WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
smart-protect
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
smart-protect
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
smart-recent-posts-widget
Published
2024-04-26
Title
Smart Recent Posts Widget <= 1.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
smart-scroll-posts
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
smart-scroll-to-top-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
smart-seo-tool
Published
2021-12-22
Title
Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting
Slug
smart-shopify-product
Published
2024-12-17
Title
Smart Shopify Product <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
smart-slide-show
Published
2014-08-01
Title
Smart Slideshow - upload.php Multiple File Extension Upload Arbitrary Code Execution
Slug
smart-slide-show
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
smart-slider-2
Published
2015-08-26
Title
Smart Slider 2 <= 2.3.11 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
smart-slider-3
Published
2021-06-07
Title
Smart Slider 3 < 3.5.0.9 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
smart-slider-3
Published
2022-10-10
Title
Smart Slider 3 < 3.5.1.11 - PHP Object Injection
Slug
smart-slider-3
Published
2023-02-28
Title
Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSS
Slug
smart-slider-3
Published
2022-11-23
Title
Smart Slider 3 < 3.5.1.11 - Contributor+ Stored XSS
Slug
smart-slider-3
Published
2024-04-12
Title
Smart Slider 3 < 3.5.1.23 - Contributor+ Stored XSS via SVG Upload
Slug
smart-slider-3
Published
2025-07-29
Title
Smart Slider 3 < 3.5.1.29 - Admin+ SQL Injection
Slug
smart-table-builder
Published
2025-09-05
Title
Smart Table Builder < 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
smart-tools-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
smart-tools-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
smart-variations-images
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
smart-variations-images
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
smart-wetransfer
Published
2025-09-29
Title
Smart WeTransfer <= 1.3 - Missing Authorization
Slug
smart-wishlist-for-more-convert
Published
2024-05-09
Title
MC Woocommerce Wishlist < 1.7.3 - Missing Authorization
Slug
smart-wishlist-for-more-convert
Published
2024-05-09
Title
MC Woocommerce Wishlist < 1.7.9 - Missing Authorization
Slug
smart-wishlist-for-more-convert
Published
2025-01-29
Title
WooCommerce Wishlist < 1.8.8 - Unauthenticated Wishlist Disclosure via download_pdf_file Function