WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sunshine-photo-cart
Published
2024-02-12
Title
Sunshine Photo Cart: Free Client Galleries for Photographers < 3.1 - Unauthenticated Sensitive Information Exposure via Invoice
Slug
sunshine-photo-cart
Published
2024-03-25
Title
Sunshine Photo Cart < 3.1.2 - Reflected Cross-Site Scripting
Slug
sunshine-photo-cart
Published
2024-03-26
Title
Sunshine Photo Cart: Free Client Photo Galleries for Photographers < 3.1.2 - Unauthenticated PHP Object Injection
Slug
sunshine-photo-cart
Published
2024-08-07
Title
Sunshine Photo Cart < 3.2.2 - Missing Authorization
Slug
sunshine-photo-cart
Published
2024-08-28
Title
Sunshine Photo Cart < 3.2.6 - Reflected Cross-Site Scripting
Slug
sunshine-photo-cart
Published
2024-09-23
Title
Sunshine Photo Cart < 3.2.10 - Missing Authorization
Slug
sunshine-photo-cart
Published
2024-09-25
Title
Sunshine Photo Cart < 3.2.9 - Missing Authorization
Slug
sunshine-photo-cart
Published
2024-10-21
Title
Sunshine Photo Cart < 3.2.10 - Missing Authorization
Slug
sunshine-photo-cart
Published
2024-10-24
Title
Sunshine Photo Cart < 3.2.11 - Open Redirect
Slug
sunshine-photo-cart
Published
2025-03-28
Title
Sunshine Photo Cart < 3.4.11 - Unauthenticated PHP Object Injection
Slug
sunshine-photo-cart
Published
2025-06-03
Title
Sunshine Photo Cart < 3.4.12 - Subscriber Privilege Escalation
Slug
sunshine-photo-cart
Published
2025-08-29
Title
Sunshine Photo Cart < 3.5.4 - Missing Authorization
Slug
sunshine-photo-cart
Published
2025-12-30
Title
Sunshine Photo Cart < 3.5.7.2 - Missing Authorization
Slug
super-addons-for-elementor
Published
2024-10-31
Title
Super Addons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
super-blank
Published
2025-09-23
Title
Super Blank < 1.3.0 - Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
super-block-slider
Published
2025-01-24
Title
Super Block Slider < 2.8 - Missing Authorization
Slug
super-captcha
Published
2014-08-01
Title
Super CAPTCHA <= 2.2.4 - SQL Injection
Slug
super-forms
Published
2021-01-28
Title
Super Forms < 4.9.703 - Unauthenticated PHP File Upload to RCE
Slug
super-forms
Published
2022-01-31
Title
Superforms < 6.0.4 - Reflected Cross-Site Scripting
Slug
super-forms-bundle
Published
2021-01-28
Title
Super Forms < 4.9.703 - Unauthenticated PHP File Upload to RCE
Slug
super-interactive-maps
Published
2020-10-21
Title
SuperStoreFinder Plugins - Unauthenticated Arbitrary File Upload
Slug
super-interactive-maps
Published
2021-03-08
Title
SuperStoreFinder & SuperInteractiveMaps - Unauthenticated SQL Injections
Slug
super-interactive-maps
Published
2026-01-08
Title
Super Interactive Maps <= 2.3 - Reflected Cross-Site Scripting
Slug
super-notes
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
super-notes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting