WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-slide-categorywise
Published
2024-11-04
Title
Wp Slide Categorywise <= 1.1 - Reflected Cross-Site Scripting
Slug
wp-sliding-logindashboard-panel
Published
2025-06-12
Title
WP Sliding Login/Dashboard Panel <= 2.1.1 - Cross-Site Request Forgery to Settings Update
Slug
wp-slimstat
Published
2017-03-07
Title
WP SlimStat <= 3.5.5 - Overview URI Stored XSS
Slug
wp-slimstat
Published
2014-08-01
Title
WP SlimStat 2.8.4 - wp-content/plugins/wp-slimstat/admin/view/panel1.php s Parameter XSS
Slug
wp-slimstat
Published
2015-01-25
Title
WP SlimStat <= 3.9.2 - Stored Cross-Site Scripting (XSS)
Slug
wp-slimstat
Published
2015-01-06
Title
WP SlimStat <= 3.9.1 - Cross-Site Scripting (XSS)
Slug
wp-slimstat
Published
2015-02-24
Title
WP Slimstat <= 3.9.5 - Weak Cryptographic Keys Leading to SQL Injections
Slug
wp-slimstat
Published
2015-07-26
Title
WP Slimstat < 4.1.6 - Referer Header Cross-Site Scripting (XSS)
Slug
wp-slimstat
Published
2019-05-21
Title
WP Slimstat <= 4.8 - Unauthenticated Stored XSS from Visitors
Slug
wp-slimstat
Published
2019-07-08
Title
WP Slimstat <= 4.8.3 - CSRF to Stored XSS and Setting Updates
Slug
wp-slimstat
Published
2022-12-19
Title
Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS
Slug
wp-slimstat
Published
2023-02-27
Title
Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection
Slug
wp-slimstat
Published
2023-04-05
Title
Slimstat Analytics < 4.9.4 - Subscriber+ SQL Injection
Slug
wp-slimstat
Published
2023-05-11
Title
Slimstat Analytics < 5.0.5 - Reflected XSS
Slug
wp-slimstat
Published
2023-05-11
Title
Slimstat Analytics < 5.0.5 - Admin+ SQLi
Slug
wp-slimstat
Published
2023-08-28
Title
Slimstat Analytics < 5.0.10 - Contributor+ Stored XSS
Slug
wp-slimstat
Published
2023-08-29
Title
Slimstat Analytics < 5.0.9 - Admin+ Stored XSS
Slug
wp-slimstat
Published
2023-09-11
Title
Slimstat Analytics < 5.0.10 - Contributor+ SQL Injection
Slug
wp-slimstat
Published
2024-02-01
Title
SlimStat Analytics < 5.1.4 - Subscriber+ Stored XSS
Slug
wp-slimstat
Published
2024-10-14
Title
Slimstat Analytics < 5.2.7 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-slimstat
Published
2025-12-18
Title
SlimStat Analytics < 5.3.3 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-slimstat
Published
2026-01-08
Title
SlimStat Analytics < 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter
Slug
wp-slimstat
Published
2026-01-08
Title
SlimStat Analytics < 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters
Slug
wp-slimstat
Published
2026-01-27
Title
Slimstat Analytics < 5.3.3 - Reflected Cross-Site Scripting
Slug
wp-slimstat
Published
2026-02-10
Title
SlimStat Analytics < 5.3.2 - Authenticated (Subscriber+) SQL Injection via `args` Parameter