WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
stm-megamenu
Published
2024-06-05
Title
MegaMenu < 2.3.13 - Unauthenticated Local File Inclusion
Slug
stm-motors-events
Published
2025-06-03
Title
Motors - Events <= 1.4.7 - Unauthenticated Local File Inclusion
Slug
stock-exporter-for-woocommerce
Published
2023-08-16
Title
Stock Exporter for WooCommerce < 1.2.0 - Reflected XSS
Slug
stock-in
Published
2021-06-02
Title
Stock in & out <= 1.0.4 - Authenticated SQL Injection
Slug
stock-in
Published
2021-05-27
Title
Stock in & out <= 1.0.4 - Reflected Cross-Site Scripting (XSS)
Slug
stock-locations-for-woocommerce
Published
2024-01-16
Title
Stock Locations for WooCommerce < 2.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
stock-locations-for-woocommerce
Published
2025-06-07
Title
Stock Locations for WooCommerce < 2.8.7 - Missing Authorization
Slug
stock-market-charts-from-finviz
Published
2023-02-20
Title
Stock market charts from finviz < 1.0.2 - Admin+ Stored XSS
Slug
stock-message
Published
2025-09-22
Title
Stock Message <= 1.1.0 - Cross-Site Request Forgery
Slug
stock-quotes-list
Published
2023-09-04
Title
Stock Quotes List < 2.9.12 - Contributor+ Stored XSS
Slug
stock-snapshot-for-woocommerce
Published
2025-10-10
Title
Stock History & Reports Manager for WooCommerce < 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stock-sync-for-woocommerce
Published
2023-08-18
Title
Stock Sync for WooCommerce < 2.4.1 - Reflected XSS
Slug
stock-sync-with-google-sheet-for-woocommerce
Published
2025-03-26
Title
FlexStock < 3.13.2 - Authenticated (Administrator+) SQL Injection
Slug
stock-ticker
Published
2023-03-13
Title
Stock Ticker < 3.23.1 - Missing Authorization in AJAX Actions
Slug
stock-ticker
Published
2023-08-10
Title
Stock Ticker < 3.23.3 - Reflected XSS
Slug
stock-ticker
Published
2023-08-11
Title
Stock Ticker < 3.23.4 - Reflected XSS
Slug
stock-ticker
Published
2023-12-27
Title
Stock Ticker < 3.23.5 - Authenticated (Contributor+) Stored Cross-Site Scritping
Slug
stock-ticker
Published
2024-06-28
Title
Stock Ticker < 3.24.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock_ticker Shortcode
Slug
stock-ticker
Published
2026-03-06
Title
Stock Ticker < 3.26.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Template
Slug
stock-tools
Published
2025-11-20
Title
Stock Tools <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stockdio-historical-chart
Published
2021-01-20
Title
Stockdio Historical Chart < 2.8.1 - Reflected Cross-Site Scripting (XSS)
Slug
stockdio-historical-chart
Published
2025-01-30
Title
Stockdio Historical Chart < 2.8.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stockholm-core
Published
2024-05-07
Title
Stockholm Core < 2.4.2 - Reflected Cross-Site Scripting
Slug
stockholm-core
Published
2024-05-07
Title
Stockholm Core < 2.4.2 - Authenticated (Contributor+) Local File Inclusion
Slug
stockholm-core
Published
2025-10-18
Title
Stockholm Core <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting