WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-job-board
Published
2024-08-23
Title
Simple Job Board < 2.12.4 - Authenticated (Editor+) PHP Object Injection
Slug
simple-job-board
Published
2024-07-04
Title
Simple Job Board < 2.12.6 - Unauthenticated Resumes Download
Slug
simple-job-board
Published
2025-10-14
Title
Simple Job Board < 2.13.8 - Unauthenticated Sensitive Information Exposure
Slug
simple-job-manager
Published
2024-10-31
Title
Simple Job Manager <= 1.1 - Authenticated (Contributor+) SQL Injection
Slug
simple-jwt-login
Published
2021-10-13
Title
Simple JWT Login < 3.3.0 - Insecure Password Creation
Slug
simple-jwt-login
Published
2021-10-18
Title
Simple JWT Login < 3.2.1 - Arbitrary Settings Update to Site Takeover via CSRF
Slug
simple-jwt-login
Published
2025-09-22
Title
Simple JWT Login <= 3.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-keyword-to-link
Published
2025-06-05
Title
Simple Keyword to Link <= 1.5 - Cross-Site Request Forgery
Slug
simple-keyword-to-link
Published
2025-12-17
Title
Simple Keyword to Link <= 1.5 - Cross-Site Request Forgery
Slug
simple-ldap-login
Published
2024-09-27
Title
Simple LDAP Login < 1.6.1 - Reflected Cross-Site Scripting
Slug
simple-lightbox
Published
2025-04-25
Title
Simple Lightbox < 2.9.4 - Contributor+ Stored XSS
Slug
simple-lightbox-gallery
Published
2024-03-28
Title
Lightbox slider – Responsive Lightbox Gallery < 1.10.0 - Contributor+ PHP Object Injection
Slug
simple-lightbox-gallery
Published
2024-10-15
Title
Lightbox slider – Responsive Lightbox Gallery <= 1.10.6 - Author+ Stored XSS
Slug
simple-link-directory
Published
2018-11-11
Title
Simple Link Directory < 5.6.0 - Authenticated PHP Object Injection
Slug
simple-link-directory
Published
2019-07-09
Title
Simple Link Directory < 7.3.5 - Cross-Site Scripting (XSS)
Slug
simple-link-directory
Published
2022-02-28
Title
Simple Link Directory < 7.7.2 - Unauthenticated SQL injection
Slug
simple-link-directory
Published
2024-12-12
Title
Simple Link Directory < 8.4.6 - Unauthenticated Arbitrary Shortcode Execution
Slug
simple-link-directory
Published
2025-12-15
Title
Simple Link Directory < 8.8.4 - Cross-Site Request Forgery
Slug
simple-link-directory
Published
2025-12-15
Title
Simple Link Directory < 8.8.4 - Missing Authorization
Slug
simple-link-list-widget
Published
2025-09-05
Title
Simple Link List Widget <= 0.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-load-more
Published
2024-10-21
Title
Simple Load More <= 1.0 - Reflected Cross-Site Scripting
Slug
simple-local-avatars
Published
2024-08-07
Title
Simple Local Avatars < 2.7.11 - Cross-Site Request Forgery via save_default_avatar_file_id()
Slug
simple-local-avatars
Published
2024-11-15
Title
Simple Local Avatars < 2.8.0 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing
Slug
simple-local-avatars
Published
2025-08-11
Title
Simple Local Avatars < 2.8.5 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration
Slug
simple-locator
Published
2024-12-13
Title
Simple Locator < 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting