WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
smart-forms
Published
2025-05-23
Title
Smart Forms < 2.6.99 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
smart-google-code-inserter
Published
2018-01-01
Title
Smart Google Code Inserter <= 3.4 - Unauthenticated Cross-Site Scripting (XSS)
Slug
smart-google-code-inserter
Published
2018-01-01
Title
Smart Google Code Inserter <= 3.4 - Unauthenticated SQL Injection
Slug
smart-grid-gallery
Published
2021-09-21
Title
Video Gallery - Vimeo and YouTube Gallery < 1.1.5 - Admin+ Stored Cross-Site Scripting
Slug
smart-grid-gallery
Published
2025-08-21
Title
Video Gallery – Vimeo and YouTube Gallery <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
smart-id
Published
2021-09-17
Title
eID Easy < 4.7 - Reflected Cross-Site Scripting
Slug
smart-id
Published
2025-09-10
Title
eID Easy < 4.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
smart-logo-showcase-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
smart-logo-showcase-lite
Published
2023-02-21
Title
Smart Logo Showcase Lite <= 1.1.9 - Contributor+ Stored XSS
Slug
smart-maintenance-countdown
Published
2025-02-24
Title
Smart Maintenance & Countdown <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
smart-maintenance-mode
Published
2024-04-25
Title
Smart Maintenance Mode <= 1.5.3 - Cross-Site Request Forgery
Slug
smart-maintenance-mode
Published
2025-03-03
Title
Smart Maintenance Mode < 1.5.2 - Admin+ Stored XSS
Slug
smart-maintenance-mode
Published
2025-03-05
Title
Smart Maintenance Mode < 1.5.2 - Admin+ Stored XSS
Slug
smart-maintenance-mode
Published
2025-03-25
Title
Smart Maintenance Mode < 1.5.3 - Reflected Cross-Site Scripting via setstatus Parameter
Slug
smart-manager-for-wp-e-commerce
Published
2015-07-08
Title
Smart Manager for WooCommerce & WPeC <= 3.9.6 - Unauthenticated SQL Injection
Slug
smart-manager-for-wp-e-commerce
Published
2024-01-18
Title
Smart Manager < 8.28.0 - Admin+ SQL Injection
Slug
smart-manager-for-wp-e-commerce
Published
2024-10-21
Title
Smart Manager < 8.46.0 - Missing Authorization
Slug
smart-manager-for-wp-e-commerce
Published
2025-01-15
Title
Smart Manager < 8.53.0 - Authenticated (Administrator+) SQL Injection
Slug
smart-marketing-for-wp
Published
2017-12-05
Title
Smart Marketing SMS and Newsletters Forms < 2.0.0 - Unauthenticated Cross-Site Scripting (XSS)
Slug
smart-marketing-for-wp
Published
2024-11-28
Title
Smart Marketing SMS and Newsletters Forms < 5.0.5 - Missing Authorization
Slug
smart-mockups
Published
2024-10-31
Title
Smart Mockups <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
smart-phone-field-for-gravity-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
smart-popup-blaster
Published
2024-12-05
Title
Smart PopUp Blaster <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
smart-popup-blaster
Published
2024-12-13
Title
Smart PopUp Blaster <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
smart-product-gallery-slider
Published
2025-04-09
Title
Smart Product Gallery Slider <= 1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting