WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-svg-images
Published
2024-06-20
Title
WP SVG Images < 4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Slug
wp-svg-upload
Published
2025-03-05
Title
WP SVG Upload <= 1.0.0 - Author+ Stored XSS via SVG
Slug
wp-swimteam
Published
2015-07-03
Title
Swim Team < 1.45 - Local File Inclusion
Slug
wp-symposium
Published
2014-08-01
Title
WP Symposium 13.04 - Unvalidated Redirect
Slug
wp-symposium
Published
2014-08-01
Title
WP Symposium 13.02 - Cross-Site Scripting (XSS)
Slug
wp-symposium
Published
2014-08-01
Title
WP Symposium < 12.12 - Multiple SQL Injections
Slug
wp-symposium
Published
2014-08-01
Title
WP Symposium <= 12.07.07 - Authentication Bypass
Slug
wp-symposium
Published
2014-08-01
Title
WP Symposium < 12.07.01 - Multiple SQL Injections
Slug
wp-symposium
Published
2014-08-01
Title
WP Symposium < 11.12.24 - Remote File Upload Code Execution
Slug
wp-symposium
Published
2014-08-01
Title
WP Symposium < 11.12.08 - Cross-Site Scripting (XSS)
Slug
wp-symposium
Published
2014-08-01
Title
WP Symposium < 11.08.18 - SQL Injection
Slug
wp-symposium
Published
2014-11-26
Title
WP Symposium <= 14.10 - XSS & SQL Injection
Slug
wp-symposium
Published
2014-12-11
Title
WP Symposium <= 14.11 - Unauthenticated Shell Upload
Slug
wp-symposium
Published
2015-04-14
Title
WP Symposium < 15.4 - SQL Injection
Slug
wp-symposium
Published
2015-08-09
Title
WP Symposium < 15.8 - Unauthenticated SQL Injection
Slug
wp-symposium
Published
2015-08-10
Title
WP Symposium < 15.8 - Blind SQL Injection
Slug
wp-symposium
Published
2015-09-06
Title
WP Symposium <= 15.8.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
wp-symposium-pro
Published
2016-01-07
Title
WP Symposium Pro < 16.01 - Unspecified
Slug
wp-syntax
Published
2014-08-01
Title
WP-Syntax < 0.9.10 - Remote Comm& Execution
Slug
wp-syntax
Published
2025-03-28
Title
WP-Syntax <= 1.2 - Author+ Potential ReDoS
Slug
wp-system
Published
2024-12-05
Title
WP System <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-system-info
Published
2025-09-22
Title
WP System Information <= 1.5 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
wp-system-log
Published
2022-04-11
Title
Wbcom Designs Plugins - Subscriber+ Arbitrary Plugin Installation, Activation and Deactivation
Slug
wp-t-wap
Published
2021-09-09
Title
WP-T-Wap <= 1.13.2 - Reflected Cross-Site Scripting
Slug
wp-tabber-widget
Published
2025-09-22
Title
Wp tabber widget <= 4.0 - Authenticated (Contributor+) SQL Injection