WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
strong-testimonials
Published
2023-01-10
Title
Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode
Slug
strong-testimonials
Published
2023-02-21
Title
Strong Testimonials < 3.0.3 - Contributor+ Stored XSS
Slug
strong-testimonials
Published
2023-12-28
Title
Strong Testimonials < 3.1.11 - Settings Update via CSRF
Slug
strong-testimonials
Published
2024-04-03
Title
Strong Testimonials < 3.1.12 - Contributor+ Stored XSS
Slug
strong-testimonials
Published
2024-06-06
Title
Strong Testimonials < 3.1.13 - Authenticated(Contributor+) Improper Authorization to Views Modification
Slug
strong-testimonials
Published
2024-09-30
Title
Strong Testimonials < 3.1.17 - Missing Authorization
Slug
strong-testimonials
Published
2025-02-23
Title
Strong Testimonials < 3.2.4 - Missing Authorization
Slug
strong-testimonials
Published
2025-07-14
Title
Strong Testimonials < 3.2.12 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields
Slug
strong-testimonials
Published
2025-11-05
Title
Strong Testimonials < 3.2.17 - Unauthenticated Arbitrary Shortcode Execution
Slug
strong-testimonials
Published
2025-12-29
Title
Strong Testimonials < 3.2.19 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update
Slug
structured-content
Published
2022-12-28
Title
Structured Content < 1.5.1 - Contributor+ Stored XSS in Shortcode
Slug
structured-content
Published
2023-12-05
Title
Structured Content < 1.6 - Contributor+ PHP Object Injection
Slug
structured-content
Published
2023-12-05
Title
Structured Content < 1.6 - Contributor+ Stored XSS
Slug
structured-content
Published
2024-02-02
Title
Structured Content < 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Classic Editor Shortcode
Slug
structured-content
Published
2024-08-16
Title
Structured Content < 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
structured-content
Published
2025-03-03
Title
Structured Content (JSON-LD) #wpsc < 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode
Slug
structured-content
Published
2025-03-27
Title
Structured Content < 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
structured-content
Published
2025-07-23
Title
Structured Content < 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode
Slug
structured-content
Published
2025-07-24
Title
Structured Content < 1.7.0 - Contributor Stored XSS
Slug
strx-magic-floating-sidebar-maker
Published
2025-01-16
Title
Strx Magic Floating Sidebar Maker <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
studiocart
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
studiocart
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
studiocart
Published
2025-11-03
Title
Studiocart <= 2.9.0 - Reflected XSS
Slug
stumble-for-wordpress
Published
2026-01-06
Title
Stumble! for WordPress <= 1.1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
style-admin
Published
2025-01-16
Title
Style Admin <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting