WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
soundrise-music
Published
2025-03-13
Title
SoundRise Music < 1.7.1 - Authenticated (Subscriber+) Arbitrary Options Update
Slug
soundslides
Published
2025-11-26
Title
Soundslides <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundslides Shortcode
Slug
soundst-seo-search
Published
2025-08-12
Title
SoundSt SEO Search <= 1.2.3 - Reflected Cross-Site Scripting
Slug
soundy-audio-playlist
Published
2018-01-09
Title
Soundy Audio Playlist <= 4.6 - XSS
Slug
soundy-background-music
Published
2016-03-12
Title
Soundy Background Music <= 3.1 - Reflected Cross-Site Scripting (XSS)
Slug
soundy-background-music
Published
2018-01-18
Title
Soundy Background Music <= 3.9 - Cross-Site Scripting (XSS)
Slug
sourceafrica
Published
2015-09-01
Title
sourceAFRICA <= 0.1.3 - Unauthenticated Cross-Site Scripting (XSS)
Slug
sourceplay-navermap
Published
2025-03-24
Title
sourceplay-navermap <= 0.0.2 - Missing Authorization
Slug
south-pole-the-offset-movement
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
south-pole-the-offset-movement
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sovratec-case-management
Published
2024-10-17
Title
Sovratec Case Management <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
sp-announcement
Published
2024-07-10
Title
WP Announcement < 2.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
sp-blog-designer
Published
2024-11-20
Title
SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Slug
sp-blog-designer
Published
2025-03-31
Title
SP Blog Designer <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
sp-client-document-manager
Published
2014-12-02
Title
SP Client Document Manager < 2.4.4 - Multiple SQL Injection
Slug
sp-client-document-manager
Published
2015-03-31
Title
SP Project & Document Manager <= 2.5.3 - Blind SQL Injection
Slug
sp-client-document-manager
Published
2015-03-31
Title
SP Project Document Manager <= 2.5.3 - Blind SQL Injection
Slug
sp-client-document-manager
Published
2016-03-07
Title
SP Projects & Document Manager < 2.6.0.0 - Multiple Vulnerabilities
Slug
sp-client-document-manager
Published
2021-05-25
Title
SP Project & Document Manager < 4.22 - Authenticated Shell Upload
Slug
sp-client-document-manager
Published
2021-08-16
Title
SP Project & Document Manager < 4.26 - Reflected Cross-Site Scripting
Slug
sp-client-document-manager
Published
2021-06-28
Title
SP Project & Document Manager < 4.24 - Subscriber+ Shell Upload
Slug
sp-client-document-manager
Published
2022-06-28
Title
SP Project & Document Manager < 4.58 - Sensitive File Disclosure
Slug
sp-client-document-manager
Published
2022-08-10
Title
SP Project & Document Manager < 4.62 - Reflected Cross-Site Scripting
Slug
sp-client-document-manager
Published
2023-06-29
Title
SP Project & Document Manager < 4.68 - Subscriber+ Insecure Direct Object References
Slug
sp-client-document-manager
Published
2023-06-30
Title
SP Project & Document Manager < 4.68 - Admin+ Stored XSS