WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
social-polls-by-opinionstage
Published
2026-01-19
Title
Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.6.25 - Unauthenticated Stored Cross-Site Scripting
Slug
social-profilr-display-social-network-profile
Published
2025-12-31
Title
Social Profilr <= 1.0 - Cross-Site Request Forgery
Slug
social-proof-testimonials-slider
Published
2023-03-29
Title
Social Proof (Testimonial) Slider < 2.2.4 - Admin+ Stored XSS
Slug
social-proof-testimonials-slider
Published
2024-11-12
Title
Social Proof (Testimonials) Slider <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via spslider-block Shortcode
Slug
social-pug
Published
2016-12-09
Title
Social Share Buttons - Social Pug <= 1.2.5 - Authenticated Cross-Site Scripting (XSS)
Slug
social-pug
Published
2021-07-08
Title
Grow Social < 1.19.0 - Reflected Cross-Site Scripting
Slug
social-pug
Published
2023-12-01
Title
Social Pug < 1.30.1 - Missing Authorization via multiple admin_init actions
Slug
social-pug
Published
2024-01-11
Title
Hubbub Lite < 1.32.0 - Admin+ Stored XSS
Slug
social-pug
Published
2024-03-11
Title
Hubbub Lite < 1.33.1 - Unauthenticated Password Protected Posts Access
Slug
social-pug
Published
2024-03-27
Title
Hubbub Lite – Fast, Reliable Social Network Sharing Buttons < 1.33.2 - PHP Object Injection
Slug
social-pug
Published
2024-09-27
Title
Hubbub Lite < 1.34.4 - Admin+ Stored XSS
Slug
social-pug
Published
2025-09-22
Title
Hubbub Lite < 1.36.0- Subscriber+ Sensitive Information Exposure
Slug
social-pug
Published
2025-11-05
Title
Hubbub Lite < 1.36.1 - Reflected Cross-Site Scripting
Slug
social-pug-author-box
Published
2025-01-15
Title
Social Pug: Author Box <= 1.0.0 - Reflected Cross-Site Scripting
Slug
social-rocket
Published
2020-07-22
Title
Social Sharing Plugin < 1.2.10 - Cross-Site Request Forgery in Settings
Slug
social-rocket
Published
2022-09-19
Title
Social Rocket < 1.3.3 - Admin+ Stored Cross-Site Scripting
Slug
social-rocket
Published
2024-06-27
Title
Social Rocket < 1.3.4 - Reflected Cross-Site Scripting
Slug
social-rocket
Published
2025-01-06
Title
Social Rocket – Social Sharing Plugin <= 1.3.4 - Missing Authorization to Settings Update
Slug
social-rocket
Published
2025-01-06
Title
Social Rocket <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
social-share-and-social-locker-arsocial
Published
2024-11-09
Title
Social Share And Social Locker – ARSocial < 1.4.2 - Admin+ Stored XSS
Slug
social-share-and-social-locker-arsocial
Published
2025-04-02
Title
Social Share And Social Locker <= 1.4.2 - Unauthenticated SQL Injection
Slug
social-share-and-social-locker-arsocial
Published
2025-04-02
Title
Social Share And Social Locker <= 1.4.1 - Reflected Cross-Site Scripting
Slug
social-share-boost
Published
2023-04-19
Title
Social Share Boost < 4.5 - Contributor+ Stored XSS
Slug
social-share-boost
Published
2023-07-07
Title
Social Share Boost < 4.5 - Admin+ Stored XSS
Slug
social-share-boost
Published
2023-08-28
Title
Social Share Boost <= 4.5 - Plugin Settings Update via CSRF