WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-shoutbox-live-chat
Published
2023-04-03
Title
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQLi
Slug
wp-show-login-form
Published
2025-03-11
Title
wordpress login form to anywhere <= 0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-show-more
Published
2024-10-25
Title
WP show more <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_more Shortcode
Slug
wp-show-posts
Published
2023-01-11
Title
WP Show Posts < 1.1.4 - Contributor+ Stored XSS
Slug
wp-show-posts
Published
2024-03-01
Title
WP Show Posts < 1.1.5 - Information Exposure
Slug
wp-show-posts
Published
2024-04-16
Title
WP Show Posts < 1.1.6 - Improper Authorization to Information Exposure
Slug
wp-show-stats
Published
2025-04-09
Title
WP Show Stats <= 1.5 - Cross-Site Request Forgery
Slug
wp-showhide
Published
2023-01-10
Title
WP-ShowHide < 1.05 - Contributor+ Stored XSS via Shortcode
Slug
wp-showhide
Published
2025-12-15
Title
WP-ShowHide < 1.06 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-sifr
Published
2025-11-29
Title
sIFR <= 0.6.8.1 - Cross-Site Request Forgery
Slug
wp-signals
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-simple-anchors-links
Published
2024-10-30
Title
WP Simple Anchors Links <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpanchor Shortcode
Slug
wp-simple-booking-calendar
Published
2021-08-06
Title
WP Simple Booking Calendar <= 2.0.6 (before 07/12/2021) - Authenticated SQL Injection
Slug
wp-simple-booking-calendar
Published
2023-12-27
Title
WP Simple Booking Calendar < 2.0.8.5 - Cross-Site Request Forgery
Slug
wp-simple-booking-calendar
Published
2024-09-12
Title
WP Simple Booking Calendar < 2.0.11 - Reflected Cross-Site Scripting
Slug
wp-simple-booking-calendar
Published
2025-04-16
Title
WP Simple Booking Calendar < 2.0.14 - Missing Authorization
Slug
wp-simple-events
Published
2023-03-17
Title
WP Simple Events <= 1.0 - Admin+ Cross Site Scripting
Slug
wp-simple-firewall
Published
2022-01-19
Title
Shield Security < 13.0.6 - Admin+ Stored Cross-Site Scripting
Slug
wp-simple-firewall
Published
2023-04-25
Title
Shield Security < 17.0.18 - Unauthenticated Stored XSS
Slug
wp-simple-firewall
Published
2023-04-25
Title
Shield Security < 17.0.18 - Subscriber+ Arbitrary Log Entry Creation
Slug
wp-simple-firewall
Published
2024-01-16
Title
Shield Security < 18.5.8 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-simple-firewall
Published
2024-02-05
Title
Shield Security – Smart Bot Blocking & Intrusion Prevention Security < 18.5.10 - Unauthenticated Local File Inclusion
Slug
wp-simple-firewall
Published
2024-06-01
Title
Shield Security – Smart Bot Blocking & Intrusion Prevention Security < 19.1.11 - Cross-Site Request Forgery
Slug
wp-simple-firewall
Published
2024-08-05
Title
Shield Security < 20.0.6 - Reflected XSS
Slug
wp-simple-firewall
Published
2026-01-15
Title
Shield Security < 21.0.10 - Authenticated (Subscriber+) Insecure Direct Object Reference to Disable Google Authenticator