WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
showhide-shortcode
Published
2025-01-24
Title
Show/Hide Shortcode < 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shown-connector
Published
2026-01-15
Title
Shown Connector <= 1.2.10 - Missing Authorization to Unauthenticated Settings Update
Slug
showpass
Published
2025-09-05
Title
Showpass WordPress Extension < 4.0.4 - Contributor+ Stored XSS
Slug
showtime-slideshow
Published
2025-03-28
Title
ShowTime Slideshow <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - plugins/metric-conversion.php Multiple Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - plugins/plugin-notification.php Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - plugins/variant-shortcode.php Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - admin/experiments.php Multiple Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - admin/experiment-new.php Multiple Unspecified XSS
Slug
shrinktheweb-website-preview-plugin
Published
2025-09-22
Title
ShrinkTheWeb (STW) Website Previews <= 2.8.5 - Cross-Site Request Forgery
Slug
shuffle
Published
2025-03-24
Title
Shuffle <= 0.5 - Authenticated (Subscriber+) SQL Injection
Slug
si-captcha-for-wordpress
Published
2014-09-27
Title
SI CAPTCHA 2.7.4 - Cross-Site Scripting (XSS)
Slug
si-contact-form
Published
2015-09-14
Title
Fast Secure Contact Form <= 4.0.37 - Authenticated Cross-Site Scripting (XSS)
Slug
sibs-woocommerce
Published
2026-02-03
Title
SIBS - WooCommerce <= 2.2.0 - Authenticated (Admin+) SQL Injection via 'referencedId' Parameter
Slug
side-cart-woocommerce
Published
2022-01-13
Title
XootiX Plugins - Various Versions CSRF to Arbitrary Options Update
Slug
side-cart-woocommerce
Published
2023-04-24
Title
Side Cart Woocommerce < 2.2 - Settings Reset via CSRF
Slug
side-cart-woocommerce
Published
2023-06-28
Title
Side Cart Woocommerce (Ajax) < 2.3 - Admin+ Stored XSS
Slug
side-menu
Published
2021-05-27
Title
Side Menu < 3.1.5 - Authenticated (admin+) SQL Injection
Slug
side-menu-lite
Published
2021-06-28
Title
Side Menu Lite < 2.2.1 - Authenticated SQL Injection
Slug
side-menu-lite
Published
2021-07-27
Title
Side Menu Lite < 2.2.6 - Authenticated SQL Injection
Slug
side-menu-lite
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
side-menu-lite
Published
2024-04-11
Title
Side Menu Lite < 4.2.1 - Menu Deletion via CSRF
Slug
side-menu-lite
Published
2025-01-24
Title
Side Menu Lite < 5.3.2 - Cross-Site Request Forgery to Settings Update
Slug
side-slide-responsive-menu
Published
2025-09-11
Title
Side Slide Responsive Menu <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
sidebar-adder
Published
2021-08-13
Title
Add Sidebar <= 2.0.0 - Reflected Cross-Site Scripting