WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
svg-vector-icon-plugin
Published
2019-08-09
Title
WP SVG Icons <= 3.2.2 - Cross-Site Request Forgery (CSRF) leading to RCE
Slug
svg-vector-icon-plugin
Published
2022-05-18
Title
WP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE)
Slug
svgator
Published
2023-11-28
Title
SVGator – Add Animated SVG Easily < 1.2.5 - API Token Update/Deletion & Import Projects via CSRF
Slug
svgator
Published
2024-05-24
Title
SVGator < 1.3.3 - Stored XSS via SVG Upload
Slug
svgmagic
Published
2024-05-24
Title
SVGMagic <= 1.1 - Stored XSS via SVG Upload
Slug
svgplus
Published
2024-11-15
Title
SVGPlus <= 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
svs-pricing-tables
Published
2024-04-29
Title
SVS Pricing Tables <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
svs-pricing-tables
Published
2024-04-29
Title
SVS Pricing Tables <= 1.0.4 - Cross-Site Request Forgery to Pricing Table Edit/Creation
Slug
svs-pricing-tables
Published
2024-04-29
Title
SVS Pricing Tables <= 1.0.4 - Cross-Site Request Forgery to Pricing Table Deletion
Slug
svt-simple
Published
2024-11-04
Title
SVT Simple <= 1.0.1 - Reflected Cross-Site Scripting
Slug
sw-contact-form
Published
2024-10-18
Title
SW Contact Form <= 1.0 - Authenticated (Subscriber+) SQL Injection
Slug
sw_ajax_woocommerce_search
Published
2020-10-30
Title
SW Ajax WooCommerce Search < 1.2.8 - Unauthenticated Reflected XSS & XFS
Slug
swatchly
Published
2023-03-30
Title
Swatchly – WooCommerce Variation Swatches for Products < 1.2.1 - Cross-Site Request Forgery
Slug
swatchly
Published
2025-04-09
Title
Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
sweepwidget
Published
2025-01-06
Title
SweepWidget Contests, Giveaways, Photo Contests, Competitions <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sweet-energy-efficiency
Published
2025-09-22
Title
Sweet Energy Efficiency < 1.0.9 - Cross-Site Request Forgery
Slug
sweet-energy-efficiency
Published
2025-12-17
Title
Sweet Energy Efficiency < 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Graph Deletion
Slug
swift-framework
Published
2024-05-03
Title
Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Slug
swift-framework
Published
2024-05-03
Title
Swift Framework <= 2.7.31 - Missing Authorization to Unauthenticated Arbitrary Content Update
Slug
swift-performance-lite
Published
2023-11-27
Title
Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration Export
Slug
swift-performance-lite
Published
2024-05-08
Title
Swift Performance Lite < 2.3.6.19 - Subscriber+ Settings Update
Slug
swift-performance-lite
Published
2024-07-05
Title
Swift Performance Lite < 2.3.6.21 - Cross-Site Request Forgery
Slug
swift-performance-lite
Published
2024-12-05
Title
Swift Performance Lite < 2.3.7.2 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
Slug
swiftninjapro-inspect-element-console-blocker
Published
2025-09-05
Title
Developer Tools Blocker <= 3.2.1 - Cross-Site Request Forgery
Slug
swiftxr-3darvr-viewer
Published
2025-04-04
Title
SwiftXR (3D/AR/VR) Viewer <= 1.0.7 - Cross-Site Request Forgery