WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
spam-byebye
Published
2019-01-10
Title
spam-byebye <= 2.2.1 - Cross-Site Scripting (XSS)
Slug
spam-byebye
Published
2025-03-11
Title
Spam Byebye <= 2.2.4 - Cross-Site Request Forgery
Slug
spam-control-xforwc
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
spam-free-wordpress
Published
2014-08-01
Title
Spam Free Plugin 1.9.2 - Multiple Script Direct Request Path Disclosure
Slug
spam-free-wordpress
Published
2014-08-01
Title
Spam Free Plugin 1.9.2 - IP Blocklist Restriction Bypass
Slug
spam-stopper
Published
2025-04-17
Title
spam-stopper <= 3.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
spambam
Published
2008-01-15
Title
Spambam <= 2.1 - Authorisation Bypass
Slug
spamreferrerblock
Published
2023-06-02
Title
Download SpamReferrerBlock <= 2.22 - Admin+ Stored XSS
Slug
spamreferrerblock
Published
2023-06-02
Title
Download SpamReferrerBlock <= 2.22 - Cross-Site Request Forgery
Slug
spamtask
Published
2014-08-01
Title
spamtask - ofc_upload_image.php Arbitrary File Upload
Slug
spark-gf-failed-submissions
Published
2025-04-10
Title
Spark GF Failed Submissions < 1.3.6 - Reflected Cross-Site Scripting
Slug
sparkle-demo-importer
Published
2024-06-21
Title
Sparkle Demo Importer < 1.4.8 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import
Slug
sparkle-elementor-kit
Published
2024-11-28
Title
Sparkle Elementor Kit <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sparkle-elementor-kit
Published
2025-04-04
Title
Sparkle Elementor Kit <= 2.0.9 - Authenticated (Contributor+) Local File Inclusion
Slug
sparkpost
Published
2023-04-19
Title
SparkPost < 2.3.6 - Admin+ Stored XSS
Slug
sparrow
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sparrow
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
spatialmatch-free-lifestyle-search
Published
2024-11-28
Title
SpatialMatch IDX <= 3.0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
spatialmatch-free-lifestyle-search
Published
2025-03-23
Title
SpatialMatch IDX <= 3.0.9 - Reflected Cross-Site Scripting
Slug
speakout
Published
2021-08-09
Title
SpeakOut! Email Petitions < 2.13.3 - Reflected Cross-Site Scripting
Slug
speakout
Published
2022-03-07
Title
SpeakOut! Email Petitions < 2.14.15.1 - Unauthenticated SQLi
Slug
speakout
Published
2025-01-06
Title
SpeakOut! Email Petitions < 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
speakpipe-voicemail-for-websites
Published
2025-03-24
Title
SpeakPipe <= 0.2 - Cross-Site Request Forgery
Slug
specia-companion
Published
2025-04-07
Title
Specia Companion <= 6.2 - Missing Authorization
Slug
special-box-for-content
Published
2024-03-29
Title
Special Box for Content <= 1 - Authenticated (Administrator+) Stored Cross-Site Scripting