WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sv-tracking-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv100-companion
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv100-companion
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv100-companion
Published
2024-12-05
Title
SV100 Companion <= 2.0.02 - Missing Authorization to Unuathenticated Arbitrary Options Update
Slug
svegliat-buttons
Published
2024-12-17
Title
SvegliaT Buttons <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
svg-block
Published
2024-06-22
Title
SVG Block < 1.1.20 - Author+ Stored XSS via SVG File Upload
Slug
svg-block
Published
2024-11-18
Title
SVG Block < 1.1.25 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
Slug
svg-captcha
Published
2024-10-21
Title
SVG Captcha <= 1.0.11 - Reflected Cross-Site Scripting
Slug
svg-complete
Published
2024-09-30
Title
SVG Complete <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
svg-flags-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
svg-flags-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
svg-map-by-saedi
Published
2026-01-06
Title
SVG Map Plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
Slug
svg-shortcode
Published
2024-12-12
Title
SVG Shortcode <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Slug
svg-support
Published
2022-01-03
Title
SVG Support < 2.3.20 - Admin+ Stored Cross-Site Scripting
Slug
svg-support
Published
2022-09-05
Title
SVG Support < 2.5 - Author+ Stored Cross-Site Scripting
Slug
svg-support
Published
2022-11-16
Title
SVG Support 2.5-2.5.1 - Author+ Stored XSS
Slug
svg-support
Published
2024-07-17
Title
SVG Support < 2.5.8 - Author+ Cross-Site Scripting via SVG
Slug
svg-support
Published
2025-02-21
Title
SVG Support < 2.5.11 - Author+ Stored XSS via SVG File Upload
Slug
svg-support
Published
2025-02-24
Title
SVG Support < 2.5.9 - Stored Cross-Site Scripting via Vulnerability Dependency
Slug
svg-uploads-support
Published
2024-01-23
Title
SVG Uploads Support <= 2.1.1 - Author+ Stored XSS via SVG
Slug
svg-vector-icon-plugin
Published
2019-08-09
Title
WP SVG Icons <= 3.2.2 - Cross-Site Request Forgery (CSRF) leading to RCE
Slug
svg-vector-icon-plugin
Published
2022-05-18
Title
WP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE)
Slug
svgator
Published
2023-11-28
Title
SVGator – Add Animated SVG Easily < 1.2.5 - API Token Update/Deletion & Import Projects via CSRF
Slug
svgator
Published
2024-05-24
Title
SVGator < 1.3.3 - Stored XSS via SVG Upload
Slug
svgmagic
Published
2024-05-24
Title
SVGMagic <= 1.1 - Stored XSS via SVG Upload