WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
speedycache
Published
2026-07-27
Title
SpeedyCache < 1.3.9 - Admin+ Arbitrary File Read via Path Traversal
Slug
speedycache
Published
2026-10-09
Title
SpeedyCache < 1.4.3 - Unauthenticated Sensitive Information Exposure via Missing comment_author Cookie Check on Cache Write
Slug
spendeonline
Published
2025-10-24
Title
SpendeOnline.org < 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spendino
Published
2024-10-25
Title
GRÜN spendino Spendenformular <= 1.0.1 - Unauthenticated Arbitrary Options Update
Slug
sphere-manager
Published
2026-02-13
Title
Sphere Manager <= 1.0.2 - Authenticated (Contributor+) Cross-Site Scripting via 'width' Shortcode Attribute
Slug
spice-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
spice-blocks
Published
2025-04-17
Title
Spice Blocks <= 2.0.7.6 - Missing Authorization
Slug
spice-blocks
Published
2025-06-04
Title
Spice Blocks < 2.0.7.5 - Unauthenticated Arbitrary File Download
Slug
spice-post-slider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
spice-post-slider
Published
2023-10-20
Title
Carousel, Recent Post Slider and Banner Slider < 2.1 - Contributor+ Stored Cross-Site Scripting
Slug
spice-post-slider
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
spice-starter-sites
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
spice-starter-sites
Published
2024-09-16
Title
Spice Starter Sites <= 1.2.5 - Reflected Cross-Site Scripting
Slug
spice-starter-sites
Published
2024-09-30
Title
Spice Starter Sites <= 1.2.5 - Missing Authorization to Unauthenticated Demo Content Import
Slug
spicebox
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
spiceforms-form-builder
Published
2026-01-13
Title
SpiceForms Form Builder <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
spicy-blogroll
Published
2014-08-01
Title
Spicy Blogroll - spicy-blogroll-ajax.php Remote File Inclusion
Slug
spider-analyser
Published
2026-07-29
Title
Spider Analyser – WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 - Unauthenticated Remote Code Execution
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.3.0 - Multiple Vulnerabilities
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.1.0 - "many_sp_calendar" Cross-Site Scripting
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.0.1 - front_end/spidercalendarbig.php date Parameter XSS
Slug
spider-calendar
Published
2014-08-01
Title
Spider Calendar 1.0.1 - spidercalendarbig_seemore.php calendar_id Parameter SQL Injection
Slug
spider-catalog
Published
2014-08-01
Title
Spider Catalog - Cross-Site Scripting & SQL Injection Vulnerabilities
Slug
spider-contacts
Published
2024-07-10
Title
SpiderContacts <= 1.1.7 - Reflected XSS
Slug
spider-elements
Published
2025-04-04
Title
Spider Elements – Addons for Elementor < 1.6.6 - Contributor+ Stored XSS