WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shariff
Published
2024-02-05
Title
Shariff Wrapper < 4.6.10 - Admin+ Stored XSS
Slug
shariff
Published
2024-03-12
Title
Shariff Wrapper < 4.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shariff
Published
2024-03-12
Title
Shariff Wrapper < 4.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shariff
Published
2024-03-12
Title
Shariff Wrapper < 4.6.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
shariff
Published
2024-06-14
Title
Shariff Wrapper < 4.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
shariff
Published
2024-06-19
Title
Shariff Wrapper < 4.6.14 - Unauthenticated Local File Inclusion
Slug
shariff-sharing
Published
2014-12-05
Title
Shariff for WordPress <= 1.0.7 - Stored Cross-Site Scripting (XSS)
Slug
shayanweb-admin-fontchanger
Published
2025-05-16
Title
ShayanWeb Admin FontChanger < 1.10 - Stored XSS via CSRF
Slug
sheet-to-wp-table-for-google-sheet
Published
2024-08-13
Title
Sheet to Table Live Sync for Google Sheet < 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via STWT_Sheet_Table Shortcode
Slug
sheet2site
Published
2025-04-01
Title
Sheet2Site <= 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sheetdb
Published
2025-04-01
Title
SheetDB < 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sheetlink
Published
2025-09-22
Title
GSheets Connector <= 1.1.1 - Authenticated (Administrator+) PHP Object Injection
Slug
sheetpress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sheetpress
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
sheets-to-wp-table-live-sync
Published
2024-05-03
Title
Sheets To WP Table Live Sync < 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
sheets-to-wp-table-live-sync
Published
2025-12-15
Title
FlexTable Google Sheets Connector < 3.19.2 - Admin+ Stored XSS
Slug
sheets2table
Published
2026-03-20
Title
Sheets2Table <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titles' Shortcode Attribute
Slug
shelf-planner
Published
2025-11-10
Title
Shelf Planner < 2.8.2 - Missing Authorization to Unauthenticated Settings Update
Slug
shelf-planner
Published
2025-11-10
Title
Shelf Planner <= 2.7.0 - Unauthenticated Information Exposure via Log Files
Slug
sherk-custom-post-type-displays
Published
2026-03-20
Title
Sherk Custom Post Type Displays <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute
Slug
shibboleth
Published
2016-03-02
Title
Shibboleth <= 1.7 - Cross-Site Scripting (XSS)
Slug
shiftcontroller
Published
2023-04-13
Title
ShiftController Employee Shift Scheduling < 4.9.26 - Reflected Cross-Site Scripting
Slug
shiftcontroller
Published
2023-11-12
Title
ShiftController Employee Shift Scheduling < 4.9.24 - CSRF
Slug
shiftcontroller
Published
2024-05-16
Title
ShiftController Employee Shift Scheduling < 4.9.58 - Authenticated (Contributor+) PHP Object Injection
Slug
shiftcontroller
Published
2024-09-23
Title
ShiftController Employee Shift Scheduling < 4.9.65 - Authenticated (Administrator+) Stored Cross-Site Scripting