WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shared-files
Published
2024-08-09
Title
Shared Files < 1.7.29 - Unauthenticated Sensitive Information Exposure
Slug
shared-files
Published
2025-01-30
Title
Shared Files – Frontend File Upload Form & Secure File Sharing < 1.7.43 - Limited Unauthenticated Stored Cross-Site Scripting via File Upload
Slug
shared-files
Published
2025-06-02
Title
Shared Files < 1.7.49 - Unauthenticated Stored Cross-Site Scripting via sanitize_file Function
Slug
shared-files
Published
2026-03-05
Title
Shared Files < 1.7.58 - Contributor+ Arbitrary File Download
Slug
shared-files
Published
2026-06-05
Title
Shared Files – Frontend File Upload Form & Secure File Sharing < 1.7.65 - Unauthenticated Path Traversal
Slug
shared-files
Published
2026-08-24
Title
Shared Files – File Upload & Download Manager < 1.7.70 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
shared-files
Published
2026-08-26
Title
Shared Files < 1.7.70 - Unauthenticated Limited File Upload
Slug
shared-files
Published
2026-08-26
Title
Shared Files < 1.7.68 - Unauthenticated Arbitrary File Deletion via Path Traversal
Slug
shared-files-pro
Published
2026-08-26
Title
Shared Files < 1.7.70 - Unauthenticated Limited File Upload
Slug
shared-files-pro
Published
2026-08-26
Title
Shared Files < 1.7.68 - Unauthenticated Arbitrary File Deletion via Path Traversal
Slug
shared-files-pro
Published
2026-08-26
Title
Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read
Slug
sharespine-woocommerce-connector
Published
2025-05-16
Title
Sharespine Woocommerce Connector < 4.8.56 - Missing Authorization
Slug
sharethis-share-buttons
Published
2024-05-22
Title
ShareThis Share Buttons < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sharethis-inline-buttons Shortcode
Slug
shareyourcart
Published
2014-08-01
Title
ShareYourCart 1.6.1 - SDK Multiple Unspecified Path Disclosure
Slug
shariff
Published
2024-02-05
Title
Shariff Wrapper < 4.6.10 - Admin+ Stored XSS
Slug
shariff
Published
2024-03-12
Title
Shariff Wrapper < 4.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shariff
Published
2024-03-12
Title
Shariff Wrapper < 4.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shariff
Published
2024-03-12
Title
Shariff Wrapper < 4.6.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
shariff
Published
2024-06-14
Title
Shariff Wrapper < 4.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
shariff
Published
2024-06-19
Title
Shariff Wrapper < 4.6.14 - Unauthenticated Local File Inclusion
Slug
shariff
Published
2026-05-27
Title
Shariff Wrapper < 4.6.21 - Authenticated (Contributor+) Cross-Site Scripting
Slug
shariff-sharing
Published
2014-12-05
Title
Shariff for WordPress <= 1.0.7 - Stored Cross-Site Scripting (XSS)
Slug
shariff-sharing
Published
2026-06-05
Title
Shariff for WordPress <= 1.0.11 - Admin+ Stored Cross-Site Scripting
Slug
shayanweb-admin-fontchanger
Published
2025-05-16
Title
ShayanWeb Admin FontChanger < 1.10 - Stored XSS via CSRF
Slug
sheet-to-wp-table-for-google-sheet
Published
2024-08-13
Title
Sheet to Table Live Sync for Google Sheet < 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via STWT_Sheet_Table Shortcode