WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
super-blank
Published
2025-09-23
Title
Super Blank < 1.3.0 - Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
super-block-slider
Published
2025-01-24
Title
Super Block Slider < 2.8 - Missing Authorization
Slug
super-captcha
Published
2014-08-01
Title
Super CAPTCHA <= 2.2.4 - SQL Injection
Slug
super-forms
Published
2021-01-28
Title
Super Forms < 4.9.703 - Unauthenticated PHP File Upload to RCE
Slug
super-forms
Published
2022-01-31
Title
Superforms < 6.0.4 - Reflected Cross-Site Scripting
Slug
super-forms-bundle
Published
2021-01-28
Title
Super Forms < 4.9.703 - Unauthenticated PHP File Upload to RCE
Slug
super-interactive-maps
Published
2020-10-21
Title
SuperStoreFinder Plugins - Unauthenticated Arbitrary File Upload
Slug
super-interactive-maps
Published
2021-03-08
Title
SuperStoreFinder & SuperInteractiveMaps - Unauthenticated SQL Injections
Slug
super-interactive-maps
Published
2026-01-08
Title
Super Interactive Maps <= 2.3 - Reflected Cross-Site Scripting
Slug
super-notes
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
super-notes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
super-progressive-web-apps
Published
2021-06-29
Title
Super Progressive Web Apps < 2.1.13 - Authenticated (High Privileged) Arbitrary File Upload to RCE
Slug
super-progressive-web-apps
Published
2021-06-29
Title
Super Progressive Web Apps < 2.1.12 - Authenticated (Low Privileged) Arbitrary File Upload to RCE
Slug
super-progressive-web-apps
Published
2023-11-22
Title
Super Progressive Web Apps < 2.2.22 - Missing Authorization
Slug
super-refer-a-friend
Published
2014-08-01
Title
super-refer-a-friend - Full Path Disclosure
Slug
super-seo-content-cloner
Published
2025-01-31
Title
Content Cloner < 1.0.2 - Missing Authorization
Slug
super-simple-contact-form
Published
2026-02-13
Title
Super Simple Contact Form <= 1.6.2 - Reflected Cross-Site Scripting via 'sscf_name' Parameter
Slug
super-simple-subscriptions
Published
2025-03-24
Title
Super Simple Subscriptions <= 1.1.0 - Authenticated (Administrator+) SQL Injection
Slug
super-slider
Published
2025-03-18
Title
SUPER RESPONSIVE SLIDER <= 1.4 - Reflected Cross-Site Scripting
Slug
super-social-content-locker-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
super-socializer
Published
2018-03-03
Title
Super Socializer < 7.11 - Authentication Bypass
Slug
super-socializer
Published
2022-03-15
Title
Super Socializer < 7.13.30 - Reflected Cross-Site Scripting
Slug
super-socializer
Published
2022-12-23
Title
Super Socializer < 7.13.44 - Contributor+ Stored XSS
Slug
super-socializer
Published
2023-05-29
Title
Super Socializer < 7.13.52 - Reflected XSS
Slug
super-socializer
Published
2023-06-19
Title
Super Socializer < 1.13.53 - Contributor+ Stored XSS