WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
smooth-dynamic-slider
Published
2025-01-16
Title
Smooth Dynamic Slider <= 1.0 - Reflected Cross-Site Scriptign
Slug
smooth-gallery-replacement
Published
2024-07-11
Title
Smooth Gallery Replacement <= 1.0 - CSRF to Stored XSS
Slug
smooth-page-scroll-updown-buttons
Published
2021-05-17
Title
Smooth Scroll Page Up/Down Buttons < 1.4 - Authenticated Stored XSS
Slug
smooth-page-scroll-updown-buttons
Published
2021-06-15
Title
Smooth Scroll Page Up/Down Buttons < 1.4.1 - Authenticated Stored XSS via psb_positioning
Slug
smooth-scrolling-links-ssl
Published
2023-10-22
Title
Smooth Scroll Links <= 1.1.0 - Arbitrary Settings Update via CSRF
Slug
smooth-slider
Published
2015-07-15
Title
Smooth Slider < 2.7 - Authenticated SQL Injection
Slug
smooth-slider
Published
2018-01-10
Title
Smooth Slider <= 2.8.6 - Authenticated SQL Injection
Slug
smooth-streaming-player
Published
2024-11-22
Title
Silverlight Video Player <= 1.0 - Cross-Site Request Forgery
Slug
smoothness-slider-shortcode
Published
2025-01-07
Title
Smoothness Slider Shortcode <= v1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
smoothscroller
Published
2023-06-19
Title
Smoothscroller < 1.1.0 - Admin+ Stored XSS
Slug
smoove-elementor
Published
2024-12-06
Title
Smoove connector for Elementor forms < 4.2.0 - Reflected Cross-Site Scripting
Slug
smpl-shortcodes
Published
2023-10-29
Title
Simple Shortcodes <= 1.0.20 - Contributor+ Stored Cross-Site Scripting
Slug
sms-alert
Published
2021-08-02
Title
SMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site Scripting
Slug
sms-alert
Published
2024-02-26
Title
SMS Alert Order Notifications – WooCommerce < 3.7.0 - Cross-Site Request Forgery
Slug
sms-alert
Published
2024-10-28
Title
SMSAlert - WooCommerce < 3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode
Slug
sms-alert
Published
2025-01-06
Title
SMS Alert Order Notifications – WooCommerce < 3.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
sms-alert
Published
2025-02-23
Title
SMS Alert Order Notifications – WooCommerce < 3.7.9 - Reflected Cross-Site Scripting
Slug
sms-alert
Published
2025-03-02
Title
SMS Alert Order Notifications – WooCommerce < 3.7.9 - Unauthenticated SQL Injection
Slug
sms-alert
Published
2025-03-31
Title
SMS Alert Order Notifications < 3.8.0 - Unauthenticated Account Takeover/Privilege Escalation
Slug
sms-alert
Published
2025-05-09
Title
SMS Alert Order Notifications – WooCommerce < 3.8.2 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function
Slug
sms-alert
Published
2025-05-09
Title
SMS Alert Order Notifications – WooCommerce < 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode
Slug
sms-alert
Published
2025-05-08
Title
SMS Alert Order Notifications – WooCommerce < 3.8.2 - Unauthenticated SQL Injection
Slug
sms-alert
Published
2025-08-15
Title
SMS Alert Order Notifications < 3.8.6 - Unauthenticated SQL Injection
Slug
sms-alert
Published
2025-12-05
Title
SMS Alert Order Notifications < 3.8.9 - Missing Authorization
Slug
sms-alert
Published
2026-02-18
Title
SMS Alert Order Notifications < 3.9.1 - Missing Authorization