WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-slimstat
Published
2024-02-01
Title
SlimStat Analytics < 5.1.4 - Subscriber+ Stored XSS
Slug
wp-slimstat
Published
2024-10-14
Title
Slimstat Analytics < 5.2.7 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-slimstat
Published
2025-12-18
Title
SlimStat Analytics < 5.3.3 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-slimstat
Published
2026-01-08
Title
SlimStat Analytics < 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter
Slug
wp-slimstat
Published
2026-01-08
Title
SlimStat Analytics < 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters
Slug
wp-slimstat-ex
Published
2014-08-01
Title
SlimStat-Ex - Open Flash Chart Arbitrary File Creation
Slug
wp-smart-contracts
Published
2022-11-07
Title
WPSmartContracts < 1.3.12 - Author+ SQLi
Slug
wp-smart-contracts
Published
2025-04-09
Title
WPSmartContracts <= 2.0.12 - Unauthenticated SQL Injection
Slug
wp-smart-crm-invoices-free
Published
2020-08-31
Title
WP Smart CRM & Invoices FREE <= 1.8.7 - Authenticated Stored Cross-Site Scripting
Slug
wp-smart-editor
Published
2024-01-15
Title
WP Smart Editor <= 1.3.3 - Reflected Cross-Site Scripting
Slug
wp-smart-export
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-smart-export
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-smart-flexslider
Published
2025-07-14
Title
Smart Flexslider <= 2.5 - Reflected Cross-Site Scripting
Slug
wp-smart-import
Published
2021-04-13
Title
WP Smart Import < 1.0.1 - Auhenticated Server-side Request Forgery
Slug
wp-smart-import
Published
2022-12-06
Title
WP Smart Import < 1.0.3 - Reflected Cross-Ste Scripting
Slug
wp-smart-import
Published
2024-03-25
Title
WordPress Importer < 1.0.5 - Reflected Cross-Site Scripting
Slug
wp-smart-import
Published
2024-04-16
Title
WP Smart Import : Import any XML File to WordPress < 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
wp-smart-import
Published
2025-01-03
Title
WP Smart Import : Import any XML File to WordPress < 1.1.3 - Reflected Cross-Site Scripting
Slug
wp-smart-import
Published
2025-05-21
Title
WP Smart Import < 1.1.4 - Unauthenticated Local File Inclusion
Slug
wp-smart-preloader
Published
2023-01-20
Title
WP Smart Preloader < 1.15.1 - Admin+ Stored XSS
Slug
wp-smart-tool-tip
Published
2025-01-16
Title
WP Smart Tooltip <= 1.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-smart-tv
Published
2025-01-14
Title
WP Smart TV < 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-smiley
Published
2015-05-29
Title
WP Smiley <= 1.4.1 - CSRF & Cross-Site Scripting (XSS)
Slug
wp-sms
Published
2021-07-26
Title
WP SMS < 5.4.13 - Authenticated Stored Cross-Site Scripting
Slug
wp-sms
Published
2021-06-30
Title
WP SMS < 5.4.9.1 - Reflected Cross-Site Scripting (XSS)