WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shortcut-macros
Published
2022-06-16
Title
Shortcut Macros <= 1.3 - Subscriber+ Arbitrary Settings Update
Slug
shorten-url
Published
2023-06-28
Title
Short URL < 1.6.5 - Admin+ Stored Cross-Site Scripting
Slug
shorten-url
Published
2023-07-10
Title
Short URL < 1.6.5 - Admin+ Cross Site Scripting
Slug
shorten-url
Published
2023-10-03
Title
Short URL <= 1.6.8 - CSRF
Slug
shorten-url
Published
2023-06-28
Title
Short URL < 1.6.5 - Subscriber+ SQLi
Slug
shorten-url
Published
2023-11-03
Title
Short URL <= 1.6.8 - Missing Authorization via multiple AJAX functions
Slug
shorten-url
Published
2024-04-12
Title
Short URL <= 1.6.8 - Reflected Cross-Site Scripting
Slug
shorten-url
Published
2024-08-16
Title
Short URL <= 1.6.8 - Cross-Site Request Forgery via configuration_page
Slug
shorten-url
Published
2025-05-16
Title
Short URL <= 1.6.8 - Subscriber+ SQLi
Slug
shortlinkspro
Published
2025-06-05
Title
ShortLinks Pro < 1.0.8 - Authenticated (Administrator+) SQL Injection
Slug
shortpixel-adaptive-images
Published
2022-04-25
Title
ShortPixel Adaptive Images < 3.4.0 - Subscriber+ Arbitrary Settings Update
Slug
shortpixel-adaptive-images
Published
2023-01-31
Title
ShortPixel Adaptive Images < 3.6.3 - Reflected XSS
Slug
shortpixel-adaptive-images
Published
2023-05-08
Title
ShortPixel Adaptive Images < 3.7.2 - Settings Update via CSRF
Slug
shortpixel-adaptive-images
Published
2024-04-02
Title
ShortPixel Adaptive Images < 3.8.3 - Missing Authorization in activate_ai_handler and deactivate_ai_handler
Slug
shortpixel-adaptive-images
Published
2024-05-10
Title
ShortPixel Adaptive Images < 3.8.4 - Authenticated (Admin+) Server-Side Request Forgery
Slug
shortpixel-adaptive-images
Published
2024-05-09
Title
ShortPixel Adaptive Images < 3.8.4 - Cross-Site Request Forgery
Slug
shortpixel-adaptive-images
Published
2025-04-01
Title
ShortPixel Adaptive Images < 3.10.1 - Missing Authorization
Slug
shortpixel-adaptive-images
Published
2025-08-01
Title
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization < 3.10.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URL
Slug
shortpixel-adaptive-images
Published
2026-06-25
Title
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization < 3.11.5 - Unauthenticated Arbitrary File Deletion
Slug
shortpixel-adaptive-images
Published
2026-06-29
Title
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization < 3.11.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
shortpixel-critical-css
Published
2024-04-22
Title
ShortPixel Critical CSS < 1.0.3 - Missing Authorization
Slug
shortpixel-image-optimiser
Published
2022-06-14
Title
ShortPixel Image Optimizer < 4.22.10 - Reflected Cross-Site Scripting
Slug
shortpixel-image-optimiser
Published
2023-09-14
Title
ShortPixel Image Optimizer < 5.4.2 - Authenticated(Editor+) PHP Object Injection
Slug
shortpixel-image-optimiser
Published
2024-10-13
Title
ShortPixel Image Optimizer < 5.6.4 - Missing Authorization
Slug
shortpixel-image-optimiser
Published
2024-10-13
Title
ShortPixel Image Optimizer < 5.6.4 - Authenticated (Editor+) SQL Injection