21
Title
Stray Random Quotes <= 1.9.9 - Reflected XSS
Slug
stray-quotes
Published
2025-01-16
Title
Stray Random Quotes <= 1.9.9 - Reflected Cross-Site Scripting
Slug
streak-crm-for-gmail-integration-for-contact-form-7
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
streak-crm-for-gmail-integration-for-contact-form-7
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
stream
Published
2016-05-31
Title
Stream <= 3.0.5 - Unauthenticated Events Export
Slug
stream
Published
2021-10-18
Title
Stream < 3.8.2 - Admin+ SQL Injection
Slug
stream
Published
2023-01-16
Title
Stream < 3.9.2 - Subscriber+ Alert Creation
Slug
stream
Published
2023-04-18
Title
Stream < 3.9.3 - CSRF
Slug
stream
Published
2023-04-25
Title
Stream < 3.9.3 - Missing Authorization via load_alerts_settings
Slug
stream
Published
2024-09-12
Title
Stream < 4.0.2 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
stream
Published
2025-02-14
Title
Stream < 4.1.0 - Authenticated (Admin+) Server-Side Request Forgery
Slug
stream-status-for-twitch
Published
2024-11-20
Title
StreamWeasels Online Status Bar < 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stream-video-player
Published
2014-08-01
Title
Stream Video Player <= 1.4.0 - Setting Manipulation CSRF
Slug
streamcast
Published
2021-09-20
Title
StreamCast < 2.1.1 - Contributor+ Stored Cross-Site Scripting
Slug
streamcast
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
streamcast
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
streamcast
Published
2024-08-07
Title
StreamCast < 2.2.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
streamtube-core
Published
2025-11-29
Title
StreamTube Core < 4.79 - Unauthenticated Arbitrary User Password Change
Slug
streamweasels-kick-integration
Published
2024-10-28
Title
SW Kick Integration - Blocks and Shortcodes for Embedding Kick Streams < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-kick-embed Shortcode
Slug
streamweasels-kick-integration
Published
2025-06-13
Title
StreamWeasels Kick Integration < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via status-classic-offline-text Parameter
Slug
streamweasels-kick-integration
Published
2025-07-28
Title
StreamWeasels Kick Integration < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
streamweasels-kick-integration
Published
2025-09-05
Title
StreamWeasels Kick Integration < 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via vodsChannel Parameter
Slug
streamweasels-twitch-integration
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
streamweasels-twitch-integration
Published
2024-03-25
Title
StreamWeasels Twitch Integration < 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting