WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
saoshyant-page-builder
Published
2025-01-07
Title
Saoshyant Page Builder <= 3.8 - Missing Authorization
Slug
saoshyant-slider
Published
2025-02-21
Title
Saoshyant Slider <= 3.0 - Unauthenticated PHP Object Injection
Slug
saphali-liqpay-for-donate
Published
2025-11-07
Title
Saphali LiqPay for donate < 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
saphali-woocommerce-lite
Published
2023-07-26
Title
Saphali Woocommerce Lite < 1.9.0 - Settings Update/Reset via CSRF
Slug
sapo-feed
Published
2025-09-22
Title
SAPO Feed < 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
saragna-social-stream
Published
2024-11-04
Title
Saragna <= 1.0 - Reflected Cross-Site Scripting
Slug
saskaita123-lt
Published
2026-07-09
Title
Invoice123 < 1.7.1 - Missing Authorization to Authenticated (Subscriber+) Setting Modification via s123_submit_api_key & s123_submit_invoice_settings AJAX actions
Slug
sassy-social-share
Published
2019-11-17
Title
Sassy Social Share <= 3.3.3 - Cross-Site Scripting (XSS)
Slug
sassy-social-share
Published
2021-10-20
Title
Sassy Social Share 3.3.23 - Missing Access Controls to PHP Object Injection
Slug
sassy-social-share
Published
2022-03-15
Title
Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting
Slug
sassy-social-share
Published
2022-12-27
Title
Sassy Social Share < 3.3.45 - Contributor+ Stored XSS
Slug
sassy-social-share
Published
2024-02-20
Title
Sassy Social Share < 3.3.57 - Contributor+ Stored XSS
Slug
sassy-social-share
Published
2024-03-05
Title
Social Sharing Plugin – Sassy Social Share < 3.3.59 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
sassy-social-share
Published
2024-04-05
Title
Sassy Social Share < 3.3.61 - Contributor+ Stored XSS
Slug
sassy-social-share
Published
2024-05-22
Title
Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting
Slug
sassy-social-share
Published
2024-11-29
Title
Social Sharing Plugin – Sassy Social Share < 3.3.70 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter
Slug
sassy-social-share
Published
2025-04-17
Title
Sassy Social Share < 3.3.74 - Open Redirect
Slug
sassy-social-share
Published
2025-06-06
Title
Social Sharing Plugin – Sassy Social Share < 3.3.76 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter
Slug
sastra-essential-addons-for-elementor
Published
2024-11-01
Title
Sastra Essential Addons for Elementor < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sastra-essential-addons-for-elementor
Published
2025-01-23
Title
Sastra Essential Addons for Elementor – Free Elementor Addons, Widgets and Templates < 1.0.15 - Missing Authorization to Spexo Theme Install
Slug
sastra-essential-addons-for-elementor
Published
2025-08-23
Title
Spexo Addons for Elementor < 1.0.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Slug
save-as-image-by-pdfcrowd
Published
2023-09-27
Title
Save as Image by Pdfcrowd < 2.16.1 - Admin+ Stored XSS
Slug
save-as-image-by-pdfcrowd
Published
2024-03-09
Title
Save as PDF by Pdfcrowd < 3.2.2 - Admin+ Stored XSS
Slug
save-as-image-by-pdfcrowd
Published
2024-04-10
Title
Save as Image < 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
save-as-pdf
Published
2025-11-12
Title
Save as PDF Button <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via restpackpdfbutton Shortcode