WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
stumble-for-wordpress
Published
2026-01-06
Title
Stumble! for WordPress <= 1.1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
style-admin
Published
2025-01-16
Title
Style Admin <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
style-it
Published
2014-04-25
Title
Style It <= 1.0 - XSS
Slug
style-manager
Published
2025-04-17
Title
Style Manager <= 2.2.7 - Cross-Site Request Forgery to Settings Update
Slug
style-tweaker
Published
2025-02-03
Title
Style Tweaker <= 0.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
stylebidet
Published
2026-02-13
Title
StyleBidet <= 1.0.0 - Reflected Cross-Site Scripting
Slug
styler-for-ninja-forms-lite
Published
2024-11-12
Title
Styler for Ninja Forms <= 3.3.4 - Authenticated (Subscriber+) Arbitrary Option Deletion via deactivate_license
Slug
stylish-cost-calculator
Published
2021-11-01
Title
Stylish Cost Calculator < 7.0.4 - Subscriber+ Unauthorised AJAX Calls to Stored XSS
Slug
stylish-cost-calculator
Published
2025-11-14
Title
Stylish Cost Calculator < 8.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stylish-cost-calculator
Published
2026-01-09
Title
Stylish Cost Calculator <= 8.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stylish-cost-calculator-premium
Published
2023-03-20
Title
Stylish Cost Calculator Premium < 7.9.0 - Unauthenticated Stored XSS
Slug
stylish-google-sheet-reader
Published
2025-02-03
Title
Stylish Google Sheet Reader < 4.1 - Reflected Cross-Site Scripting
Slug
stylish-google-sheet-reader
Published
2025-03-04
Title
Stylish Google Sheet Reader < 4.1 - Reflected XSS
Slug
stylish-internal-links
Published
2024-11-08
Title
Stylish Internal Links <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stylish-order-form-builder
Published
2026-01-06
Title
Stylish Order Form Builder <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'product_name' Parameter
Slug
stylish-price-list
Published
2021-09-29
Title
Stylish Price List < 6.9.1 - Subscriber+ Arbitrary Image Upload
Slug
stylish-price-list
Published
2021-09-29
Title
Stylish Price List < 6.9.0 - Unauthenticated Arbitrary Image Upload
Slug
stylish-price-list
Published
2023-12-27
Title
Stylish Price List < 7.0.18 - Missing Authorization
Slug
stylish-price-list
Published
2024-07-01
Title
Stylish Price List < 7.1.8 - Contributor+ Stored XSS
Slug
stylish-price-list
Published
2025-03-03
Title
Stylish Price List < 7.1.12 - Contributor+ Stored XSS
Slug
stylish-price-list
Published
2025-11-30
Title
Stylish Price List < 7.2.3 - Missing Authorization
Slug
stylist
Published
2023-01-13
Title
Extra Block Design, Style, CSS for ANY Gutenberg Blocks <= 0.2.6 - Cross-Site Request Forgery
Slug
subaccounts-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
subaccounts-for-woocommerce
Published
2024-11-20
Title
Subaccounts for WooCommerce < 1.6.1 - Reflected Cross-Site Scripting
Slug
subaccounts-for-woocommerce
Published
2025-05-12
Title
Subaccounts for WooCommerce < 1.6.7 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover