WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
social-stream-design
Published
2025-04-09
Title
WP Social Stream Designer <= 1.3 - Authenticated (Administrator+) SQL Injection
Slug
social-streams
Published
2025-07-22
Title
Social Streams <= 1.2.1 - Subscriber+ Privilege Escalation
Slug
social-tape
Published
2021-07-19
Title
Social Tape <= 1.0 - CSRF to Stored XSS
Slug
social-testimonials-and-reviews-widget
Published
2023-10-03
Title
Social Proof Testimonials and Reviews by Repuso < 5.02 - CSRF
Slug
social-testimonials-and-reviews-widget
Published
2023-10-18
Title
Social proof testimonials and reviews by Repuso < 5.00 - Missing Authorization
Slug
social-testimonials-and-reviews-widget
Published
2025-01-14
Title
Social proof testimonials and reviews by Repuso < 5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
social-testimonials-and-reviews-widget
Published
2025-04-01
Title
Social proof testimonials and reviews by Repuso < 5.22 - Missing Authorization
Slug
social-testimonials-and-reviews-widget
Published
2025-10-16
Title
Social proof testimonials and reviews by Repuso < 5.30 - Missing Authorization
Slug
social-warfare
Published
2019-03-21
Title
Social Warfare <= 3.5.2 - Unauthenticated Arbitrary Settings Update
Slug
social-warfare
Published
2019-03-25
Title
Social Warfare <= 3.5.2 - Unauthenticated Remote Code Execution (RCE)
Slug
social-warfare
Published
2023-01-05
Title
Social Warfare < 4.3.1 - Subscriber+ Post Meta Deletion
Slug
social-warfare
Published
2023-01-05
Title
Social Warfare < 4.4.0 - Post Meta Deletion via CSRF
Slug
social-warfare
Published
2023-11-06
Title
Social Sharing Plugin - Social Warfare < 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
social-warfare
Published
2024-04-22
Title
Social Sharing Plugin – Social Warfare < 4.4.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
social-warfare
Published
2024-05-09
Title
Social Sharing Plugin – Social Warfare < 4.4.6 - Cross-Site Request Forgery
Slug
social-warfare
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
social-warfare
Published
2025-02-19
Title
Social Warfare < 4.5.6 - Contributor+ Stored XSS
Slug
social-web-suite
Published
2024-10-02
Title
Social Web Suite – Social Media Auto Post, Social Media Auto Publish < 4.1.12 - Directory Traversal to Arbitrary File Download
Slug
social-web-suite
Published
2026-10-06
Title
Social Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update
Slug
social-web-suite
Published
2026-10-09
Title
Social Web Suite <= 4.1.12 - Unauthenticated Blind SQLi via Unset Shared Secret
Slug
social-web-suite
Published
2026-10-28
Title
Social Web Suite <= 4.1.12 - Unauthenticated SQL Injection via 'exclude_posts' Parameter
Slug
social2blog
Published
2025-01-16
Title
Social2Blog <= 0.2.990 - Reflected Cross-Site Scripting
Slug
socialdriver-framework
Published
2024-04-26
Title
Swift Framework < 2024.0.0 - Contributor+ Stored XSS via Shortcode
Slug
socialdriver-framework
Published
2024-06-21
Title
Swift Framework < 2024.04.30 - Admin+ Stored XSS via Settings
Slug
socialdriver-framework
Published
2024-06-22
Title
Swift Framework < 2024.04.30 - Reflected XSS