WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
streamweasels-kick-integration
Published
2024-10-28
Title
SW Kick Integration - Blocks and Shortcodes for Embedding Kick Streams < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-kick-embed Shortcode
Slug
streamweasels-kick-integration
Published
2025-06-13
Title
StreamWeasels Kick Integration < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via status-classic-offline-text Parameter
Slug
streamweasels-kick-integration
Published
2025-07-28
Title
StreamWeasels Kick Integration < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
streamweasels-kick-integration
Published
2025-09-05
Title
StreamWeasels Kick Integration < 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via vodsChannel Parameter
Slug
streamweasels-twitch-integration
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
streamweasels-twitch-integration
Published
2024-03-25
Title
StreamWeasels Twitch Integration < 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
streamweasels-twitch-integration
Published
2024-04-22
Title
StreamWeasels Twitch Integration < 1.8.0 - Unauthenticated Sensitive Information Exposure
Slug
streamweasels-twitch-integration
Published
2024-10-18
Title
StreamWeasels Twitch Integration < 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-twitch-embed Shortcode
Slug
streamweasels-twitch-integration
Published
2025-07-28
Title
StreamWeasels Twitch Integration < 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
streamweasels-youtube-integration
Published
2024-10-28
Title
StreamWeasels YouTube Integration < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-youtube-embed Shortcode
Slug
streamweasels-youtube-integration
Published
2024-11-27
Title
StreamWeasels YouTube Integration < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
streamweasels-youtube-integration
Published
2025-07-28
Title
StreamWeasels YouTube Integration < 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
string-locator
Published
2022-03-01
Title
String Locator < 2.5.0 - Admin+ Arbitrary File Read
Slug
string-locator
Published
2022-08-08
Title
String Locator < 2.6.0 - Authenticated PHAR Deserialization
Slug
string-locator
Published
2024-08-23
Title
String Locator < 2.6.6 - Reflected Cross-Site Scripting
Slug
string-locator
Published
2025-01-20
Title
String Locator < 2.6.7 - Unauthenticated PHP Object Injection
Slug
stripe-manager
Published
2024-12-14
Title
WP Simple Pay Lite Manager <= 1.4 - Authenticated (Administrator+) SQL Injection
Slug
stripe-payments
Published
2021-01-05
Title
Stripe Payments < 2.0.40 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
stripe-payments
Published
2022-06-27
Title
Accept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scripting
Slug
stripe-payments
Published
2023-11-23
Title
Accept Stripe Payments < 2.0.80 - Insecure Direct Object Reference
Slug
stripe-payments
Published
2024-08-06
Title
Accept Stripe Payments < 2.0.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode
Slug
stripshow
Published
2014-09-24
Title
stripShow 2.5.2 - SQL Injection
Slug
strong-testimonials
Published
2018-07-28
Title
Strong Testimonials <= 2.31.4 - Multiple Authenticated Cross-Site Scripting (XSS)
Slug
strong-testimonials
Published
2020-02-01
Title
Strong Testimonials < 2.40.1 - Stored Cross Site Scripting (XSS)
Slug
strong-testimonials
Published
2021-06-30
Title
Strong Testimonials < 2.51.3 - Unauthorised AJAX Call