WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
surbma-gdpr-proof-google-analytics
Published
2023-03-17
Title
Surbma | GDPR Proof Cookie Consent & Notice Bar < 17.6.0 - Contributor+ Stored Cross-Site Scripting
Slug
surbma-gdpr-proof-google-analytics
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
surbma-infusionsoft-shortcode
Published
2026-06-26
Title
Surbma | Infusionsoft Shortcode < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
surbma-magyar-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
surbma-magyar-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
surbma-minicrm-shortcode
Published
2025-11-20
Title
Surbma | MiniCRM Shortcode < 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surbma-premium-wp
Published
2025-01-07
Title
Surbma | Premium WP < 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surbma-recent-comments-shortcode
Published
2025-08-15
Title
Surbma | Recent Comments Shortcode < 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surbma-salesautopilot-shortcode
Published
2024-12-11
Title
Surbma | SalesAutopilot Shortcode <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surbma-yoast-breadcrumb-shortcode
Published
2026-07-02
Title
Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surecart
Published
2023-08-29
Title
SureCart < 2.5.1 - Admin+ Stored XSS
Slug
surecart
Published
2024-08-28
Title
SureCart < 2.29.4 - Reflected Cross-Site Scripting
Slug
surecart
Published
2026-03-26
Title
SureCart < 4.0.3 - Missing Authorization
Slug
surecart
Published
2026-06-26
Title
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.3.3 - Reflected Cross-Site Scripting
Slug
surecart
Published
2026-06-25
Title
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
surecart
Published
2026-07-10
Title
SureCart < 4.3.0 - Unauthenticated Linked WordPress Account Takeover via Forged customer.updated Webhook
Slug
surecart
Published
2026-05-20
Title
SureCart < 4.2.1 - Authenticated (Admin+) SQL Injection
Slug
surecart
Published
2026-08-06
Title
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.6.3 - Missing Authorization
Slug
surecart
Published
2026-09-04
Title
SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover
Slug
surecart
Published
2026-09-04
Title
SureCart < 4.7.0 - Unauthenticated Account Creation with Automatic Login
Slug
suredash
Published
2025-07-31
Title
SureDash < 1.2.0 - Authenticated (Subscriber+) Information Disclosure
Slug
suredash
Published
2025-07-28
Title
SureDash < 1.1.0 - Subscriber+ Privilege Escalation
Slug
suredash
Published
2026-06-17
Title
SureDash – Community, Courses & Member Dashboard < 1.8.1 - Authenticated (Subscriber+) SQL Injection
Slug
suredash
Published
2026-07-08
Title
SureDash – Community, Courses & Member Dashboard < 1.8.1 - Authenticated (SureDash User+) Arbitrary File Deletion
Slug
suredash
Published
2026-07-23
Title
SureDash < 1.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes