WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
smtp-mail
Published
2021-08-24
Title
SMTP Mail < 1.2.2 - Authenticated SQL Injections
Slug
smtp-mail
Published
2021-08-24
Title
SMTP Mail < 1.2 - Reflected Cross-Site Scripting (XSS)
Slug
smtp-mail
Published
2023-07-05
Title
SMTP Mail < 1.3.43 - Unauthenticated Stored Cross-Site Scripting
Slug
smtp-mail
Published
2024-02-12
Title
SMTP Mail Plugin < 1.3.21 - Cross Site Request Forgery
Slug
smtp-mail
Published
2025-12-04
Title
SMTP Mail <= 1.3.49 - Cross-Site Request Forgery
Slug
smtp-mailing-queue
Published
2023-04-05
Title
WP SMTP Mailing Queue < 2.0.1 - Admin+ Stored XSS
Slug
smtp-mailing-queue
Published
2023-06-22
Title
Mail Queue < 1.2 - Unauthenticated Stored Cross-Site Scripting
Slug
smtp-sendgrid
Published
2025-02-22
Title
SMTP for SendGrid – YaySMTP < 1.5 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Slug
smtp-sendgrid
Published
2025-07-16
Title
SMTP for SendGrid – YaySMTP < 1.5.1 - Authenticated (Administrator+) SQL Injection
Slug
smtp-sendinblue
Published
2025-02-22
Title
SMTP for Sendinblue – YaySMTP < 1.3 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Slug
smtp-sendinblue
Published
2025-07-16
Title
YaySMTP < 1.3.1 - Authenticated (Administrator+) SQL Injection
Slug
smtp2go
Published
2023-03-16
Title
SMTP2GO < 1.5.0 - Admin+ Stored XSS
Slug
smtp2go
Published
2025-07-16
Title
SMTP2GO < 1.12.2 - Missing Authorization
Slug
snap-pixel
Published
2023-09-27
Title
Snap Pixel < 1.5.8 - Admin+ Stored XSS
Slug
snap-pixel
Published
2023-10-16
Title
Snap Pixel < 1.6.0 - Arbitrary Settings Update via CSRF
Slug
snapapp
Published
2014-04-25
Title
Snapapp <= 1.5 - Multiple Cross-Site Scripting (XSS)
Slug
snapshot-backup
Published
2024-08-19
Title
Snapshot Backup <= 2.1.1 - Stored XSS via CSRF
Slug
snapwidget-wp-instagram-widget
Published
2025-04-01
Title
SnapWidget Social Photo Feed Widget <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
snapwidget-wp-instagram-widget
Published
2025-09-22
Title
SnapWidget Social Photo Feed Widget <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
snazzy-archives
Published
2014-08-01
Title
snazzy-archives <= 1.7.1 - swf/tagcloud.swf tagcloud Parameter XSS
Slug
snazzy-maps
Published
2018-07-24
Title
Snazzy Maps < 1.1.5 - Multiple Cross-Site Scripting (XSS)
Slug
snazzyadmin-wp-admin-theme
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
snazzyadmin-wp-admin-theme
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
snazzyadmin-wp-admin-theme
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sneeit-framework
Published
2025-11-24
Title
Sneeit Framework < 8.4 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback