WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-simple-firewall
Published
2026-02-18
Title
Shield Security: Blocks Bots, Protects Users, and Prevents Security Breaches < 21.0.10 - Missing Authorization to Authenticated (Subscriber+) Email MFA Update
Slug
wp-simple-firewall
Published
2026-02-18
Title
Shield Security < 21.0.10 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter
Slug
wp-simple-firewall
Published
2026-02-18
Title
Shield Security < 21.0.10 - Cross-Site Request Forgery to SQL Injection
Slug
wp-simple-galleries
Published
2023-10-29
Title
WP Simple Galleries <= 1.34 - Contributor+ PHP Object Injection
Slug
wp-simple-html-sitemap
Published
2023-10-18
Title
WP Simple HTML Sitemap < 2.6 - Contributor+ Stored XSS
Slug
wp-simple-html-sitemap
Published
2023-10-25
Title
WP Simple HTML Sitemap < 2.3 - Reflected XSS
Slug
wp-simple-html-sitemap
Published
2023-12-07
Title
WP Simple HTML Sitemap < 2.8 - Missing Authorization
Slug
wp-simple-html-sitemap
Published
2024-04-16
Title
WordPress Simple HTML Sitemap < 2.9 - Reflected Cross-Site Scripting
Slug
wp-simple-html-sitemap
Published
2024-09-24
Title
WordPress Simple HTML Sitemap < 3.2 - Authenticated (Admin+) SQL Injection
Slug
wp-simple-html-sitemap
Published
2025-04-01
Title
WP Simple HTML Sitemap < 3.6 - Missing Authorization
Slug
wp-simple-login-registration-plugin
Published
2014-08-01
Title
Simple Login Registration 1.0.1 - XSS
Slug
wp-simple-maintenance-mode
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-simple-post-view
Published
2023-10-03
Title
Post View Count < 2.0.1 - Post View Data Reset via CSRF
Slug
wp-simple-redirect
Published
2026-01-15
Title
Simple Redirect <= 1.1 - Reflected Cross-Site Scripting
Slug
wp-simple-sitemap
Published
2025-01-03
Title
WP Simple Sitemap <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-simple-slideshow
Published
2025-03-12
Title
WP Simple Slideshow <= 1.0 - Reflected Cross-Site Scripting
Slug
wp-simple-spreadsheet-fetcher-for-google
Published
2020-01-06
Title
WP Simple Spreadsheet Fetcher For Google < 0.3.7 - Arbitrary API Key update via CSRF
Slug
wp-simplemail
Published
2014-08-01
Title
SimpleMail 1.0.6 - Stored XSS
Slug
wp-simpleweather
Published
2025-02-03
Title
WP SimpleWeather <= 0.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-sinotype
Published
2025-10-02
Title
WP SinoType <= 1.0 - Cross-Site Request Forgery
Slug
wp-site-protect
Published
2017-12-19
Title
WP Site Protect 1.0 - Cross-Site Scripting (XSS)
Slug
wp-site-protector
Published
2023-09-29
Title
WP Site Protector <= 2.0 - Settings Update via CSRF
Slug
wp-sitemap
Published
2025-02-24
Title
WP Sitemap <= 1.0 - Authenticated (Contributor+) SQL Injection
Slug
wp-sitemap-page
Published
2021-09-07
Title
WP Sitemap Page < 1.7.0 - Admin+ Stored Cross Site Scripting
Slug
wp-skitter-slideshow
Published
2025-03-11
Title
Skitter Slideshow <= 2.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting