WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
swiss-toolkit-for-wp
Published
2024-05-28
Title
Swiss Toolkit For WP < 1.0.8 - Contributor+ Authentication Bypass
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP < 1.4.1 - Missing Authorization
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP <= 1.4.2 - Missing Authorization
Slug
swoop-password-free-authentication
Published
2024-10-25
Title
1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass
Slug
sydney-toolbox
Published
2024-02-14
Title
Sydney Toolbox < 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sydney-toolbox
Published
2024-03-28
Title
Sydney Toolbox < 1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id
Slug
sydney-toolbox
Published
2024-04-05
Title
Sydney Toolbox < 1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
Slug
sydney-toolbox
Published
2024-05-01
Title
Sydney Toolbox < 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sydney-toolbox
Published
2024-05-13
Title
Sydney Toolbox < 1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget
Slug
symbiostock
Published
2023-12-05
Title
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload
Slug
sync-ecommerce-neo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sync-ecommerce-neo
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sync-feedly
Published
2025-09-26
Title
Sync Feedly <= 1.0.1 - Cross-Site Request Forgery to Sync Trigger
Slug
sync-post-with-other-site
Published
2024-04-11
Title
Sync Post With Other Site < 1.5.2 - Cross-Site Request Forgery
Slug
sync-post-with-other-site
Published
2024-08-02
Title
Sync Post With Other Site < 1.7 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update
Slug
sync-posts
Published
2025-04-10
Title
Sync Posts <= 1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
sync-qcloud-cos
Published
2022-02-17
Title
Sync iCloud COS < 2.0.1 - Admin+ Stored Cross-Site Scripting
Slug
sync-wc-google
Published
2025-04-01
Title
Bulk Product Sync < 9.0 - Cross-Site Request Forgery
Slug
sync-wc-google
Published
2025-04-08
Title
Bulk Product Sync < 9.0 - Unauthenticated SQL Injection
Slug
syncee-global-dropshipping
Published
2022-11-28
Title
Syncee - Global Dropshipping < 1.0.10 - Authentication Token Disclosure
Slug
syncfields
Published
2025-01-03
Title
SyncFields <= 2.1 - Reflected Cross-Site Scripting
Slug
syndicate-out
Published
2025-04-29
Title
Syndicate Out <= 0.9 - Unauthenticated Stored Cross-Site Scripting
Slug
syndication-links
Published
2015-05-13
Title
Syndication Links <= 1.0.2 - DOM Cross-Site Scripting (XSS)
Slug
syntaxhighlighter
Published
2014-08-01
Title
SyntaxHighlighter Evolved <= 3.1.9 - Unspecified Cross-Site Scripting (XSS)
Slug
syntaxhighlighter
Published
2014-08-01
Title
SyntaxHighlighter Evolved 3.1.5 - clipboard.swf Unspecified XSS