WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
spicy-blogroll
Published
2014-08-01
Title
Spicy Blogroll - spicy-blogroll-ajax.php Remote File Inclusion
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.3.0 - Multiple Vulnerabilities
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.1.0 - "many_sp_calendar" Cross-Site Scripting
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.0.1 - front_end/spidercalendarbig.php date Parameter XSS
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.0.1 - spidercalendarbig_seemore.php calendar_id Parameter SQL Injection
Slug
spider-catalog
Published
2014-08-01
Title
Spider Catalog - Cross-Site Scripting & SQL Injection Vulnerabilities
Slug
spider-contacts
Published
2024-07-10
Title
SpiderContacts <= 1.1.7 - Reflected XSS
Slug
spider-elements
Published
2025-04-04
Title
Spider Elements – Addons for Elementor < 1.6.6 - Contributor+ Stored XSS
Slug
spider-elements
Published
2025-04-07
Title
Spider Elements – Addons for Elementor < 1.6.7 - Missing Authorization
Slug
spider-event-calendar
Published
2015-02-13
Title
Calendar by WD < 1.4.14 - Unauthenticated SQL Injection
Slug
spider-event-calendar
Published
2017-04-10
Title
Calendar by WD <= 1.5.51 - Authenticated Blind SQL Injection
Slug
spider-event-calendar
Published
2017-05-02
Title
Calendar by WD < 1.5.52 - Admin+ SQL injection
Slug
spider-event-calendar
Published
2022-01-13
Title
SpiderCalendar <= 1.5.65 - Reflected Cross-Site Scripting
Slug
spider-facebook
Published
2014-09-07
Title
Spider Facebook < 1.0.10 - Authenticated SQL Injection
Slug
spider-facebook
Published
2015-02-11
Title
Facebook (spider-facebook) <= 1.0.10 - Cross-Site Scripting (XSS)
Slug
spider-facebook
Published
2017-05-02
Title
WordPress Facebook <= 1.0.13 - Authenticated SQL Injection
Slug
spider-facebook
Published
2023-10-17
Title
Spider Facebook <= 1.0.15 - Reflected XSS
Slug
spider-facebook
Published
2023-10-25
Title
Spider Facebook <= 1.0.15 - Cross-Site Request Forgery
Slug
spider-faq
Published
2024-03-29
Title
SpiderFAQ <= 1.3.2 - Reflected Cross-Site Scripting
Slug
spideranalyse
Published
2021-09-09
Title
Spideranalyse <= 0.0.1 - Reflected Cross-Site Scripting
Slug
spiderdisplay
Published
2025-01-16
Title
SpiderDisplay <= 1.9.1 - Reflected Cross-Site Scripting
Slug
spiderpowa-embed-pdf
Published
2025-01-16
Title
Spiderpowa Embed PDF <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spiffy
Published
2014-08-01
Title
Spiffy XSPF Player 0.1 - playlist.php playlist_id Parameter SQL Injection
Slug
spiffy-calendar
Published
2017-06-02
Title
Spiffy Calendar < 3.3.0 - Reflected Cross-Site Scripting (XSS)
Slug
spiffy-calendar
Published
2022-02-10
Title
Spiffy Calendar < 4.9.1 - Arbitrary Event Deletion via CSRF