WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
stop-user-enumeration
Published
2025-06-26
Title
Stop User Enumeration < 1.7.3 - Protection Bypass
Slug
stop-wp-emails-going-to-spam
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
stopbadbots
Published
2021-08-06
Title
Block and Stop Bad Bots < 6.60 - Authenticated SQL Injections
Slug
stopbadbots
Published
2021-08-25
Title
Block and Stop Bad Bots < 6.62 - Reflected Cross-Site Scripting
Slug
stopbadbots
Published
2021-11-15
Title
StopBadBots < 6.67 - Unauthenticated SQL Injection
Slug
stopbadbots
Published
2022-03-08
Title
WP Block and Stop Bad Bots < 6.88 - Unauthenticated SQLi
Slug
stopbadbots
Published
2022-03-16
Title
WP Block and Stop Bad Bots < 6.930 - Unauthenticated SQLi
Slug
stopbadbots
Published
2022-11-21
Title
StopBadBots < 7.24 - Subscriber+ Arbitrary Plugin Installation
Slug
stopbadbots
Published
2023-05-09
Title
StopBadBots < 7.32 - Admin+ Stored XSS
Slug
stopbadbots
Published
2024-05-29
Title
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection < 10.24 - Missing Authorization to Information Expsoure
Slug
stopbadbots
Published
2025-08-27
Title
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection < 11.59 - Insufficient Authorization to Unauthenticated Blocklist Bypass
Slug
stops-core-theme-and-plugin-updates
Published
2019-03-28
Title
Stops Core Theme And Plugin Updates < 8.0.5 - Insufficient Restrictions on Option Changes
Slug
stopwords-for-comments
Published
2026-01-13
Title
Stopwords for comments <= 1.1 - Missing Authorization to Cross-Site Request Forgery
Slug
store-credit-for-woocommerce
Published
2025-01-06
Title
Store credit / Gift cards for woocommerce < 1.0.49.47 - Reflected Cross-Site Scripting
Slug
store-locator
Published
2014-08-01
Title
Store Locator < 2.12 - Cross-Site Request Forgery
Slug
store-locator
Published
2015-02-19
Title
WordPress Store Locator 3.33.1 - SQL Injection
Slug
store-locator
Published
2014-11-05
Title
WordPress Store Locator 2.3-3.11 - SQL Injection
Slug
store-locator
Published
2023-05-24
Title
Store Locator <= 3.98.7 - Settings Update via CSRF
Slug
store-locator
Published
2024-12-19
Title
Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion
Slug
store-locator
Published
2025-01-16
Title
Store Locator for WordPress with Google Maps – LotsOfLocales <= 3.98.10 - Unauthenticated Local File Inclusion
Slug
store-locator-le
Published
2014-08-01
Title
Google Maps via Store Locator - Multiple Vulnerabilities
Slug
store-locator-le
Published
2014-08-01
Title
store-locator-le - SQL Injection
Slug
store-locator-le
Published
2015-01-17
Title
Store Locator Plus 4.2.23 - Email Injection
Slug
store-locator-le
Published
2016-08-05
Title
Store Locator Plus for WordPress <= 4.5.10 - Authenticated Cross-Site Scripting (XSS)
Slug
store-locator-le
Published
2021-04-26
Title
Store Locator Plus < 5.9 - Unauthenticated Stored XSS