WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sirv
Published
2024-11-19
Title
Image Optimizer, Resizer and CDN – Sirv < 7.3.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion
Slug
sirv
Published
2025-04-22
Title
Sirv < 7.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sis-handball
Published
2023-09-04
Title
SIS Handball <= 1.0.45 - Settings Update via CSRF
Slug
site-audit
Published
2021-07-19
Title
My Site Audit <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
site-chat-on-telegram
Published
2025-07-07
Title
Site Chat on Telegram < 1.0.6 - Unauthenticated PHP Object Injection
Slug
site-checkup
Published
2025-10-29
Title
Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue < 1.48 - Unauthenticated Log File Poisoning
Slug
site-editor
Published
2018-03-16
Title
Site Editor <= 1.1.1 - Local File Inclusion (LFI)
Slug
site-editor-google-map
Published
2025-03-18
Title
Site Editor Google Map <= 1.0.1 - Reflected Cross-Site Scripting
Slug
site-favicon
Published
2024-05-30
Title
Site Favicon < 0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
site-info-dashboard-widget
Published
2025-09-05
Title
Site Info <= 1.1 - Authenticated (Editor+) Information Exposure
Slug
site-is-offline-plugin
Published
2022-06-06
Title
Site Offline or Coming Soon <= 1.6.6 - Stored Cross-Site Scripting via CSRF
Slug
site-launcher
Published
2025-01-16
Title
Site Launcher <= 0.9.4 - Reflected Cross-Site Scripting
Slug
site-mailer
Published
2025-02-27
Title
Site Mailer < 1.2.4 - Unauthenticated Stored Cross-Site Scripting
Slug
site-mode
Published
2025-04-11
Title
Coming Soon, Maintenance Mode <= 1.1.1 - Unauthenticated Local File Inclusion
Slug
site-notes
Published
2024-01-03
Title
Site Notes <= 2.0.0 - Admin Note Deletion via CSRF
Slug
site-notify
Published
2025-04-08
Title
Site Notify <= 1.0 - Missing Authorization
Slug
site-offline
Published
2020-12-29
Title
Site Offline < 1.4.4 - Multiple Cross-Site Request Forgery
Slug
site-offline
Published
2022-08-29
Title
Site Offline < 1.5.3 - Access Bypass
Slug
site-offline
Published
2023-11-29
Title
Site Offline < 1.5.7 - Admin+ Stored XSS
Slug
site-offline
Published
2025-08-21
Title
Site Offline <= 1.5.7 - Missing Authorization
Slug
site-pin
Published
2025-01-07
Title
Site PIN <= 1.3 - Reflected Cross-Site Scripting
Slug
site-reviews
Published
2018-05-28
Title
Site Reviews <= 2.15.2 - Cross-Site Scripting (XSS)
Slug
site-reviews
Published
2021-08-09
Title
Site Reviews < 5.13.1 - Admin+ Stored XSS
Slug
site-reviews
Published
2021-12-06
Title
Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site Scripting
Slug
site-reviews
Published
2023-04-05
Title
Site Reviews < 6.7.1 - Admin+ Stored XSS