WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
spider-facebook
Published
2015-02-11
Title
Facebook (spider-facebook) <= 1.0.10 - Cross-Site Scripting (XSS)
Slug
spider-facebook
Published
2017-05-02
Title
WordPress Facebook <= 1.0.13 - Authenticated SQL Injection
Slug
spider-facebook
Published
2023-10-17
Title
Spider Facebook <= 1.0.15 - Reflected XSS
Slug
spider-facebook
Published
2023-10-25
Title
Spider Facebook <= 1.0.15 - Cross-Site Request Forgery
Slug
spider-faq
Published
2024-03-29
Title
SpiderFAQ <= 1.3.2 - Reflected Cross-Site Scripting
Slug
spideranalyse
Published
2021-09-09
Title
Spideranalyse <= 0.0.1 - Reflected Cross-Site Scripting
Slug
spiderdisplay
Published
2025-01-16
Title
SpiderDisplay <= 1.9.1 - Reflected Cross-Site Scripting
Slug
spiderpowa-embed-pdf
Published
2025-01-16
Title
Spiderpowa Embed PDF <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spiffy
Published
2014-08-01
Title
Spiffy XSPF Player 0.1 - playlist.php playlist_id Parameter SQL Injection
Slug
spiffy-calendar
Published
2017-06-02
Title
Spiffy Calendar < 3.3.0 - Reflected Cross-Site Scripting (XSS)
Slug
spiffy-calendar
Published
2022-02-10
Title
Spiffy Calendar < 4.9.1 - Arbitrary Event Deletion via CSRF
Slug
spiffy-calendar
Published
2022-02-10
Title
Spiffy Calendar < 4.9.1 - Subscriber+ Arbitrary Event Edition/Deletion via IDOR
Slug
spiffy-calendar
Published
2023-05-03
Title
Spiffy Calendar < 4.9.4 - Reflected XSS
Slug
spiffy-calendar
Published
2023-04-07
Title
Spiffy Calendar < 4.9.2 - SQL Injection
Slug
spiffy-calendar
Published
2023-12-01
Title
Spiffy Calendar < 4.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spiffy-calendar
Published
2024-01-12
Title
Spiffy Calendar < 4.9.9 - Broken Access Control
Slug
spiffy-calendar
Published
2024-03-29
Title
Spiffy Calendar < 4.9.11 - Missing Authorization
Slug
spiffy-calendar
Published
2024-03-28
Title
Spiffy Calendar < 4.9.10 - Reflected Cross-Site Scripting
Slug
spiffy-calendar
Published
2024-07-10
Title
Spiffy Calendar < 4.9.12 - Authenticated (Administrator+) SQL Injection
Slug
spiffy-calendar
Published
2024-09-12
Title
Spiffy Calendar < 4.9.14 - Reflected Cross-Site Scripting
Slug
spiffy-calendar
Published
2024-09-12
Title
Spiffy Calendar < 4.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spiffy-calendar
Published
2024-08-28
Title
Spiffy Calendar < 4.9.13 - Authenticated (Admin+) SQL Injection
Slug
spiffy-calendar
Published
2026-01-05
Title
Spiffy Calendar < 5.0.8 - Missing Authorization
Slug
spin360
Published
2024-03-29
Title
Spin 360 deg and 3D Model Viewer <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spiraclethemes-site-library
Published
2025-05-07
Title
Spiraclethemes Site Library < 1.5.5 - Contributor+ Stored XSS