WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
strong-testimonials
Published
2025-02-23
Title
Strong Testimonials < 3.2.4 - Missing Authorization
Slug
strong-testimonials
Published
2025-07-14
Title
Strong Testimonials < 3.2.12 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields
Slug
strong-testimonials
Published
2025-11-05
Title
Strong Testimonials < 3.2.17 - Unauthenticated Arbitrary Shortcode Execution
Slug
strong-testimonials
Published
2025-12-29
Title
Strong Testimonials < 3.2.19 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update
Slug
strong-testimonials
Published
2025-12-28
Title
Strong Testimonials < 3.2.21 - Missing Authorization
Slug
strong-testimonials
Published
2026-04-07
Title
Strong Testimonials < 3.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode
Slug
structured-content
Published
2022-12-28
Title
Structured Content < 1.5.1 - Contributor+ Stored XSS in Shortcode
Slug
structured-content
Published
2023-12-05
Title
Structured Content < 1.6 - Contributor+ PHP Object Injection
Slug
structured-content
Published
2023-12-05
Title
Structured Content < 1.6 - Contributor+ Stored XSS
Slug
structured-content
Published
2024-02-02
Title
Structured Content < 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Classic Editor Shortcode
Slug
structured-content
Published
2024-08-16
Title
Structured Content < 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
structured-content
Published
2025-03-03
Title
Structured Content (JSON-LD) #wpsc < 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode
Slug
structured-content
Published
2025-03-27
Title
Structured Content < 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
structured-content
Published
2025-07-23
Title
Structured Content < 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode
Slug
structured-content
Published
2025-07-24
Title
Structured Content < 1.7.0 - Contributor Stored XSS
Slug
strx-magic-floating-sidebar-maker
Published
2025-01-16
Title
Strx Magic Floating Sidebar Maker <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
studio99-wp-monitor
Published
2026-02-21
Title
Studio99 WP Monitor < 1.0.4 - Missing Authorization
Slug
studiocart
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
studiocart
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
studiocart
Published
2025-11-03
Title
Studiocart <= 2.9.0 - Reflected XSS
Slug
stumble-for-wordpress
Published
2026-01-06
Title
Stumble! for WordPress <= 1.1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
style-admin
Published
2025-01-16
Title
Style Admin <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
style-it
Published
2014-04-25
Title
Style It <= 1.0 - XSS
Slug
style-manager
Published
2025-04-17
Title
Style Manager <= 2.2.7 - Cross-Site Request Forgery to Settings Update
Slug
style-tweaker
Published
2025-02-03
Title
Style Tweaker <= 0.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting