WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-post-listing
Published
2025-12-11
Title
Simple post listing <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-post-meta-manager
Published
2025-04-09
Title
Simple Post Meta Manager <= 1.0.9 - Reflected Cross-Site Scripting
Slug
simple-post-notes
Published
2022-06-27
Title
Simple Post Notes < 1.7.6 - Admin+ Stored Cross-Site Scripting
Slug
simple-post-notes
Published
2024-04-10
Title
Simple Post Notes < 1.7.7 - Cross-Site Request Forgery
Slug
simple-post-notes
Published
2024-07-09
Title
Simple Post Notes < 1.7.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-post-series
Published
2025-03-21
Title
Simple Post Series <= 2.4.4 - Reflected Cross-Site Scripting
Slug
simple-post-template
Published
2025-10-16
Title
Simple Content Templates for Blog Posts & Pages <= 2.2.61 - Cross-Site Request Forgery
Slug
simple-posts-ticker
Published
2023-09-25
Title
Simple Posts Ticker < 1.1.6 - Admin+ Stored XSS
Slug
simple-posts-ticker
Published
2023-09-25
Title
Simple Posts Ticker < 1.1.6 - Contributor+ Stored XSS
Slug
simple-presenter
Published
2024-12-11
Title
Simple Presenter < 1.5.2 - Reflected Cross-Site Scripting
Slug
simple-press
Published
2014-08-01
Title
Simple Press - SQL Injection
Slug
simple-price-calculator-basic
Published
2025-09-05
Title
Simple Price Calculator <= 1.3 - Missing Authorization
Slug
simple-pricing-table
Published
2024-11-14
Title
Simple Pricing Table <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-pricing-tables-vc-extension
Published
2025-02-17
Title
Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-project-managment
Published
2025-01-16
Title
Simple Project Manager <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
simple-proxy
Published
2024-12-17
Title
Simple Proxy <= 1.0 - Reflected Cross-Site Scripting
Slug
simple-pull-quote
Published
2025-10-23
Title
Simple Pull Quote < 1.6.4 - Contributor+ Stored XSS
Slug
simple-quotation
Published
2022-02-16
Title
Simple Quotation <= 1.3.2 - Subscriber+ SQL injection
Slug
simple-quotation
Published
2022-02-16
Title
Simple Quotation <= 1.3.2 - Quote Creation/Edition via CSRF to Stored Cross-Site Scripting
Slug
simple-random-posts-shortcode
Published
2026-04-21
Title
Simple Random Posts Shortcode <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'container_right_width' Shortcode Attribute
Slug
simple-rating
Published
2025-03-24
Title
Simple Rating <= 1.4 - Cross-Site Request Forgery
Slug
simple-real-estate-pack-4
Published
2022-05-09
Title
Simple Real Estate Pack <= 1.4.8 - Admin+ Stored Cross Site Scripting
Slug
simple-responsive-image-gallery
Published
2021-12-14
Title
Simple Image Gallery <= 1.0.6 - Reflected Cross-Site Scripting
Slug
simple-responsive-menu
Published
2025-02-13
Title
Simple Responsive Menu <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
simple-responsive-slider
Published
2024-07-10
Title
Simple Responsive Slider <= 0.2.2.5 - Reflected Cross-Site Scripting