WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-301-redirects
Published
2021-05-26
Title
Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Import
Slug
simple-301-redirects
Published
2021-05-26
Title
Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin Installation
Slug
simple-301-redirects
Published
2021-05-26
Title
Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin Activation
Slug
simple-301-redirects
Published
2021-05-26
Title
Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Update and Retrieve Wildcard Value
Slug
simple-301-redirects
Published
2023-08-30
Title
Simple 301 Redirects < 2.0.8 - Cross-Site Request Forgery via 'clicked'
Slug
simple-301-redirects
Published
2023-11-13
Title
Simple 301 Redirects by BetterLinks < 2.0.8 - Missing Authorization via clicked
Slug
simple-301-redirects-addon-bulk-uploader
Published
2019-08-10
Title
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Multiple Issues
Slug
simple-add-pages-or-posts
Published
2016-02-02
Title
Simple Add Pages or Posts <= 1.6 - CSRF
Slug
simple-add-pages-or-posts
Published
2025-01-06
Title
Simple add pages or posts <= 2.0.0 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
simple-add-pages-or-posts
Published
2025-02-08
Title
Simple add pages or posts <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-admin-language-change
Published
2021-05-05
Title
Simple Admin Language Change < 2.0.2 - Arbitrary User Locale Change
Slug
simple-ads-manager
Published
2015-04-02
Title
Simple Ads Manager < 2.7.102 - Arbitrary File Upload & SQL Injection
Slug
simple-ads-manager
Published
2015-07-02
Title
Simple Ads Manager < 2.9.4.116 - Unauthenticated Denial of Service (DoS)
Slug
simple-ads-manager
Published
2016-01-30
Title
Simple Ads Manager < 2.9.5.118 - SQL Injection
Slug
simple-ads-manager
Published
2017-03-01
Title
Simple Ads Manager - Unauthenticated PHP Object Injection
Slug
simple-ajax-chat
Published
2022-04-15
Title
Simple Ajax Chat < 20220216 - Log Clearing & Arbitrary Chat Message Deletion via CSRF
Slug
simple-ajax-chat
Published
2022-04-15
Title
Simple Ajax Chat < 20220216 - Sensitive Information Disclosure
Slug
simple-ajax-chat
Published
2022-02-16
Title
Simple Ajax Chat < 20220216 - Unauthenticated Stored XSS
Slug
simple-ajax-chat
Published
2024-02-28
Title
Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS
Slug
simple-ajax-chat
Published
2024-03-26
Title
Simple Ajax Chat < 20240216 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
simple-ajax-chat
Published
2024-03-26
Title
Simple Ajax Chat < 20240223 - Unauthenticated Stored Cross-Site Scripting
Slug
simple-ajax-chat
Published
2024-05-14
Title
Simple Ajax Chat < 20240412 - Admin+ Stored XSS
Slug
simple-ajax-chat
Published
2026-02-17
Title
Simple Ajax Chat < 20260217 - Unauthenticated Information Exposure
Slug
simple-ajax-chat
Published
2026-03-12
Title
Simple Ajax Chat < 20260301 - Unauthenticated Stored Cross-Site Scripting via 'c'
Slug
simple-ajax-chat
Published
2026-08-31
Title
Simple Ajax Chat < 20260827 - Unauthenticated Stored XSS via Chat Message Linkification