WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
super-progressive-web-apps
Published
2023-11-22
Title
Super Progressive Web Apps < 2.2.22 - Missing Authorization
Slug
super-progressive-web-apps
Published
2026-08-04
Title
Super Progressive Web Apps < 2.2.44 - Authenticated (Administrator+) Stored Cross-Site Scripting via Offline Message Setting
Slug
super-refer-a-friend
Published
2014-08-01
Title
super-refer-a-friend - Full Path Disclosure
Slug
super-seo-content-cloner
Published
2025-01-31
Title
Content Cloner < 1.0.2 - Missing Authorization
Slug
super-simple-contact-form
Published
2026-02-13
Title
Super Simple Contact Form <= 1.6.2 - Reflected Cross-Site Scripting via 'sscf_name' Parameter
Slug
super-simple-subscriptions
Published
2025-03-24
Title
Super Simple Subscriptions <= 1.1.0 - Authenticated (Administrator+) SQL Injection
Slug
super-slider
Published
2025-03-18
Title
SUPER RESPONSIVE SLIDER <= 1.4 - Reflected Cross-Site Scripting
Slug
super-social-content-locker-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
super-socializer
Published
2018-03-03
Title
Super Socializer < 7.11 - Authentication Bypass
Slug
super-socializer
Published
2022-03-15
Title
Super Socializer < 7.13.30 - Reflected Cross-Site Scripting
Slug
super-socializer
Published
2022-12-23
Title
Super Socializer < 7.13.44 - Contributor+ Stored XSS
Slug
super-socializer
Published
2023-05-29
Title
Super Socializer < 7.13.52 - Reflected XSS
Slug
super-socializer
Published
2023-06-19
Title
Super Socializer < 1.13.53 - Contributor+ Stored XSS
Slug
super-socializer
Published
2023-09-05
Title
Super Socializer < 7.13.55 - Missing Authorization
Slug
super-socializer
Published
2024-03-25
Title
Super Socializer < 7.13.64 - Editor+ Stored XSS
Slug
super-socializer
Published
2024-11-05
Title
Social Share, Social Login and Social Comments Plugin – Super Socializer < 7.14 - Authentication Bypass
Slug
super-socializer
Published
2025-01-20
Title
Social Share, Social Login and Social Comments Plugin – Super Socializer < 7.14.1 - Unauthenticated Limited SQL Injection via 'SuperSocializerKey'
Slug
super-socializer
Published
2026-07-07
Title
Social Share, Social Login and Social Comments Plugin <= 7.14.5 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter
Slug
super-socializer
Published
2026-07-28
Title
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.14.5 - Unauthenticated Stored Cross-Site Scripting
Slug
super-socializer
Published
2026-07-28
Title
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.14.5 - Missing Authorization
Slug
super-stage-wp
Published
2026-02-06
Title
Super Stage WP < 1.0.2 - Unauthenticated PHP Object Injection
Slug
super-static-cache
Published
2025-03-24
Title
Super Static Cache <= 3.3.5 - Cross-Site Request Forgery
Slug
super-testimonial
Published
2022-10-20
Title
Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scripting
Slug
super-testimonial
Published
2022-10-27
Title
Testimonials < 2.7 - Admin+ Stored Cross-Site Scripting
Slug
super-testimonial
Published
2023-10-16
Title
Super Testimonials < 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode