WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
super-transactional-emails-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
super-transactional-emails-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
super-video-player
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
super-video-player
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
superb-slideshow-gallery
Published
2023-10-30
Title
Superb slideshow gallery < 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
superb-social-share-and-follow-buttons
Published
2023-04-06
Title
Superb Social Media Share Buttons and Follow Buttons < 1.1.5 - CSRF
Slug
superfast-mailgun-newsletter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
superfly-menu
Published
2024-04-16
Title
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
superfly-menu
Published
2024-08-01
Title
WordPress Menu Plugin — Superfly Responsive Menu < 5.0.30 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
superior-faq
Published
2023-01-13
Title
Superior FAQ <= 1.0.2 - CSRF
Slug
superlogoshowcase-wp
Published
2020-10-21
Title
SuperStoreFinder Plugins - Unauthenticated Arbitrary File Upload
Slug
superlogoshowcase-wp
Published
2025-12-31
Title
Super Logos Showcase <= 2.8 - Reflected Cross-Site Scripting
Slug
supermalink
Published
2025-07-28
Title
Supermalink <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
supersaas-appointment-scheduling
Published
2024-07-01
Title
SuperSaaS – online appointment scheduling < 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
supersaas-appointment-scheduling
Published
2025-02-10
Title
SuperSaaS – online appointment scheduling < 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via after Parameter
Slug
superstorefinder-wp
Published
2020-10-21
Title
SuperStoreFinder Plugins - Unauthenticated Arbitrary File Upload
Slug
superstorefinder-wp
Published
2021-03-08
Title
SuperStoreFinder & SuperInteractiveMaps - Unauthenticated SQL Injections
Slug
superstorefinder-wp
Published
2023-09-18
Title
Super Store Finder < 6.9.4 - Unauthenticated Email Creation/Sending
Slug
superstorefinder-wp
Published
2024-08-28
Title
Super Store Finder < 6.9.8 - Authenticated (Subscriber+) SQL Injection
Slug
superstorefinder-wp
Published
2024-08-28
Title
Super Store Finder < 6.9.8 - Unauthenticated Stored Cross-Site Scripting
Slug
superstorefinder-wp
Published
2024-08-28
Title
Super Store Finder < 6.9.8 - Unauthenticated SQL Injection
Slug
superstorefinder-wp
Published
2025-02-08
Title
Super Store Finder < 7.1 - Unauthenticated SQL Injection to Stored Cross-Site Scripting
Slug
superstorefinder-wp
Published
2025-04-17
Title
Super Store Finder < 7.5 - Unauthenticated SQL Injection
Slug
superstorefinder-wp
Published
2025-07-07
Title
Super Store Finder < 6.8 - Unauthenticated Local File Inclusion
Slug
superstorefinder-wp
Published
2025-07-31
Title
Super Store Finder < 7.6 - Unauthenticated SQL Injection