WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-business-manager
Published
2024-10-31
Title
Simple Business Manager <= 4.6.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-buttons-creator
Published
2024-03-25
Title
Simple Buttons Creator <= 1.04 - Unauthenticated Stored XSS
Slug
simple-buttons-creator
Published
2024-03-25
Title
Simple Buttons Creator <= 1.04 - Aribtrary Button Deletion via CSRF
Slug
simple-calendar-for-elementor
Published
2025-04-22
Title
Simple calendar for Elementor < 1.6.5 - Cross-Site Request Forgery
Slug
simple-calendar-for-elementor
Published
2025-05-07
Title
Simple calendar for Elementor < 1.6.6 - Cross-Site Request Forgery
Slug
simple-calendar-for-elementor
Published
2026-01-27
Title
Simple calendar for Elementor < 1.6.7 - Missing Authorization to Unauthenticated Arbitrary Calendar Entry Deletion
Slug
simple-cart-solution
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simple-cart-solution
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simple-catalogue
Published
2025-02-04
Title
Simple Catalogue <= 1.0.2 - Reflected XSS
Slug
simple-certain-time-to-show-content
Published
2025-02-05
Title
Simple Certain Time to Show Content < 1.3.1 - Reflected XSS
Slug
simple-charts
Published
2025-02-17
Title
Simple Charts <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-cloudflare-turnstile
Published
2023-09-22
Title
Simple Cloudflare Turnstile < 1.23.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-cloudflare-turnstile
Published
2026-05-08
Title
Simple Cloudflare Turnstile < 1.38.1 - Unauthenticated CAPTCHA Bypass via Session Replay
Slug
simple-cod-fee-for-woocommerce
Published
2024-06-03
Title
Simple COD Fees for WooCommerce <= 2.0.2 - Missing Authorization
Slug
simple-code-insert-shortcode
Published
2024-10-18
Title
Simple Code Insert Shortcode <= 1.0 - Authenticated (Contributor+) SQL Injection
Slug
simple-coherent-form
Published
2026-07-07
Title
Simple Coherent Form <= 2.4.13 - Unauthenticated Arbitrary File Deletion via 'id' Parameter
Slug
simple-colorbox
Published
2025-09-26
Title
Simple Colorbox <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-comment-editing
Published
2025-01-24
Title
Comment Edit Core – Simple Comment Editing < 3.1.0 - Authenticated (Admin+) Server-Side Request Forgery
Slug
simple-comment-editing
Published
2025-11-12
Title
Comment Edit Core – Simple Comment Editing < 3.2.0 - Unauthenticated Sensitive Information Exposure
Slug
simple-contact-forms
Published
2025-03-31
Title
Simple Contact Forms <= 1.6.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
simple-contact-forms
Published
2025-07-22
Title
Simple Contact Forms <= 1.6.4 - Unauthenticated Local File Inclusion
Slug
simple-contact-info-widget
Published
2025-08-17
Title
Contact Info Widget <= 2.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-content-construction-kit
Published
2025-01-16
Title
Simple Custom post type custom field <= 1.0.3 - Reflected Cross-Site Scripting
Slug
simple-crypto-shortcodes
Published
2026-01-23
Title
Simple Crypto Shortcodes <= 1.0.2 - Cross-Site Request Forgery to Plugin Settings Update
Slug
simple-csv-table
Published
2025-12-11
Title
Simple CSV Table < 1.0.2 - Directory Traversal to Authenticated (Contributor+) Arbitrary File Read