WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shapepress-dsgvo
Published
2026-01-22
Title
WP DSGVO Tools (GDPR) < 3.1.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lw_content_block' Shortcode
Slug
shapepress-dsgvo
Published
2026-03-23
Title
WP DSGVO Tools (GDPR) < 3.1.39 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users
Slug
sharable-password-protected-posts
Published
2025-06-13
Title
Sharable Password Protected Posts < 1.1.1 - Unauthenticated Password Protect Post Access
Slug
share-and-follow
Published
2012-05-15
Title
Share And Follow <= 1.80.3 - Cross Site Scripting
Slug
share-button
Published
2024-10-18
Title
WordPress Social Share Buttons < 1.20 - Reflected Cross-Site Scripting
Slug
share-buttons
Published
2025-01-06
Title
Social Share Buttons for WordPress <= 2.7 - Admin+ Stored XSS
Slug
share-buttons
Published
2025-01-06
Title
Social Share Buttons for WordPress <= 2.7 - Unauthenticated Image Upload & Path Traversal
Slug
share-on-diaspora
Published
2017-08-23
Title
Share On Diaspora < 0.7.2 - XSS
Slug
share-one-drive
Published
2021-12-13
Title
Share One Drive < 1.15.3 - Reflected Cross-Site Scripting
Slug
share-print-pdf-woocommerce
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
share-print-pdf-woocommerce
Published
2025-12-23
Title
Share, Print and PDF Products for WooCommerce <= 3.1.2 - Missing Authorization
Slug
share-this
Published
2014-08-01
Title
ShareThis 7.0.3 - Setting Manipulation CSRF
Slug
share-this-image
Published
2017-12-18
Title
Share This Image <= 1.03 - Cross-Site Scripting (XSS)
Slug
share-this-image
Published
2019-04-30
Title
Share This Image <= 1.19 - Stored XSS
Slug
share-this-image
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
share-this-image
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
share-this-image
Published
2024-04-29
Title
Share This Image < 1.99 - Open Redirect
Slug
share-this-image
Published
2024-08-30
Title
Share This Image < 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
Slug
share-this-image
Published
2024-09-04
Title
Share This Image < 2.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode
Slug
share-this-image
Published
2024-09-16
Title
Share This Image < 2.04 - Open Redirect via link Parameter
Slug
share-this-image
Published
2024-09-25
Title
Share This Image < 2.02 - Reflected Cross-Site Scripting
Slug
share-this-image
Published
2026-01-25
Title
Share This Image < 2.10 - Missing Authorization
Slug
share-to-google-classroom
Published
2025-11-10
Title
Share to Google Classroom <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via share_to_google Shortcode
Slug
share-woocommerce-email
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
shareaholic
Published
2014-08-01
Title
Shareaholic - Unspecified CSRF