WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
swifty-bar
Published
2023-10-02
Title
Swifty Bar, sticky bar by WPGens < 1.2.11 - Admin+ Stored XSS
Slug
swifty-page-manager
Published
2022-12-14
Title
Swifty Page Manager <= 3.0.1 - Page Creation/Deletion via CSRF
Slug
swifty-page-manager
Published
2022-12-14
Title
Swifty Page Manager <= 3.0.1 - Admin+ Stored XSS
Slug
swipehq-payment-gateway-woocommerce
Published
2014-05-28
Title
WooCommerce Swipe <= 2.7.1 - Unauthenticated Reflected XSS
Slug
swipehq-payment-gateway-wp-e-commerce
Published
2014-04-25
Title
WP e-Commerce Swipe <= 3.1.0 - Multiple XSS Issues
Slug
swiss-toolkit-for-wp
Published
2024-05-28
Title
Swiss Toolkit For WP < 1.0.8 - Contributor+ Authentication Bypass
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP < 1.4.1 - Missing Authorization
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP <= 1.4.3 - Missing Authorization
Slug
swoop-password-free-authentication
Published
2024-10-25
Title
1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass
Slug
swp-portfolio
Published
2026-02-05
Title
Portfolio Builder <= 1.2.5 - Unauthenticated Local File Inclusion
Slug
sydney-toolbox
Published
2024-02-14
Title
Sydney Toolbox < 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sydney-toolbox
Published
2024-03-28
Title
Sydney Toolbox < 1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id
Slug
sydney-toolbox
Published
2024-04-05
Title
Sydney Toolbox < 1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
Slug
sydney-toolbox
Published
2024-05-01
Title
Sydney Toolbox < 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sydney-toolbox
Published
2024-05-13
Title
Sydney Toolbox < 1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget
Slug
symbiostock
Published
2023-12-05
Title
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload
Slug
sync-ecommerce-neo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sync-ecommerce-neo
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sync-feedly
Published
2025-09-26
Title
Sync Feedly <= 1.0.1 - Cross-Site Request Forgery to Sync Trigger
Slug
sync-post-with-other-site
Published
2024-04-11
Title
Sync Post With Other Site < 1.5.2 - Cross-Site Request Forgery
Slug
sync-post-with-other-site
Published
2024-08-02
Title
Sync Post With Other Site < 1.7 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update
Slug
sync-posts
Published
2025-04-10
Title
Sync Posts <= 1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
sync-qcloud-cos
Published
2022-02-17
Title
Sync iCloud COS < 2.0.1 - Admin+ Stored Cross-Site Scripting
Slug
sync-wc-google
Published
2025-04-01
Title
Bulk Product Sync < 9.0 - Cross-Site Request Forgery
Slug
sync-wc-google
Published
2025-04-08
Title
Bulk Product Sync < 9.0 - Unauthenticated SQL Injection