WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sumome
Published
2024-04-05
Title
Sumo < 1.35 - Cross-Site Request Forgery
Slug
sumomemberships
Published
2025-10-15
Title
SUMO Memberships for WooCommerce < 7.8.0 - Cross-Site Request Forgery
Slug
sumomemberships
Published
2025-08-27
Title
SUMO Memberships for WooCommerce < 7.8.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
sumomemberships
Published
2025-08-21
Title
SUMO Memberships for WooCommerce <= 7.8.0 - Subscriber+ Privilege Escalation
Slug
sumup-payment-gateway-for-woocommerce
Published
2026-01-19
Title
SumUp Payment Gateway For WooCommerce < 2.7.10 - Missing Authorization
Slug
sunshine-photo-cart
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Slug
sunshine-photo-cart
Published
2022-12-15
Title
Sunshine Photo Cart < 2.9.15 - Reflected XSS
Slug
sunshine-photo-cart
Published
2022-12-01
Title
Sunshine Photo Cart Plugin < 2.9.14 - Image Location Update via CSRF
Slug
sunshine-photo-cart
Published
2023-09-05
Title
Sunshine Photo Cart < 3.0 - Insecure Direct Object Reference to Order Manipulation
Slug
sunshine-photo-cart
Published
2024-02-12
Title
Sunshine Photo Cart: Free Client Galleries for Photographers < 3.1 - Unauthenticated Sensitive Information Exposure via Invoice
Slug
sunshine-photo-cart
Published
2024-03-25
Title
Sunshine Photo Cart < 3.1.2 - Reflected Cross-Site Scripting
Slug
sunshine-photo-cart
Published
2024-03-26
Title
Sunshine Photo Cart: Free Client Photo Galleries for Photographers < 3.1.2 - Unauthenticated PHP Object Injection
Slug
sunshine-photo-cart
Published
2024-08-07
Title
Sunshine Photo Cart < 3.2.2 - Missing Authorization
Slug
sunshine-photo-cart
Published
2024-08-28
Title
Sunshine Photo Cart < 3.2.6 - Reflected Cross-Site Scripting
Slug
sunshine-photo-cart
Published
2024-09-23
Title
Sunshine Photo Cart < 3.2.10 - Missing Authorization
Slug
sunshine-photo-cart
Published
2024-09-25
Title
Sunshine Photo Cart < 3.2.9 - Missing Authorization
Slug
sunshine-photo-cart
Published
2024-10-21
Title
Sunshine Photo Cart < 3.2.10 - Missing Authorization
Slug
sunshine-photo-cart
Published
2024-10-24
Title
Sunshine Photo Cart < 3.2.11 - Open Redirect
Slug
sunshine-photo-cart
Published
2025-03-28
Title
Sunshine Photo Cart < 3.4.11 - Unauthenticated PHP Object Injection
Slug
sunshine-photo-cart
Published
2025-06-03
Title
Sunshine Photo Cart < 3.4.12 - Subscriber Privilege Escalation
Slug
sunshine-photo-cart
Published
2025-08-29
Title
Sunshine Photo Cart < 3.5.4 - Missing Authorization
Slug
sunshine-photo-cart
Published
2025-12-30
Title
Sunshine Photo Cart < 3.5.7.2 - Missing Authorization
Slug
sunshine-photo-cart
Published
2026-01-23
Title
Sunshine Photo Cart < 3.5.7.3 - Missing Authorization
Slug
sunshine-photo-cart
Published
2026-01-27
Title
Sunshine Photo Cart < 3.5.7.1 - Missing Authorization
Slug
super-addons-for-elementor
Published
2024-10-31
Title
Super Addons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting