WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
searchie
Published
2025-01-08
Title
Searchie <= 1.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchiq
Published
2022-03-28
Title
SearchIQ < 3.9 - Unauthenticated Stored XSS
Slug
searchiq
Published
2023-11-16
Title
SearchIQ < 4.5 - Unauthenticated Sensitive Information Disclosure
Slug
searchiq
Published
2024-04-05
Title
SearchIQ < 4.6 - Unauthenticated Sensitive Information Exposure
Slug
searchiq
Published
2024-12-03
Title
SearchIQ – The Search Solution < 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchiq
Published
2024-12-19
Title
SearchIQ < 4.7 - Cross-Site Request Forgery
Slug
searchiq
Published
2025-03-04
Title
SearchIQ – The Search Solution < 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchiq
Published
2025-03-27
Title
SearchIQ < 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchpro
Published
2024-07-10
Title
BerqWP < 1.7.6 - Unauthenticated Server-Side Request Forgery
Slug
searchpro
Published
2024-08-07
Title
BerqWP < 1.7.7 - Unauthenticated Arbitrary File Uplaod
Slug
searchpro
Published
2024-10-01
Title
BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript < 2.1.2 - Reflected Cross-Site Scripting
Slug
searchpro
Published
2025-07-31
Title
BerqWP < 2.2.44 - Unauthenticated Arbitrary File Upload
Slug
searchpro
Published
2025-09-09
Title
BerqWP < 2.2.54 - Missing Authorization
Slug
searchterms-tagging-2
Published
2015-07-08
Title
SEO SearchTerms Tagging 2 <= 1.535 - XSS & Authenticated SQL Injection
Slug
searchwiz
Published
2026-01-13
Title
SearchWiz <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
Slug
searchwp
Published
2022-10-24
Title
SearchWP < 4.2.6 - Subscriber+ Settings Update
Slug
searchwp-live-ajax-search
Published
2022-07-25
Title
SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure
Slug
searchwp-live-ajax-search
Published
2022-09-15
Title
SearchWP Live Ajax Search < 1.6.3 - Unauthenticated Local File Inclusion
Slug
seatgeek-affiliate-tickets
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
seatreg
Published
2025-01-30
Title
SeatReg < 1.56.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
secondary-title
Published
2023-07-05
Title
Secondary Title < 2.1.0 - Contributor+ Stored Cross-Site Scripting
Slug
section-slider
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
section-slider
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
section-slider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
section-widget
Published
2025-05-02
Title
Section Widget <= 3.3.1 - Reflected Cross-Site Scripting