WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
surveyjs
Published
2026-03-20
Title
SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting
Slug
surveys
Published
2017-05-21
Title
Surveys 1.01.8 - Authenticated SQL Injection
Slug
sv-columns-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-columns-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-forms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-forms
Published
2024-11-08
Title
SV Forms <= 2.0.05 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sv-gravity-forms-enhancer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-gravity-forms-enhancer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-media-library
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-media-library
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-posts
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-posts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-provenexpert
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-provenexpert
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-provenexpert
Published
2025-09-22
Title
SV Proven Expert <= 2.0.06 - Cross-Site Request Forgery
Slug
sv-tracking-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-tracking-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv100-companion
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv100-companion
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv100-companion
Published
2024-12-05
Title
SV100 Companion <= 2.0.02 - Missing Authorization to Unuathenticated Arbitrary Options Update
Slug
sv100-companion
Published
2025-12-05
Title
SV100 Companion <= 2.0.02 - Unauthenticated Privilege Escalation
Slug
svegliat-buttons
Published
2024-12-17
Title
SvegliaT Buttons <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
svg-block
Published
2024-06-22
Title
SVG Block < 1.1.20 - Author+ Stored XSS via SVG File Upload
Slug
svg-block
Published
2024-11-18
Title
SVG Block < 1.1.25 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload