WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
surveyanyplace
Published
2025-09-29
Title
SurveyAnyplace Plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surveyfunnel-lite
Published
2025-12-04
Title
SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
surveyfunnel-lite
Published
2025-12-04
Title
SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Unauthenticated Information Exposure
Slug
surveyjs
Published
2024-10-24
Title
SurveyJS: Drag & Drop WordPress Form Builder < 1.12.4 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
surveyjs
Published
2025-02-28
Title
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity < 1.12.18 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile
Slug
surveyjs
Published
2025-04-04
Title
SurveyJS < 1.12.57 - Missing Authorization
Slug
surveyjs
Published
2025-04-04
Title
SurveyJS < 1.12.57 - Contributor+ Stored XSS
Slug
surveyjs
Published
2025-05-02
Title
SurveyJS < 1.12.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
surveyjs
Published
2025-12-01
Title
SurveyJS: Drag & Drop WordPress Form Builder < 1.20.27 - Cross-Site Request Forgery to Survey Deletion
Slug
surveys
Published
2017-05-21
Title
Surveys 1.01.8 - Authenticated SQL Injection
Slug
sv-columns-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-columns-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-forms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-forms
Published
2024-11-08
Title
SV Forms <= 2.0.05 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sv-gravity-forms-enhancer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-gravity-forms-enhancer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-media-library
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-media-library
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-posts
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-posts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-provenexpert
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-provenexpert
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-provenexpert
Published
2025-09-22
Title
SV Proven Expert <= 2.0.06 - Cross-Site Request Forgery
Slug
sv-tracking-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius