WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
stops-core-theme-and-plugin-updates
Published
2019-03-28
Title
Stops Core Theme And Plugin Updates < 8.0.5 - Insufficient Restrictions on Option Changes
Slug
stops-core-theme-and-plugin-updates
Published
2026-05-27
Title
Easy Updates Manager < 9.0.21 - Reflected Cross-Site Scripting via 'paged' Parameter
Slug
stopwords-for-comments
Published
2026-01-13
Title
Stopwords for comments <= 1.1 - Missing Authorization to Cross-Site Request Forgery
Slug
store-credit-for-woocommerce
Published
2025-01-06
Title
Store credit / Gift cards for woocommerce < 1.0.49.47 - Reflected Cross-Site Scripting
Slug
store-locator
Published
2014-08-01
Title
Store Locator < 2.12 - Cross-Site Request Forgery
Slug
store-locator
Published
2015-02-19
Title
WordPress Store Locator 3.33.1 - SQL Injection
Slug
store-locator
Published
2014-11-05
Title
WordPress Store Locator 2.3-3.11 - SQL Injection
Slug
store-locator
Published
2023-05-24
Title
Store Locator <= 3.98.7 - Settings Update via CSRF
Slug
store-locator
Published
2024-12-19
Title
Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion
Slug
store-locator
Published
2025-01-16
Title
Store Locator for WordPress with Google Maps – LotsOfLocales <= 3.98.10 - Unauthenticated Local File Inclusion
Slug
store-locator-le
Published
2014-08-01
Title
Google Maps via Store Locator - Multiple Vulnerabilities
Slug
store-locator-le
Published
2014-08-01
Title
store-locator-le - SQL Injection
Slug
store-locator-le
Published
2015-01-17
Title
Store Locator Plus 4.2.23 - Email Injection
Slug
store-locator-le
Published
2016-08-05
Title
Store Locator Plus for WordPress <= 4.5.10 - Authenticated Cross-Site Scripting (XSS)
Slug
store-locator-le
Published
2021-04-26
Title
Store Locator Plus < 5.9 - Unauthenticated Stored XSS
Slug
store-locator-le
Published
2021-04-26
Title
Store Locator Plus < 5.9 - Authenticated Privilege Escalation
Slug
store-locator-le
Published
2024-08-12
Title
Store Locator Plus <= 2311.17.01 - Unauthenticated Sensitive Information Exposure
Slug
store-locator-widget
Published
2025-02-18
Title
Store Locator Widget < 2025r2 - Contributor+ Stored XSS
Slug
store-locator-widget
Published
2025-03-27
Title
Store Locator Widget < 2025r3r2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
store-manager-connector
Published
2025-05-23
Title
eMagicOne Store Manager for WooCommerce < 1.3.0 - Unauthenticated Arbitrary File Read
Slug
store-manager-connector
Published
2025-05-23
Title
eMagicOne Store Manager for WooCommerce < 1.3.0 - Unauthenticated Arbitrary File Deletion
Slug
store-manager-connector
Published
2025-05-23
Title
eMagicOne Store Manager for WooCommerce < 1.3.0 - Unauthenticated Arbitrary File Upload via set_file()
Slug
store-manager-connector
Published
2025-05-23
Title
eMagicOne Store Manager for WooCommerce < 1.3.0 - Unauthenticated Arbitrary File Upload via set_image()
Slug
store-manager-connector
Published
2026-05-07
Title
eMagicOne Store Manager for WooCommerce <= 1.3.2 - Unauthenticated SQL Injection
Slug
storecontrl-wp-connection
Published
2025-04-17
Title
StoreContrl Woocommerce < 4.1.4 - Unauthenticated Arbitrary File Download