WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
save-as-pdf-by-pdfcrowd
Published
2026-01-24
Title
Save as PDF Plugin by PDFCrowd < 4.5.6 - Reflected Cross-Site Scripting via options
Slug
save-grab
Published
2023-11-20
Title
Grab & Save <= 1.0.4 - Reflected Cross-Site Scripting
Slug
save-grab
Published
2023-11-20
Title
Grab & Save <= 1.0.4 - Cross-Site Request Forgery
Slug
save-import-image-from-url
Published
2025-01-16
Title
Save & Import Image from URL <= 0.7 - Reflected Cross-Site Scripting
Slug
savyour-affiliate-partner
Published
2025-08-25
Title
Savyour Affiliate Partner <= 2.1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
sayfa-sayac
Published
2023-12-05
Title
Sayfa Sayaç <= 2.6 - Unauthenticated PHP Object Injection
Slug
sayfa-sayac
Published
2023-12-05
Title
Sayfa Sayaç <= 2.6 - Unauthenticated SQL Injection
Slug
sb-breadcrumbs
Published
2025-06-26
Title
SB Breadcrumbs <= 1.0 - Reflected Cross-Site Scripting
Slug
sb-chart-block
Published
2025-04-18
Title
SB Chart block < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Slug
sb-child-list
Published
2023-08-11
Title
SB Child List <= 4.5 - Settings Update via CSRF
Slug
sb-core
Published
2024-10-25
Title
Extensions by HocWP Team <= 0.2.3.2 - Authentication Bypass
Slug
sb-elementor-contact-form-db
Published
2021-01-13
Title
Elementor Contact Form DB < 1.6 - Plugin Settings Cross-Site Request Forgery
Slug
sb-elementor-contact-form-db
Published
2021-01-13
Title
Elementor Contact Form DB < 1.6 - Unauthenticated & Unauthorised Form Submissions Export
Slug
sb-elementor-contact-form-db
Published
2022-07-19
Title
Elementor Contact Form DB < 1.8.0 - Reflected Cross-Site Scripting
Slug
sb-random-posts-widget
Published
2024-10-09
Title
SB Random Posts Widget < 1.1 - Authenticated (Contributor+) Local File Inclusion
Slug
sb-uploader
Published
2014-08-01
Title
WordPress SB Uploader 3.9 - Arbitrary File Upload
Slug
sc-simple-zazzle
Published
2025-01-16
Title
SC Simple Zazzle <= 1.1.6 - Reflected Cross-Site Scripting
Slug
scalable-vector-graphics-svg
Published
2024-02-20
Title
Scalable Vector Graphics (SVG) <= 3.4 - Author+ Stored XSS via SVG
Slug
scalenut
Published
2026-01-20
Title
Scalenut <= 1.1.3 - Missing Authorization
Slug
scan-external-links
Published
2025-01-07
Title
Scan External Links <= 1.0 - Reflected Cross-Site Scripting
Slug
scancircle
Published
2024-12-17
Title
ScanCircle < 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
scand-multi-mailer
Published
2025-04-09
Title
MultiMailer <= 1.0.3 - Reflected Cross-Site Scripting
Slug
scand-multi-mailer
Published
2025-04-09
Title
MultiMailer <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
schedula-smart-appointment-booking
Published
2026-01-26
Title
Schedula < 1.1 - Missing Authorization
Slug
schedule
Published
2025-02-20
Title
Schedule <= 1.0.0 - Reflected XSS