WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sweet-energy-efficiency
Published
2025-09-22
Title
Sweet Energy Efficiency < 1.0.9 - Cross-Site Request Forgery
Slug
sweet-energy-efficiency
Published
2025-12-17
Title
Sweet Energy Efficiency < 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Graph Deletion
Slug
sweetdate-core
Published
2026-05-26
Title
SweetDate Core < 1.1.5 - Reflected Cross-Site Scripting
Slug
swift-framework
Published
2024-05-03
Title
Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Slug
swift-framework
Published
2024-05-03
Title
Swift Framework <= 2.7.31 - Missing Authorization to Unauthenticated Arbitrary Content Update
Slug
swift-performance-lite
Published
2023-11-27
Title
Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration Export
Slug
swift-performance-lite
Published
2024-05-08
Title
Swift Performance Lite < 2.3.6.19 - Subscriber+ Settings Update
Slug
swift-performance-lite
Published
2024-07-05
Title
Swift Performance Lite < 2.3.6.21 - Cross-Site Request Forgery
Slug
swift-performance-lite
Published
2024-12-05
Title
Swift Performance Lite < 2.3.7.2 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
Slug
swiftninjapro-inspect-element-console-blocker
Published
2025-09-05
Title
Developer Tools Blocker <= 3.2.1 - Cross-Site Request Forgery
Slug
swiftxr-3darvr-viewer
Published
2025-04-04
Title
SwiftXR (3D/AR/VR) Viewer <= 1.0.7 - Cross-Site Request Forgery
Slug
swifty-bar
Published
2023-10-02
Title
Swifty Bar, sticky bar by WPGens < 1.2.11 - Admin+ Stored XSS
Slug
swifty-page-manager
Published
2022-12-14
Title
Swifty Page Manager <= 3.0.1 - Page Creation/Deletion via CSRF
Slug
swifty-page-manager
Published
2022-12-14
Title
Swifty Page Manager <= 3.0.1 - Admin+ Stored XSS
Slug
swipehq-payment-gateway-woocommerce
Published
2014-05-28
Title
WooCommerce Swipe <= 2.7.1 - Unauthenticated Reflected XSS
Slug
swipehq-payment-gateway-wp-e-commerce
Published
2014-04-25
Title
WP e-Commerce Swipe <= 3.1.0 - Multiple XSS Issues
Slug
swiss-toolkit-for-wp
Published
2024-05-28
Title
Swiss Toolkit For WP < 1.0.8 - Contributor+ Authentication Bypass
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP < 1.4.1 - Missing Authorization
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP <= 1.4.3 - Missing Authorization
Slug
swiss-toolkit-for-wp
Published
2026-07-10
Title
Swiss Toolkit For WP <= 1.4.6 - Authenticated (Author+) Arbitrary File Upload via upload_extension_files()
Slug
switch-cta-box
Published
2026-04-21
Title
Switch CTA Box <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
swoop-password-free-authentication
Published
2024-10-25
Title
1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass
Slug
swp-portfolio
Published
2026-02-05
Title
Portfolio Builder <= 1.2.5 - Unauthenticated Local File Inclusion
Slug
sydney-toolbox
Published
2024-02-14
Title
Sydney Toolbox < 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sydney-toolbox
Published
2024-03-28
Title
Sydney Toolbox < 1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id