WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
slicewp
Published
2026-05-06
Title
Affiliate Program Suite — SliceWP Affiliates < 1.2.7 - Unauthenticated Stored Cross-Site Scripting
Slug
slick-contact-forms
Published
2023-10-09
Title
Slick Contact Forms <= 1.3.7 - Contributor+ Stored XSS
Slug
slick-engagement
Published
2024-11-11
Title
Slickstream: Engagement and Conversions < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via slick-grid Shortcode
Slug
slick-engagement
Published
2025-06-27
Title
Slickstream < 3.0.0 - Cross-Site Request Forgery
Slug
slick-google-map
Published
2025-10-13
Title
Slick Google Map < 1.0.0 - Cross-Site Request Forgery
Slug
slick-popup
Published
2019-05-28
Title
Slick Popup <= 1.7.1 - Privilege Escalation
Slug
slick-popup
Published
2023-10-29
Title
Slick Popup: Contact Form 7 Popup Plugin < 1.7.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
slick-sitemap
Published
2024-11-20
Title
Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slick-social-share-buttons
Published
2023-12-15
Title
Slick Social Share Buttons <= 2.4.11 - Authenticated (Subscriber+) Arbitrary Option Update
Slug
slicknav-mobile-menu
Published
2023-12-09
Title
SlickNav Mobile Menu < 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
slicko-for-elementor
Published
2024-10-31
Title
Slicko <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slickquiz
Published
2019-09-10
Title
SlickQuiz <= 1.3.7.1 - Unauthenticated Stored XSS
Slug
slickquiz
Published
2019-09-10
Title
SlickQuiz <= 1.3.7.1 - Authenticated SQL Injection
Slug
slickr-flickr
Published
2022-08-29
Title
Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting
Slug
slide
Published
2025-01-07
Title
Slides & Presentations <= 0.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slide
Published
2025-01-07
Title
Slides & Presentations <= 0.0.39 - Missing Authorization
Slug
slide
Published
2025-01-16
Title
Slides & Presentations <= 0.0.39 - Missing Authorization to Content Injection
Slug
slide-anything
Published
2022-03-08
Title
Slide Anything < 2.3.41 - Contributor+ SQLi
Slug
slide-anything
Published
2022-04-18
Title
Slide Anything < 2.3.44 - Editor+ Stored Cross-Site Scripting
Slug
slide-anything
Published
2022-07-14
Title
Slide Anything < 2.3.47 - Author+ Cross Site Scripting in slide title
Slug
slide-anything
Published
2023-03-15
Title
Slide Anything < 2.4.9 - Author+ Stored XSS
Slug
slide-banners
Published
2025-02-03
Title
Slide Banners <= 1.3 - Missing Authorization
Slug
slide-puzzle
Published
2025-08-17
Title
Slide Puzzle <= 1.0.0 - Reflected Cross-Site Scripting
Slug
slide-show-pro
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
slidedeck-lite-for-wordpress
Published
2025-01-10
Title
SlideDeck 1 Lite Content Slider <= 1.4.8 - Reflected XSS