WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-dropbox-upload-form
Published
2014-08-01
Title
Simple Dropbox Upload - Arbitrary File Upload
Slug
simple-e-commerce-shopping-cart
Published
2021-08-16
Title
Simple eCommerce <= 3.1.2 - Arbitrary File Upload
Slug
simple-e-commerce-shopping-cart
Published
2024-12-06
Title
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update / Data Access
Slug
simple-e-commerce-shopping-cart
Published
2024-12-06
Title
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Reflected Cross-Site Scripting via monthly_sales_current_year Parameter
Slug
simple-email-subscriber
Published
2025-02-21
Title
Simple Email Subscriber <= 2.3 - Reflected Cross-Site Scripting
Slug
simple-embed-code
Published
2014-08-01
Title
Artiss Code Embed 2.0.1 - wp-admin/admin.php suffix Parameter XSS
Slug
simple-embed-code
Published
2023-12-05
Title
Code Embed < 2.3.7 - Authenticated(Contributor+) Denial of Service
Slug
simple-embed-code
Published
2024-10-03
Title
Code Embed < 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-embed-code
Published
2024-11-08
Title
Code Embed < 2.5.1 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
simple-event-planner
Published
2022-03-23
Title
Simple Event Planner < 1.5.5 - Author+ Stored Cross-Site Scripting
Slug
simple-event-planner
Published
2022-03-23
Title
Simple Event Planner < 1.5.5 - Contributor+ Stored XSS
Slug
simple-events-calendar
Published
2017-11-03
Title
Simple Events Calendar <= 1.3.5 - Authenticated SQL Injection
Slug
simple-events-calendar
Published
2021-07-24
Title
Simple Events Calendar <= 1.4.0 - Authenticated (admin+) SQL Injection
Slug
simple-excel-pricelist-for-woocommerce
Published
2025-10-23
Title
Simple Excel Pricelist for WooCommerce <= 1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-facebook-plugin
Published
2023-11-06
Title
Simple Like Page Plugin < 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-facebook-plugin
Published
2024-05-29
Title
Simple Like Page Plugin < 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-facebook-plugin
Published
2025-12-31
Title
Simple Like Page <= 1.5.3 - Missing Authorization
Slug
simple-facebook-twitter-widget
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simple-facebook-twitter-widget
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simple-feature-requests
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simple-feature-requests
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simple-featured-image
Published
2025-07-08
Title
Simple Featured Image <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via slideshow Parameter
Slug
simple-feed-stats
Published
2025-08-22
Title
Simple Statistics for Feeds < 20250820 - Cross-Site Request Forgery
Slug
simple-fields
Published
2014-08-01
Title
Simple Fields 1.1.6 - Admin Functions CSRF
Slug
simple-fields
Published
2014-08-01
Title
Simple Fields 0.3.5 - Remote File Inclusion