WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-download-monitor
Published
2021-10-05
Title
Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail
Slug
simple-download-monitor
Published
2021-12-21
Title
Simple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via Shortcodes
Slug
simple-download-monitor
Published
2021-12-21
Title
Simple Download Monitor < 3.9.9 - Multiple CSRF
Slug
simple-download-monitor
Published
2021-09-02
Title
Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal
Slug
simple-download-monitor
Published
2025-01-24
Title
Simple Download Monitor < 3.9.26 - Authenticated (Administrator+) SQL Injection
Slug
simple-download-monitor
Published
2025-08-27
Title
Simple Download Monitor < 3.9.34 - Simple Download Monitor < 3.9.34 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality
Slug
simple-download-monitor
Published
2025-08-27
Title
Simple Download Monitor < 3.9.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-downloads-list
Published
2025-01-23
Title
Simple Downloads List < 1.4.3 - Authenticated (Contributor+) SQL Injection
Slug
simple-downloads-list
Published
2025-11-07
Title
Simple Downloads List < 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
simple-draft-list
Published
2025-09-19
Title
Draft List < 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-draft-list
Published
2025-10-10
Title
Draft List < 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-dropbox-upload-form
Published
2014-08-01
Title
Simple Dropbox Upload - Arbitrary File Upload
Slug
simple-e-commerce-shopping-cart
Published
2021-08-16
Title
Simple eCommerce <= 3.1.2 - Arbitrary File Upload
Slug
simple-e-commerce-shopping-cart
Published
2024-12-06
Title
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update / Data Access
Slug
simple-e-commerce-shopping-cart
Published
2024-12-06
Title
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Reflected Cross-Site Scripting via monthly_sales_current_year Parameter
Slug
simple-email-subscriber
Published
2025-02-21
Title
Simple Email Subscriber <= 2.3 - Reflected Cross-Site Scripting
Slug
simple-embed-code
Published
2014-08-01
Title
Artiss Code Embed 2.0.1 - wp-admin/admin.php suffix Parameter XSS
Slug
simple-embed-code
Published
2023-12-05
Title
Code Embed < 2.3.7 - Authenticated(Contributor+) Denial of Service
Slug
simple-embed-code
Published
2024-10-03
Title
Code Embed < 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-embed-code
Published
2024-11-08
Title
Code Embed < 2.5.1 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
simple-event-attendance
Published
2026-02-13
Title
SEATT: Simple Event Attendance <= 1.5.0 - Cross-Site Request Forgery to Arbitrary Event Deletion
Slug
simple-event-planner
Published
2022-03-23
Title
Simple Event Planner < 1.5.5 - Author+ Stored Cross-Site Scripting
Slug
simple-event-planner
Published
2022-03-23
Title
Simple Event Planner < 1.5.5 - Contributor+ Stored XSS
Slug
simple-events-calendar
Published
2017-11-03
Title
Simple Events Calendar <= 1.3.5 - Authenticated SQL Injection
Slug
simple-events-calendar
Published
2021-07-24
Title
Simple Events Calendar <= 1.4.0 - Authenticated (admin+) SQL Injection