WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
smartsearchwp
Published
2024-07-29
Title
SmartSearch WP <= 2.4.4 - Unauthenticated Stored XSS
Slug
smartsearchwp
Published
2024-08-14
Title
SmartSearchWP <= 2.4.4 - Unauthenticated Log Purge
Slug
smartsearchwp
Published
2024-09-04
Title
SmartSearchWP < 2.4.6 - Unauthenticated OpenAI Key Disclosure
Slug
smartseo
Published
2025-07-08
Title
smart SEO <= 4.0 - Authenticated (Subscriber+) SQL Injection
Slug
smartsoftbutton-widget-de-botones-de-chat
Published
2022-06-16
Title
Button Widget Smartsoft <= 1.0.1 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
smartsupp-live-chat
Published
2024-07-20
Title
Smartsupp < 3.7 - Cross-Site Request Forgery
Slug
smartsupp-live-chat
Published
2026-02-18
Title
Smartsupp – live chat, AI shopping assistant and chatbots < 3.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
smarty-for-wordpress
Published
2023-09-01
Title
Smarty for WordPress <= 3.1.35 - Admin+ Stored XSS
Slug
smarty-for-wordpress
Published
2023-07-19
Title
Smarty for WordPress <= 3.1.35 - Settings Update via CSRF
Slug
smcountdown
Published
2025-10-21
Title
SM CountDown Widget <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
smdp-affiliate-platform
Published
2024-10-21
Title
Affiliate Platform <= 1.4.8 - Reflected Cross-Site Scripting
Slug
smio-push-notification
Published
2025-06-11
Title
Smart Notification <= 10.3 - Unauthenticated SQL Injection
Slug
smio-push-notification
Published
2025-06-18
Title
Smart Notification <= 10.3 - Reflected Cross-Site Scripting
Slug
smm-api
Published
2025-04-01
Title
SMM API <= 6.0.31 - Unauthenticated Stored Cross-Site Scripting
Slug
smm-api
Published
2025-08-07
Title
SMM API <= 6.0.31 - Missing Authorization
Slug
smokesignal
Published
2017-09-02
Title
SmokeSignal <= 1.2.6 - Authenticated Stored XSS
Slug
smooth-accordion
Published
2025-09-05
Title
Smooth Accordion <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
smooth-dynamic-slider
Published
2025-01-16
Title
Smooth Dynamic Slider <= 1.0 - Reflected Cross-Site Scriptign
Slug
smooth-gallery-replacement
Published
2024-07-11
Title
Smooth Gallery Replacement <= 1.0 - CSRF to Stored XSS
Slug
smooth-page-scroll-updown-buttons
Published
2021-05-17
Title
Smooth Scroll Page Up/Down Buttons < 1.4 - Authenticated Stored XSS
Slug
smooth-page-scroll-updown-buttons
Published
2021-06-15
Title
Smooth Scroll Page Up/Down Buttons < 1.4.1 - Authenticated Stored XSS via psb_positioning
Slug
smooth-scrolling-links-ssl
Published
2023-10-22
Title
Smooth Scroll Links <= 1.1.0 - Arbitrary Settings Update via CSRF
Slug
smooth-slider
Published
2015-07-15
Title
Smooth Slider < 2.7 - Authenticated SQL Injection
Slug
smooth-slider
Published
2018-01-10
Title
Smooth Slider <= 2.8.6 - Authenticated SQL Injection
Slug
smooth-streaming-player
Published
2024-11-22
Title
Silverlight Video Player <= 1.0 - Cross-Site Request Forgery