WordPress Plugin Vulnerabilities | Page 147 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2026-09-04

Title

SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover

Slug

Published

2026-09-04

Title

SureCart < 4.7.0 - Unauthenticated Account Creation with Automatic Login

Slug

Published

2026-09-24

Title

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.7.3 - Authenticated (Shop Worker+) Privilege Escalation

Slug

Published

2026-10-12

Title

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.9.4 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-10-19

Title

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.9.6 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-10-13

Title

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2026-10-12

Title

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.9.4 - Authenticated (Custom Role+) PHP Object Injection

Slug

Published

2026-10-15

Title

SureCart < 4.9.5 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Comment

Slug

Published

2026-10-20

Title

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.9.6 - Missing Authorization

Slug

Published

2026-10-19

Title

SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter

Slug

Published

2026-10-20

Title

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2026-10-30

Title

SureCart < 4.9.5 - Unauthenticated Stored Cross-Site Scripting via 'manual-payment-instructions' Attribute of sc-order-manual-instructions in Comments

Slug

Published

2026-10-30

Title

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.9.6 - Unauthenticated Account Takeover

Slug

Published

2025-07-31

Title

SureDash < 1.2.0 - Authenticated (Subscriber+) Information Disclosure

Slug

Published

2025-07-28

Title

SureDash < 1.1.0 - Subscriber+ Privilege Escalation

Slug

Published

2026-06-17

Title

SureDash – Community, Courses & Member Dashboard < 1.8.1 - Authenticated (Subscriber+) SQL Injection

Slug

Published

2026-07-08

Title

SureDash – Community, Courses & Member Dashboard < 1.8.1 - Authenticated (SureDash User+) Arbitrary File Deletion

Slug

Published

2026-07-23

Title

SureDash < 1.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

Slug

Published

2026-08-10

Title

SureDash – Community, Courses & Member Dashboard < 1.10.2 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-08-15

Title

SureDash < 1.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute

Slug

Published

2026-10-22

Title

SureDash – Community, Courses & Member Dashboard < 1.12.3 - Missing Authorization

Slug

Published

2026-10-09

Title

SureDash < 1.12.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content

Slug

Published

2026-10-22

Title

SureDash – Community, Courses & Member Dashboard < 1.12.3 - Missing Authorization

Slug

Published

2026-10-15

Title

SureDash < 1.12.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter

Slug

Published

2026-10-22

Title

SureDash – Community, Courses & Member Dashboard < 1.12.3 - Missing Authorization