WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sv-gravity-forms-enhancer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-gravity-forms-enhancer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-media-library
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-media-library
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-posts
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-posts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-provenexpert
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-provenexpert
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-provenexpert
Published
2025-09-22
Title
SV Proven Expert <= 2.0.06 - Cross-Site Request Forgery
Slug
sv-tracking-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-tracking-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv100-companion
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv100-companion
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv100-companion
Published
2024-12-05
Title
SV100 Companion <= 2.0.02 - Missing Authorization to Unuathenticated Arbitrary Options Update
Slug
sv100-companion
Published
2025-12-05
Title
SV100 Companion <= 2.0.02 - Unauthenticated Privilege Escalation
Slug
svegliat-buttons
Published
2024-12-17
Title
SvegliaT Buttons <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
svg-block
Published
2024-06-22
Title
SVG Block < 1.1.20 - Author+ Stored XSS via SVG File Upload
Slug
svg-block
Published
2024-11-18
Title
SVG Block < 1.1.25 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
Slug
svg-captcha
Published
2024-10-21
Title
SVG Captcha <= 1.0.11 - Reflected Cross-Site Scripting
Slug
svg-complete
Published
2024-09-30
Title
SVG Complete <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
svg-flags-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
svg-flags-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
svg-map-by-saedi
Published
2026-01-06
Title
SVG Map Plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
Slug
svg-shortcode
Published
2024-12-12
Title
SVG Shortcode <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Slug
svg-support
Published
2022-01-03
Title
SVG Support < 2.3.20 - Admin+ Stored Cross-Site Scripting