WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
scratch-win-giveaways-for-website-facebook
Published
2024-12-02
Title
Scratch & Win – Giveaways and Contests < 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
scratch-win-giveaways-for-website-facebook
Published
2025-01-03
Title
Scratch & Win – Giveaways and Contests < 2.8.0 - Cross-Site Request Forgery via reset_installation Function
Slug
scratch-win-giveaways-for-website-facebook
Published
2025-02-17
Title
Scratch & Win – Giveaways and Contests < 2.9.0 - Missing Authorization to Unauthenticated Coupon Creation
Slug
scratchblocks-for-wp
Published
2026-05-11
Title
scratchblocks for WP <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'element' Shortcode Attribute
Slug
screenshot-machine-shortcode
Published
2025-01-17
Title
JSM Screenshot Machine Shortcode < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
screets-lcx
Published
2019-06-26
Title
Live Chat Unlimited <= 2.8.3 - Stored Cross-Site Scripting (XSS)
Slug
screets-lcx
Published
2026-06-04
Title
Live Chat Unlimited <= 2.8.3 - Unauthenticated Stored Cross-Site Scripting
Slug
scribble-maps
Published
2021-08-13
Title
Scribble Maps <= 1.2 - Reflected Cross-Site Scripting
Slug
script-compressor
Published
2025-04-09
Title
Script Compressor <= 1.7.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
script-planner
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
script-planner
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
scriptless-social-sharing
Published
2023-02-09
Title
Scriptless Social Sharing < 3.2.2 - Contributor+ Stored XSS
Slug
scriptless-social-sharing
Published
2025-04-16
Title
Scriptless Social Sharing < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
scripts-n-styles
Published
2023-05-18
Title
Scripts n Styles < 3.5.8 - Admin+ Stored XSS
Slug
scripts-organizer
Published
2022-09-05
Title
Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
Slug
scroll-baner
Published
2021-09-20
Title
Scroll Baner <= 1.0 - CSRF to RCE
Slug
scroll-post-excerpt
Published
2023-10-12
Title
Scroll post excerpt <= 8.0 - Admin+ Stored XSS
Slug
scroll-rss-excerpt
Published
2025-12-29
Title
Scroll rss excerpt <= 5.0 - Reflected Cross-Site Scripting
Slug
scroll-styler
Published
2025-01-27
Title
Scroll Styler <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
scroll-to-top-builder
Published
2025-01-16
Title
Scroll Top – WordPress Scroll to Top <= 1.3.3 - Reflected Cross-Site Scripting
Slug
scroll-to-up
Published
2025-06-19
Title
Scroll UP <= 2.0 - Reflected Cross-Site Scripting
Slug
scroll-top
Published
2022-08-23
Title
Scroll To Top < 1.4.1 - Admin+ Stored Cross-Site Scripting
Slug
scroll-top-advanced
Published
2025-01-16
Title
Scroll Top Advanced <= 2.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
scroll-triggered-animations
Published
2023-11-09
Title
Animator < 3.0.11 - Missing Authorization to Plugin Settings Update
Slug
scroll-triggered-animations
Published
2024-10-15
Title
Animator < 3.0.16 - Reflected Cross-Site Scripting