WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sp-client-document-manager
Published
2023-06-30
Title
SP Project & Document Manager < 4.68 - Subscriber+ SQLi
Slug
sp-client-document-manager
Published
2024-02-02
Title
SP Project & Document Manager < 4.70 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
sp-client-document-manager
Published
2024-03-29
Title
SP Project & Document Manager <= 4.70 - Missing Authorization Stored Cross-Site Scripting
Slug
sp-client-document-manager
Published
2024-04-24
Title
SP Project & Document Manager <= 4.71 - Subscriber+ File Download via IDOR
Slug
sp-client-document-manager
Published
2024-04-24
Title
SP Project & Document Manager <= 4.71 - Data Update via IDOR
Slug
sp-client-document-manager
Published
2024-04-16
Title
SP Project & Document Manager <= 4.71 - Authenticated (Author+) SQL Injeciton
Slug
sp-client-document-manager
Published
2024-05-07
Title
SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update
Slug
sp-client-document-manager
Published
2024-04-29
Title
SP Project & Document Manager <= 4.69 - Missing Authorization
Slug
sp-client-document-manager
Published
2024-06-21
Title
SP Project & Document Manager <= 4.71 - Authenticated (Subscriber+) Directory Traversal
Slug
sp-news-and-widget
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sp-rental-manager
Published
2021-09-08
Title
SP Rental Manager <= 1.5.3 - Unauthenticated SQL Injection
Slug
spacer
Published
2022-10-28
Title
Spacer < 3.0.7 - Admin+ Stored XSS
Slug
spacer
Published
2025-01-06
Title
Spacer <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Limited Information Disclosure
Slug
spam-byebye
Published
2019-01-10
Title
spam-byebye <= 2.2.1 - Cross-Site Scripting (XSS)
Slug
spam-byebye
Published
2025-03-11
Title
Spam Byebye <= 2.2.4 - Cross-Site Request Forgery
Slug
spam-control-xforwc
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
spam-free-wordpress
Published
2014-08-01
Title
Spam Free Plugin 1.9.2 - Multiple Script Direct Request Path Disclosure
Slug
spam-free-wordpress
Published
2014-08-01
Title
Spam Free Plugin 1.9.2 - IP Blocklist Restriction Bypass
Slug
spam-stopper
Published
2025-04-17
Title
spam-stopper <= 3.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
spambam
Published
2008-01-15
Title
Spambam <= 2.1 - Authorisation Bypass
Slug
spamreferrerblock
Published
2023-06-02
Title
Download SpamReferrerBlock <= 2.22 - Admin+ Stored XSS
Slug
spamreferrerblock
Published
2023-06-02
Title
Download SpamReferrerBlock <= 2.22 - Cross-Site Request Forgery
Slug
spamtask
Published
2014-08-01
Title
spamtask - ofc_upload_image.php Arbitrary File Upload
Slug
spark-gf-failed-submissions
Published
2025-04-10
Title
Spark GF Failed Submissions < 1.3.6 - Reflected Cross-Site Scripting
Slug
sparkle-demo-importer
Published
2024-06-21
Title
Sparkle Demo Importer < 1.4.8 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import