WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
surbma-font-awesome
Published
2024-11-08
Title
Surbma | Font Awesome < 3.1 - Contributor+ Stored XSS
Slug
surbma-gdpr-proof-google-analytics
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
surbma-gdpr-proof-google-analytics
Published
2023-03-17
Title
Surbma | GDPR Proof Cookie Consent & Notice Bar < 17.6.0 - Contributor+ Stored Cross-Site Scripting
Slug
surbma-gdpr-proof-google-analytics
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
surbma-magyar-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
surbma-magyar-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
surbma-minicrm-shortcode
Published
2025-11-20
Title
Surbma | MiniCRM Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surbma-premium-wp
Published
2025-01-07
Title
Surbma | Premium WP < 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surbma-recent-comments-shortcode
Published
2025-08-15
Title
Surbma | Recent Comments Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surbma-salesautopilot-shortcode
Published
2024-12-11
Title
Surbma | SalesAutopilot Shortcode <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surecart
Published
2023-08-29
Title
SureCart < 2.5.1 - Admin+ Stored XSS
Slug
surecart
Published
2024-08-28
Title
SureCart < 2.29.4 - Reflected Cross-Site Scripting
Slug
suredash
Published
2025-07-31
Title
SureDash < 1.2.0 - Authenticated (Subscriber+) Information Disclosure
Slug
suredash
Published
2025-07-28
Title
SureDash < 1.1.0 - Subscriber+ Privilege Escalation
Slug
sureforms
Published
2025-01-07
Title
SureForms – Drag and Drop Form Builder for WordPress < 1.2.3 - Missing Authorization to Unauthenticated Protected Post Disclosure
Slug
sureforms
Published
2025-04-09
Title
SureForms < 1.4.4 - Contributor+ Settings Update
Slug
sureforms
Published
2025-04-11
Title
SureForms < 1.4.4 - Admin+ Stored XSS
Slug
sureforms
Published
2025-04-11
Title
SureForms < 1.4.4 - Admin+ Stored XSS
Slug
sureforms
Published
2025-07-11
Title
SureForms < 1.7.2 - Reflected XSS
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated Arbitrary File Deletion
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated PHP Object Injection
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated PHP Object Injection
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated PHP Object Injection
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated PHP Object Injection
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated PHP Object Injection