WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
swiftninjapro-inspect-element-console-blocker
Published
2025-09-05
Title
Developer Tools Blocker <= 3.2.1 - Cross-Site Request Forgery
Slug
swiftxr-3darvr-viewer
Published
2025-04-04
Title
SwiftXR (3D/AR/VR) Viewer <= 1.0.7 - Cross-Site Request Forgery
Slug
swifty-bar
Published
2023-10-02
Title
Swifty Bar, sticky bar by WPGens < 1.2.11 - Admin+ Stored XSS
Slug
swifty-page-manager
Published
2022-12-14
Title
Swifty Page Manager <= 3.0.1 - Page Creation/Deletion via CSRF
Slug
swifty-page-manager
Published
2022-12-14
Title
Swifty Page Manager <= 3.0.1 - Admin+ Stored XSS
Slug
swipehq-payment-gateway-woocommerce
Published
2014-05-28
Title
WooCommerce Swipe <= 2.7.1 - Unauthenticated Reflected XSS
Slug
swipehq-payment-gateway-wp-e-commerce
Published
2014-04-25
Title
WP e-Commerce Swipe <= 3.1.0 - Multiple XSS Issues
Slug
swiss-toolkit-for-wp
Published
2024-05-28
Title
Swiss Toolkit For WP < 1.0.8 - Contributor+ Authentication Bypass
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP < 1.4.1 - Missing Authorization
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP <= 1.4.3 - Missing Authorization
Slug
swiss-toolkit-for-wp
Published
2026-07-10
Title
Swiss Toolkit For WP <= 1.4.6 - Authenticated (Author+) Arbitrary File Upload via upload_extension_files()
Slug
switch-cta-box
Published
2026-04-21
Title
Switch CTA Box <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
swoop-password-free-authentication
Published
2024-10-25
Title
1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass
Slug
swp-portfolio
Published
2026-02-05
Title
Portfolio Builder <= 1.2.5 - Unauthenticated Local File Inclusion
Slug
sydney-toolbox
Published
2024-02-14
Title
Sydney Toolbox < 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sydney-toolbox
Published
2024-03-28
Title
Sydney Toolbox < 1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id
Slug
sydney-toolbox
Published
2024-04-05
Title
Sydney Toolbox < 1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
Slug
sydney-toolbox
Published
2024-05-01
Title
Sydney Toolbox < 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sydney-toolbox
Published
2024-05-13
Title
Sydney Toolbox < 1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget
Slug
symbiostock
Published
2023-12-05
Title
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload
Slug
sync-basalam
Published
2026-07-12
Title
sync-basalam < 1.9.2 - Cross-Site Request Forgery
Slug
sync-ecommerce-neo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sync-ecommerce-neo
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sync-feedly
Published
2025-09-26
Title
Sync Feedly <= 1.0.1 - Cross-Site Request Forgery to Sync Trigger
Slug
sync-post-with-other-site
Published
2024-04-11
Title
Sync Post With Other Site < 1.5.2 - Cross-Site Request Forgery