WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
seraphinite-accelerator
Published
2024-01-08
Title
Seraphinite Accelerator < 2.20.48 - Unauthenticated Sensitive Information Exposure via Log File
Slug
seraphinite-accelerator
Published
2024-02-27
Title
Seraphinite Accelerator < 2.21 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck
Slug
seraphinite-accelerator
Published
2024-12-19
Title
Seraphinite Accelerator <= 2.22.15 (2.21.13 PRO) - Authenticated (Subscriber+) Information Exposure
Slug
seraphinite-accelerator
Published
2025-04-29
Title
Seraphinite Accelerator < 2.27.22 - Cross-Site Request Forgery to Multiple Administrative Actions
Slug
seraphinite-accelerator-ext
Published
2024-07-09
Title
Seraphinite Accelerator Premium < 2.21.13.1 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
seraphinite-accelerator-ext
Published
2024-12-19
Title
Seraphinite Accelerator <= 2.22.15 (2.21.13 PRO) - Authenticated (Subscriber+) Information Exposure
Slug
seraphinite-discount-for-woocommerce
Published
2024-12-11
Title
Seraphinite Bulk Discounts for WooCommerce < 2.4.7 - Reflected Cross-Site Scripting
Slug
seraphinite-old-slugs-mgr
Published
2024-01-09
Title
Seraphinite Alternative Slugs Manager < 1.4 - Cross-Site Request Forgery
Slug
seraphinite-post-docx-source
Published
2023-11-23
Title
Seraphinite Post .DOCX Source < 2.16.7 - Settings Update/Reset/Import via CSRF
Slug
seraphinite-post-docx-source
Published
2024-07-11
Title
Seraphinite Post .DOCX Source < 2.16.10 - Missing Authorization
Slug
seraphinite-post-docx-source
Published
2024-07-11
Title
Seraphinite Post .DOCX Source < 2.16.10 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
serial-codes-generator-and-validator
Published
2023-08-23
Title
Serial Codes Generator and Validator with WooCommerce Support < 2.4.15 - Admin+ Stored XSS
Slug
serial-codes-generator-and-validator
Published
2025-03-27
Title
Serial Codes Generator and Validator with WooCommerce Support < 2.7.8 - Cross-Site Request Forgery via [placeholder]
Slug
serial-codes-generator-and-validator
Published
2025-12-31
Title
Serial Codes Generator and Validator with WooCommerce Support < 2.8.3 - Missing Authorization
Slug
series
Published
2025-12-31
Title
Series <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
seriously-simple-podcasting
Published
2022-09-23
Title
Seriously Simple Podcasting < 2.16.1 - Arbitrary Settings Update via CSRF
Slug
seriously-simple-podcasting
Published
2022-12-21
Title
Seriously Simple Podcasting < 2.19.1 - Contributor+ Stored XSS
Slug
seriously-simple-podcasting
Published
2024-02-17
Title
Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure
Slug
seriously-simple-podcasting
Published
2024-03-26
Title
Seriously Simple Podcasting < 3.1.0 - Reflected Cross-Site Scripting
Slug
seriously-simple-podcasting
Published
2024-06-22
Title
Seriously Simple Podcasting < 3.3.0 - Admin+ Stored XSS
Slug
seriously-simple-podcasting
Published
2024-11-04
Title
Seriously Simple Podcasting < 3.6.0 - Reflected Cross-Site Scripting via add_query_arg Parameter
Slug
seriously-simple-podcasting
Published
2025-04-22
Title
Seriously Simple Podcasting < 3.10.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
seriously-simple-podcasting
Published
2025-08-05
Title
Seriously Simple Podcasting < 3.12.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
seriously-simple-podcasting
Published
2025-11-09
Title
Seriously Simple Podcasting < 3.14.0 - Missing Authorization
Slug
seriously-simple-podcasting
Published
2025-11-11
Title
Seriously Simple Podcasting < 3.14.0 - Cross-Site Request Forgery