WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
subscriptiondna
Published
2025-01-24
Title
Subscription DNA < 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
subscriptions-for-woocommerce
Published
2026-03-13
Title
Subscriptions for WooCommerce < 1.9.0 - Missing Authorization
Slug
subscriptions-for-woocommerce
Published
2026-03-17
Title
Subscriptions for WooCommerce < 1.9.3 - Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation
Slug
subscriptions-for-woocommerce
Published
2026-06-25
Title
Subscriptions for WooCommerce < 1.9.6 - Missing Authorization
Slug
subscriptions-for-woocommerce
Published
2026-07-29
Title
Subscriptions for WooCommerce < 2.0.1 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configuration AJAX Action
Slug
subscriptions-for-woocommerce
Published
2026-07-31
Title
Subscriptions for WooCommerce < 2.0.1 - Authenticated (Contributor+) Privilege Escalation via '_wps_plan_user_role' Membership Plan Meta
Slug
subscriptions-for-woocommerce
Published
2026-08-03
Title
Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation
Slug
subscriptions-for-woocommerce
Published
2026-08-03
Title
Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR
Slug
subscriptions-for-woocommerce
Published
2026-08-03
Title
Subscriptions for WooCommerce < 2.0.1 - Payment Bypass via Attacker-Supplied PayPal Capture Token
Slug
subscriptions-memberships-for-paypal
Published
2021-10-11
Title
Multiple Plugins from WPPlugin - Reflected Cross-Site Scripting via page Parameter
Slug
subscriptions-memberships-for-paypal
Published
2025-02-25
Title
Subscriptions & Memberships for PayPal < 1.1.7 - Cross-Site Request Forgery to Arbitrary Post Deletion
Slug
subscriptions-memberships-for-paypal
Published
2025-11-21
Title
Subscriptions & Memberships for PayPal < 1.1.8 - Unauthenticated Fake Payment Creation
Slug
subscriptions-memberships-for-paypal
Published
2025-11-28
Title
Subscriptions & Memberships for PayPal < 1.1.8 - Missing Authorization
Slug
subscriptions-renewal-reminders
Published
2025-06-05
Title
Subscription Renewal Reminders for WooCommerce < 1.4.2 - Notice Dismissal via CSRF
Slug
subway
Published
2024-04-29
Title
Subway – Private Site Option <= 2.1.4 - Improper Access Control to Sensitive Information Exposure via REST API
Slug
sucuri-scanner
Published
2022-09-14
Title
Sucuri Security < 1.8.34 - Event log Entry Creation via CSRF
Slug
sudoku-shortcode
Published
2026-02-10
Title
Sudoku Shortcode <= 1.0.0 - Contributor+ Stored XSS
Slug
sudoku-shortcode
Published
2026-02-10
Title
Sudoku Shortcode <= 1.0.0 - Contributor+ Stored XSS via 'background' Shortcode Attribute
Slug
suevafree-essential-kit
Published
2024-11-20
Title
SuevaFree Essential Kit < 1.1.4 - Contributor+ Stored XSS
Slug
sugar-calendar-lite
Published
2024-11-19
Title
Sugar Calendar (Lite) < 3.4.0 - Reflected Cross-Site Scripting
Slug
sugar-calendar-lite
Published
2026-01-05
Title
Sugar Calendar (Lite) < 3.10.0 - Missing Authorization
Slug
suggestion-toolkit
Published
2026-01-10
Title
Suggestion Toolkit <= 5.0 - Missing Authorization
Slug
suki-sites-import
Published
2024-10-17
Title
Suki Sites Import <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
sully
Published
2024-06-22
Title
SULly < 4.3.1 - Admin+ Stored XSS
Slug
sully
Published
2024-06-22
Title
SULly < 4.3.1 - Reflected XSS