WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-excel-pricelist-for-woocommerce
Published
2025-10-23
Title
Simple Excel Pricelist for WooCommerce <= 1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-facebook-plugin
Published
2023-11-06
Title
Simple Like Page Plugin < 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-facebook-plugin
Published
2024-05-29
Title
Simple Like Page Plugin < 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-facebook-plugin
Published
2025-12-31
Title
Simple Like Page <= 1.5.3 - Missing Authorization
Slug
simple-facebook-twitter-widget
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simple-facebook-twitter-widget
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simple-feature-requests
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simple-feature-requests
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simple-featured-image
Published
2025-07-08
Title
Simple Featured Image <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via slideshow Parameter
Slug
simple-feed-stats
Published
2025-08-22
Title
Simple Statistics for Feeds < 20250820 - Cross-Site Request Forgery
Slug
simple-fields
Published
2014-08-01
Title
Simple Fields 1.1.6 - Admin Functions CSRF
Slug
simple-fields
Published
2014-08-01
Title
Simple Fields 0.3.5 - Remote File Inclusion
Slug
simple-fields
Published
2015-08-25
Title
Simple Fields <= 1.4.10 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
simple-fields
Published
2019-09-16
Title
Simple Fields <= 1.4.11 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
simple-file-downloader
Published
2023-01-25
Title
Simple File Downloader <= 1.0.4 - Contributor+ Stored XSS via Shortcode
Slug
simple-file-list
Published
2019-05-23
Title
Simple File List Plugin < 3.2.8 - Unauthenticated Arbitrary File Download
Slug
simple-file-list
Published
2019-05-23
Title
Simple File List Plugin <= 3.2.4 - Authenticated Arbitrary File Delete
Slug
simple-file-list
Published
2020-04-27
Title
Simple File List < 4.2.3 - Unauthenticated Arbitrary File Upload RCE
Slug
simple-file-list
Published
2020-05-16
Title
Simple File List < 4.2.8 - Authenticated Arbitrary File Deletion
Slug
simple-file-list
Published
2019-06-02
Title
Simple File List < 3.2.8 - Unauthenticated Arbitrary File Download
Slug
simple-file-list
Published
2022-08-30
Title
Simple File List < 4.4.12 - Reflected Cross-Site Scripting
Slug
simple-file-list
Published
2022-09-19
Title
Simple File List < 4.4.13 - Page Creation via CSRF
Slug
simple-file-list
Published
2022-09-19
Title
Simple File List < 4.4.12 - Admin+ Stored Cross-Site Scripting
Slug
simple-file-list
Published
2023-02-28
Title
Simple File List < 6.0.10 - Admin+ Stored XSS
Slug
simple-file-list
Published
2023-10-12
Title
Simple File List < 6.1.10 - Admin+ Stored XSS