WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simpleform-contact-form-submissions
Published
2024-11-15
Title
SimpleForm Contact Form Submissions <= 2.1.0 - Reflected Cross-Site Scripting
Slug
simplegmaps
Published
2024-11-08
Title
SimpleGMaps <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simplelender-by-umatidocs-com
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simplelife
Published
2014-12-18
Title
Simplelife <= 1.2 - Multiple CSRF
Slug
simplelightbox
Published
2025-05-19
Title
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library
Slug
simplemap
Published
2024-01-16
Title
SimpleMap Store Locator <= 2.6.1 - Unauthenticated Stored Cross-Site Scripting
Slug
simplemodal
Published
2024-11-04
Title
Simple Modal <= 0.3.3 - Reflected Cross-Site Scripting
Slug
simplemodal-contact-form-smcf
Published
2023-06-26
Title
SimpleModal Contact Form (SMCF) <= 1.2.9 - Admin+ Stored XSS
Slug
simplemortgage
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simplepress
Published
2020-09-25
Title
Simple:Press < 6.6.1 - Broken Access Control leading to RCE
Slug
simplepress
Published
2022-11-29
Title
Simple:Press < 6.8.1 - Subscriber+ Arbitrary File Deletion
Slug
simplepress
Published
2022-11-29
Title
Simple:Press < 6.8.1 - Unauthenticated Stored XSS via Forum Replies
Slug
simplepress
Published
2022-11-29
Title
Simple:Press < 6.8.1 - Subscriber+ Stored XSS via Profile Signatures
Slug
simplepress
Published
2022-11-29
Title
Simple:Press < 6.8.1 - Admin+ Arbitrary File Update
Slug
simplepress
Published
2025-01-29
Title
Simple:Press Forum < 6.10.12 - Reflected Cross-Site Scripting
Slug
simplepress
Published
2025-02-05
Title
SimplePress Forum < 6.10.11 - Reflected XSS
Slug
simplepress
Published
2025-02-28
Title
Simple:Press < 6.10.13 - Cross-Site Request Forgery to Unauthorized Post Editing
Slug
simplepress
Published
2025-03-31
Title
Simple:Press < 6.11.6 - Missing Authorization
Slug
simpler-checkout
Published
2025-08-22
Title
Simpler Checkout 0.7.0 - 1.1.9 - Authentication Bypass
Slug
simplesamlphp-authentication
Published
2021-09-08
Title
simpleSAMLphp Authentication <= 0.7.0 - Reflected Cross-Site Scripting
Slug
simpleschema-free
Published
2024-11-28
Title
SimpleSchema <= 1.7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simpleshop-cz
Published
2024-05-03
Title
SimpleShop < 2.10.1 - Cross-Site Request Forgery
Slug
simpleshop-cz
Published
2024-05-03
Title
SimpleShop < 2.10.3 - Missing Authorization
Slug
simplified
Published
2025-01-03
Title
Simplified Plugin < 1.0.7 - Unauthenticated Arbitrary File Upload
Slug
simplified
Published
2025-08-14
Title
Simplified <= 1.0.9 - Authenticated (Administrator+) Server-Side Request Forgery