WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
seo-redirection
Published
2022-10-25
Title
SEO Redirection Plugin < 9.1 - Multiple CSRF
Slug
seo-search-permalink
Published
2025-09-26
Title
SEO Search Permalink <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
seo-simple-pack
Published
2024-06-27
Title
SEO SIMPLE PACK < 3.3.0 - Information Exposure
Slug
seo-site-auditor-agency
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
seo-site-auditor-agency
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
seo-slider
Published
2023-11-02
Title
SEO Slider < 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
seo-slider
Published
2025-12-31
Title
SEO Slider <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
seo-spy-google-wordpress-plugin
Published
2014-08-01
Title
seo-spy-google - ofc_upload_image.php Arbitrary File Upload
Slug
seo-title-tag
Published
2024-03-29
Title
SEO Title Tag <= 3.5.9 - Reflected Cross-Site Scripting
Slug
seo-watcher
Published
2014-08-01
Title
SEO Watcher - Open Flash Chart Arbitrary File Creation
Slug
seo-wizard
Published
2021-06-30
Title
SEO Wizard <= 4.0.2 - Unauthorised robots.txt & .htaccess Edit via CSRF
Slug
seo-wizard
Published
2021-06-30
Title
SEO Wizard <= 4.0.2 - Unauthorised AJAX Calls
Slug
seo-wordpress
Published
2024-05-20
Title
Praison SEO WordPress < 4.0.16 - Author+ Stored XSS
Slug
seofy-core
Published
2025-06-03
Title
Seofy Core <= 1.4.5 - Unauthenticated Local File Inclusion
Slug
seolinkrotator
Published
2014-08-01
Title
Seo Link Rotator - pusher.php title Parameter Reflected XSS
Slug
seopress-for-mainwp
Published
2025-07-25
Title
SEOPress for MainWP < 1.5 - Unauthenticated Local File Inclusion
Slug
seos-contact-form
Published
2023-12-19
Title
Seos Contact Form <= 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
seosamba-webmasters
Published
2022-10-10
Title
SeoSamba for WordPress Webmasters < 1.0.6 - Access Key Update via CSRF
Slug
sepa-girocode
Published
2025-06-05
Title
SEPA Girocode <= 0.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sequel
Published
2025-04-02
Title
Sequel <= 1.0.11 - Reflected Cross-Site Scripting
Slug
sequential-order-numbers-for-woocommerce
Published
2025-04-04
Title
Sequential Order Numbers for WooCommerce < 3.6.3 - Cross-Site Request Forgery
Slug
seraphinite-accelerator
Published
2023-10-27
Title
Seraphinite Accelerator < 2.2.29 - Authenticated Arbitrary Redirect
Slug
seraphinite-accelerator
Published
2023-10-27
Title
Seraphinite Accelerator < 2.2.29 - Reflected XSS
Slug
seraphinite-accelerator
Published
2023-11-06
Title
Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import
Slug
seraphinite-accelerator
Published
2023-12-01
Title
Seraphinite Accelerator < 2.20.29 - Reflected Cross-Site Scripting via rt