WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
super-socializer
Published
2023-09-05
Title
Super Socializer < 7.13.55 - Missing Authorization
Slug
super-socializer
Published
2024-03-25
Title
Super Socializer < 7.13.64 - Editor+ Stored XSS
Slug
super-socializer
Published
2024-11-05
Title
Social Share, Social Login and Social Comments Plugin – Super Socializer < 7.14 - Authentication Bypass
Slug
super-socializer
Published
2025-01-20
Title
Social Share, Social Login and Social Comments Plugin – Super Socializer < 7.14.1 - Unauthenticated Limited SQL Injection via 'SuperSocializerKey'
Slug
super-stage-wp
Published
2026-02-06
Title
Super Stage WP < 1.0.2 - Unauthenticated PHP Object Injection
Slug
super-static-cache
Published
2025-03-24
Title
Super Static Cache <= 3.3.5 - Cross-Site Request Forgery
Slug
super-testimonial
Published
2022-10-20
Title
Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scripting
Slug
super-testimonial
Published
2022-10-27
Title
Testimonials < 2.7 - Admin+ Stored Cross-Site Scripting
Slug
super-testimonial
Published
2023-10-16
Title
Super Testimonials < 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
super-testimonial
Published
2024-04-05
Title
Testimonials < 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
super-testimonial
Published
2024-08-26
Title
Testimonials < 3.0.9 - Reflected Cross-Site Scripting
Slug
super-testimonial
Published
2025-02-17
Title
Super Testimonials < 4.0.2 - Unauthenticated Stored Cross-Site Scripting
Slug
super-testimonial-pro
Published
2022-10-20
Title
Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scripting
Slug
super-transactional-emails-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
super-transactional-emails-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
super-video-player
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
super-video-player
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
superb-slideshow-gallery
Published
2023-10-30
Title
Superb slideshow gallery < 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
superb-social-share-and-follow-buttons
Published
2023-04-06
Title
Superb Social Media Share Buttons and Follow Buttons < 1.1.5 - CSRF
Slug
superfast-mailgun-newsletter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
superfly-menu
Published
2024-04-16
Title
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
superfly-menu
Published
2024-08-01
Title
WordPress Menu Plugin — Superfly Responsive Menu < 5.0.30 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
superior-faq
Published
2023-01-13
Title
Superior FAQ <= 1.0.2 - CSRF
Slug
superlogoshowcase-wp
Published
2020-10-21
Title
SuperStoreFinder Plugins - Unauthenticated Arbitrary File Upload
Slug
superlogoshowcase-wp
Published
2025-12-31
Title
Super Logos Showcase <= 2.8 - Reflected Cross-Site Scripting