WordPress Plugin Vulnerabilities | Page 81 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

snillrik-restaurant-menu

Published

2026-01-06

Title

Snillrik Restaurant < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'menu_style' Shortcode Attribute

Slug

snipe-nginx-cache

Published

2025-01-16

Title

Cache Sniper for Nginx <= 1.0.4.2 - Missing Authorization

Slug

Published

2014-08-01

Title

Sniplets 1.1.2 - (RFI/XSS/RCE) Multiple Vulnerabilities

Slug

Published

2025-01-16

Title

Snippy <= 1.4.1 - Reflected Cross-Site Scripting

Slug

snow-monkey-forms

Published

2023-05-15

Title

Snow Monkey Forms < 5.0.7 - Unauthenticated Path Traversal

Slug

snow-monkey-forms

Published

2026-01-27

Title

Snow Monkey Forms < 12.0.4 - Unauthenticated Arbitrary File Deletion

Slug

Published

2025-04-02

Title

Snow Storm < 1.4.7 - Reflected Cross-Site Scripting

Slug

Published

2025-03-18

Title

Snow Storm < 1.4.7 - Admin+ Stored XSS

Slug

so-called-air-quotes

Published

2025-03-28

Title

So-Called Air Quotes <= 0.1 - Unauthenticated Arbitrary Shortcode Execution

Slug

so-pinyin-slugs

Published

2023-11-07

Title

Pinyin Slugs < 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

so-widgets-bundle

Published

2023-11-27

Title

so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion

Slug

so-widgets-bundle

Published

2024-01-29

Title

SiteOrigin Widgets Bundle < 1.58.2 - Contributor+ Stored XSS

Slug

so-widgets-bundle

Published

2024-02-12

Title

SiteOrigin Widgets Bundle < 1.58.4 - Contributor+ Stored Cross-Site Scripting

Slug

so-widgets-bundle

Published

2024-02-12

Title

SiteOrigin Widgets Bundle < 1.58.3 - Contributor+ Stored Cross-Site Scripting

Slug

so-widgets-bundle

Published

2024-03-04

Title

SiteOrigin Widgets Bundle < 1.58.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

so-widgets-bundle

Published

2024-05-21

Title

SiteOrigin Widgets Bundle < 1.61.0 - Contributor+ Stored XSS via siteorigin_widget Shortcode

Slug

so-widgets-bundle

Published

2024-06-10

Title

SiteOrigin Widgets Bundle < 1.62.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget

Slug

so-widgets-bundle

Published

2024-07-30

Title

SiteOrigin Widgets Bundle < 1.62.3 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget

Slug

so-widgets-bundle

Published

2024-12-10

Title

SiteOrigin Widgets Bundle < 1.64.1 - Missing Authorization

Slug

so-widgets-bundle

Published

2025-06-24

Title

SiteOrigin Widgets Bundle < 1.69.0 - Contributor+ Stored XSS via `data-url` DOM Element Attribute

Slug

so-widgets-bundle

Published

2026-02-17

Title

SiteOrigin Widgets Bundle < 1.71.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution

Slug

soccer-engine-lite

Published

2024-05-07

Title

Soccer Engine – Soccer Plugin for WordPress < 1.13 - Cross-Site Request Forgery

Slug

soccer-live-scores

Published

2025-05-07

Title

Soccer Live Scores <= 1.0.5 - Cross-Site Request Forgery

Slug

Published

2021-09-20

Title

Sociable <= 4.3.4.1 - Admin+ Stored Cross-Site Scripting

Slug

social-analytics

Published

2025-01-16

Title

Social Analytics <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting