WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sg-security
Published
2023-01-13
Title
SiteGround Security < 1.3.1 - Admin+ SQLi
Slug
sg-security
Published
2024-07-19
Title
Security Optimizer – The All-In-One Protection Plugin < 1.5.1 - Missing Authorization via hide_notice()
Slug
sg-security
Published
2025-11-30
Title
SiteGround Security <= 1.5.8 - Missing Authorization
Slug
sh-contextual-help
Published
2025-11-03
Title
SH Contextual Help <= 3.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
sh-email-alert
Published
2025-03-25
Title
SH Email Alert <= 1.0 - Reflected Cross-Site Scripting
Slug
sh-slideshow
Published
2014-08-01
Title
SH Slideshow <= 3.1.4 - SQL Injection
Slug
sh-slideshow
Published
2024-11-01
Title
SH Slideshow <= 4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
shabbos-and-yom-tov
Published
2025-01-16
Title
Shabbos and Yom Tov <= 1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
shalom-world-media-gallery
Published
2025-02-02
Title
SW Plus <= 2.1 - Reflected Cross-Site Scripting
Slug
shantz-wordpress-qotd
Published
2021-07-19
Title
Shantz WordPress QOTD <= 1.2.2 - Arbitrary Setting Update via CSRF
Slug
shapepress-dsgvo
Published
2019-08-27
Title
Shapepress DSGVO < 2.2.19 - Authenticated Reflected XSS
Slug
shapepress-dsgvo
Published
2021-09-24
Title
WP DSGVO Tools (GDPR) < 3.1.24 - Unauthenticated Plugin's Settings Update to Stored Cross-Site Scripting
Slug
shapepress-dsgvo
Published
2021-11-02
Title
WP DSGVO Tools (GDPR) < 3.1.24 - Unauthenticated Arbitrary Post Deletion
Slug
shapepress-dsgvo
Published
2024-05-22
Title
WP DSGVO Tools (GDPR) < 3.1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
sharable-password-protected-posts
Published
2025-06-13
Title
Sharable Password Protected Posts < 1.1.1 - Unauthenticated Password Protect Post Access
Slug
share-and-follow
Published
2012-05-15
Title
Share And Follow <= 1.80.3 - Cross Site Scripting
Slug
share-button
Published
2024-10-18
Title
WordPress Social Share Buttons < 1.20 - Reflected Cross-Site Scripting
Slug
share-buttons
Published
2025-01-06
Title
Social Share Buttons for WordPress <= 2.7 - Admin+ Stored XSS
Slug
share-buttons
Published
2025-01-06
Title
Social Share Buttons for WordPress <= 2.7 - Unauthenticated Image Upload & Path Traversal
Slug
share-on-diaspora
Published
2017-08-23
Title
Share On Diaspora < 0.7.2 - XSS
Slug
share-one-drive
Published
2021-12-13
Title
Share One Drive < 1.15.3 - Reflected Cross-Site Scripting
Slug
share-print-pdf-woocommerce
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
share-print-pdf-woocommerce
Published
2025-12-23
Title
Share, Print and PDF Products for WooCommerce <= 3.1.2 - Missing Authorization
Slug
share-this
Published
2014-08-01
Title
ShareThis 7.0.3 - Setting Manipulation CSRF
Slug
share-this-image
Published
2017-12-18
Title
Share This Image <= 1.03 - Cross-Site Scripting (XSS)