WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-membership
Published
2026-03-31
Title
Simple Membership < 4.7.2 - Missing Authorization
Slug
simple-membership
Published
2026-01-19
Title
Simple Membership < 4.7.0 - Missing Authorization
Slug
simple-membership
Published
2026-06-15
Title
Simple Membership < 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API Version
Slug
simple-membership
Published
2026-06-17
Title
Simple Membership < 4.7.6 - Missing Authorization to Unauthenticated Arbitrary Member Account Deactivation via Forged Stripe 'charge.refunded' Webhook
Slug
simple-membership
Published
2026-05-03
Title
Simple Membership < 4.7.3 - Unauthenticated Stored Cross-Site Scripting
Slug
simple-membership
Published
2026-07-13
Title
Simple Membership < 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification
Slug
simple-membership-after-login-redirection
Published
2024-09-30
Title
Simple Membership After Login Redirection < 1.7 - Open Redirect
Slug
simple-membership-custom-messages
Published
2025-01-18
Title
Simple Membership Custom Messages < 2.5 - Reflected Cross-Site Scripting
Slug
simple-membership-mailchimp-integration
Published
2026-04-05
Title
Simple Membership MailChimp Integration < 1.9.8 - API Key Update via CSRF
Slug
simple-membership-wp-user-import
Published
2023-01-12
Title
Simple Membership WP < 1.8 - Admin+ SQLi
Slug
simple-membership-wp-user-import
Published
2026-01-20
Title
Simple Membership WP user Import < 1.9.2 - Cross-Site Request Forgery
Slug
simple-meta-tags
Published
2025-09-26
Title
Simple Meta Tags <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-mobile-url-redirect
Published
2023-03-20
Title
Simple Mobile URL Redirect <= 1.7.2 - Cross-Site Request Forgery
Slug
simple-nav-archives
Published
2024-07-11
Title
Simple Nav Archives <= 2.1.3 - Settings Update via CSRF
Slug
simple-nested-menu
Published
2025-06-05
Title
Simple Nested Menu <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-news
Published
2024-10-24
Title
Simple News <= 2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via news Shortcode
Slug
simple-nivo-slider
Published
2025-12-11
Title
Simple Nivo Slider <= 0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
simple-notification
Published
2024-12-06
Title
Simple Notification <= 1.3 - Missing Authorization
Slug
simple-notification
Published
2025-03-04
Title
Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-optimizer
Published
2025-03-24
Title
Simple Optimizer <= 1.2.7 - Cross-Site Request Forgery
Slug
simple-org-chart
Published
2023-08-17
Title
Simple Org Chart < 2.3.5 - Unauthenticated Tree Settings Update
Slug
simple-org-chart
Published
2023-08-17
Title
Simple Org Chart < 2.3.5 - Settings Update via CSRF
Slug
simple-owl-carousel
Published
2025-03-31
Title
Simple Owl Carousel <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-owl-shortcodes
Published
2026-05-04
Title
Simple Owl Shortcodes <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Attribute
Slug
simple-page-access-restriction
Published
2024-02-07
Title
Simple Page Access Restriction < 1.0.23 - Improper Access Control to Sensitive Information Exposure via REST API