WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sell-digital-downloads
Published
2025-01-07
Title
Sell Digital Downloads <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sell-downloads
Published
2014-12-29
Title
Sell Downloads 1.0.1 - Arbitrary File Disclosure
Slug
sell-downloads
Published
2015-07-10
Title
Sell Downloads < 1.0.8 - Insufficient Restrictions when Brute-Force Purchase IDs
Slug
sell-downloads
Published
2025-12-30
Title
Sell Downloads <= 1.1.12 - Missing Authorization
Slug
sell-media
Published
2020-08-14
Title
Sell Media < 2.4.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
sell-media
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
sell-media
Published
2025-01-06
Title
Sell Media <= 2.5.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sell-media-file
Published
2024-11-08
Title
Sell Media File with Stripe <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sell-photo
Published
2020-08-17
Title
Sell Photo < 1.0.6 - Authenticated Stored Cross-Site Scripting
Slug
sell-with-razorpay
Published
2025-01-16
Title
Sale with Razorpay <= 1.0 - Reflected Cross-Site Scripting
Slug
selling-commander-connector
Published
2025-06-19
Title
Selling Commander for WooCommerce <= 1.2.46 - Unauthenticated Privilege Escalation
Slug
sellkit
Published
2024-03-28
Title
SellKit < 1.8.3 - Authenticated (Subscriber+) Arbitrary File Download
Slug
sellkit
Published
2024-06-05
Title
SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
sello-channelconnector
Published
2025-08-20
Title
Sello ChannelConnector <= 1.6.3 - Reflected Cross-Site Scripting
Slug
sellsy
Published
2025-01-06
Title
Sellsy < 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sem-wysiwyg
Published
2014-08-01
Title
SEM WYSIWYG - Arbitrary File Upload
Slug
sema-api
Published
2022-04-13
Title
SEMA API < 4.02 - Unauthenticated SQLi
Slug
sema-api
Published
2025-01-08
Title
SEMA API < 5.30 - Reflected Cross-Site Scripting via catid Parameter
Slug
semalt
Published
2023-04-18
Title
Semalt Blocker <= 1.1.3 - Admin+ Stored XSS
Slug
semantic-shortcode
Published
2024-11-08
Title
Semantic Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
semrush-contentshake
Published
2025-12-15
Title
Semrush Content Toolkit <= 1.1.32 - Cross-Site Request Forgery
Slug
send-booking-invites-to-friends
Published
2025-01-16
Title
Send to a Friend Addon <= 1.4.1 - Reflected Cross-Site Scripting
Slug
send-e-mail
Published
2025-03-31
Title
Send E-mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
send-email-only-on-reply-to-my-comment
Published
2024-07-09
Title
Send email only on Reply to My Comment <= 1.0.6 - Reflected XSS
Slug
send-email-only-on-reply-to-my-comment
Published
2024-07-09
Title
Send email only on Reply to My Comment <= 1.0.6 - Stored XSS via CSRF