WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
smart-auto-upload-images
Published
2025-11-07
Title
Smart Auto Upload Images < 1.2.1 - Authenticated (Contributor+) Arbitrary File Upload
Slug
smart-blocks
Published
2024-10-14
Title
Smart Blocks < 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
smart-blocks
Published
2025-09-22
Title
Smart Blocks < 2.5 - Missing Authorization
Slug
smart-cookie-kit
Published
2023-10-18
Title
Smart Cookie Kit < 2.3.2 - Contributor+ Stored XSS
Slug
smart-countdown-fx
Published
2025-02-03
Title
Smart Countdown FX <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
smart-custom-fields
Published
2024-03-19
Title
Smart Custom Fields < 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Post Content Disclosure
Slug
smart-custom-fields
Published
2025-01-06
Title
Smart Custom Fields < 5.0.1 - Contributor+ Stored XSS
Slug
smart-docs
Published
2025-07-03
Title
Smart Docs < 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
smart-docs
Published
2025-10-02
Title
Smart Docs <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
smart-dofollow
Published
2025-02-03
Title
Smart DoFollow <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
smart-donations
Published
2023-05-12
Title
Donations Made Easy - Smart Donations <= 4.0.12 - Reflected XSS
Slug
smart-donations
Published
2023-08-11
Title
Donations Made Easy - Smart Donations <= 4.0.12 - Admin+ SQLi
Slug
smart-donations
Published
2023-11-07
Title
Donations Made Easy - Smart Donations <= 4.0.12 - Stored XSS via CSRF
Slug
smart-donations
Published
2023-11-07
Title
Donations Made Easy – Smart Donations <= 4.0.12 - Cross-Site Request Forgery
Slug
smart-email-alerts
Published
2021-08-13
Title
Smart Email Alerts <= 1.0.10 - Reflected Cross-Site Scripting
Slug
smart-flv
Published
2014-08-01
Title
smart-flv - jwplayer.swf XSS
Slug
smart-forms
Published
2014-10-13
Title
Smart Forms 2.1.0 - Cross-Site Scripting (XSS)
Slug
smart-forms
Published
2019-02-28
Title
Smart Forms < 2.6.16 - Cross-Site Request Forgery (CSRF)
Slug
smart-forms
Published
2022-02-14
Title
Smart Forms < 2.6.71 - Subscriber+ Form Data Download
Slug
smart-forms
Published
2023-12-07
Title
Smart Forms < 2.6.85 - Subscriber+ Arbitrary Options Update
Slug
smart-forms
Published
2024-02-02
Title
Smart Forms < 2.6.87 - Subscriber+ Arbitrary Entry Deletion
Slug
smart-forms
Published
2024-03-25
Title
Smart Forms < 2.6.94 - Edit Entries via CSRF
Slug
smart-forms
Published
2024-03-25
Title
Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control
Slug
smart-forms
Published
2024-04-08
Title
Smart Forms < 2.6.96 - Admin+ Stored XSS
Slug
smart-forms
Published
2024-04-25
Title
Smart Forms < 2.6.92 - Missing Authorization to Notice Dismissal