WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
spendeonline
Published
2025-10-24
Title
SpendeOnline.org < 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spendino
Published
2024-10-25
Title
GRÜN spendino Spendenformular <= 1.0.1 - Unauthenticated Arbitrary Options Update
Slug
spice-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
spice-blocks
Published
2025-04-17
Title
Spice Blocks <= 2.0.7.6 - Missing Authorization
Slug
spice-blocks
Published
2025-06-04
Title
Spice Blocks < 2.0.7.5 - Unauthenticated Arbitrary File Download
Slug
spice-post-slider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
spice-post-slider
Published
2023-10-20
Title
Carousel, Recent Post Slider and Banner Slider < 2.1 - Contributor+ Stored Cross-Site Scripting
Slug
spice-starter-sites
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
spice-starter-sites
Published
2024-09-16
Title
Spice Starter Sites <= 1.2.5 - Reflected Cross-Site Scripting
Slug
spice-starter-sites
Published
2024-09-30
Title
Spice Starter Sites <= 1.2.5 - Missing Authorization to Unauthenticated Demo Content Import
Slug
spicebox
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
spicy-blogroll
Published
2014-08-01
Title
Spicy Blogroll - spicy-blogroll-ajax.php Remote File Inclusion
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.3.0 - Multiple Vulnerabilities
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.1.0 - "many_sp_calendar" Cross-Site Scripting
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.0.1 - front_end/spidercalendarbig.php date Parameter XSS
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.0.1 - spidercalendarbig_seemore.php calendar_id Parameter SQL Injection
Slug
spider-catalog
Published
2014-08-01
Title
Spider Catalog - Cross-Site Scripting & SQL Injection Vulnerabilities
Slug
spider-contacts
Published
2024-07-10
Title
SpiderContacts <= 1.1.7 - Reflected XSS
Slug
spider-elements
Published
2025-04-04
Title
Spider Elements – Addons for Elementor < 1.6.6 - Contributor+ Stored XSS
Slug
spider-elements
Published
2025-04-07
Title
Spider Elements – Addons for Elementor < 1.6.7 - Missing Authorization
Slug
spider-event-calendar
Published
2015-02-13
Title
Calendar by WD < 1.4.14 - Unauthenticated SQL Injection
Slug
spider-event-calendar
Published
2017-04-10
Title
Calendar by WD <= 1.5.51 - Authenticated Blind SQL Injection
Slug
spider-event-calendar
Published
2017-05-02
Title
Calendar by WD < 1.5.52 - Admin+ SQL injection
Slug
spider-event-calendar
Published
2022-01-13
Title
SpiderCalendar <= 1.5.65 - Reflected Cross-Site Scripting
Slug
spider-facebook
Published
2014-09-07
Title
Spider Facebook < 1.0.10 - Authenticated SQL Injection