WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
structured-content
Published
2022-12-28
Title
Structured Content < 1.5.1 - Contributor+ Stored XSS in Shortcode
Slug
structured-content
Published
2023-12-05
Title
Structured Content < 1.6 - Contributor+ PHP Object Injection
Slug
structured-content
Published
2023-12-05
Title
Structured Content < 1.6 - Contributor+ Stored XSS
Slug
structured-content
Published
2024-02-02
Title
Structured Content < 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Classic Editor Shortcode
Slug
structured-content
Published
2024-08-16
Title
Structured Content < 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
structured-content
Published
2025-03-03
Title
Structured Content (JSON-LD) #wpsc < 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode
Slug
structured-content
Published
2025-03-27
Title
Structured Content < 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
structured-content
Published
2025-07-23
Title
Structured Content < 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode
Slug
structured-content
Published
2025-07-24
Title
Structured Content < 1.7.0 - Contributor Stored XSS
Slug
structured-content
Published
2026-07-02
Title
Structured Content (JSON-LD) #wpsc <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
struktur-core
Published
2026-07-02
Title
Struktur Core <= 2.5.1 - Authenticated (Contributor+) Local File Inclusion
Slug
strx-magic-floating-sidebar-maker
Published
2025-01-16
Title
Strx Magic Floating Sidebar Maker <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
studio99-wp-monitor
Published
2026-02-21
Title
Studio99 WP Monitor < 1.0.4 - Missing Authorization
Slug
studiocart
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
studiocart
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
studiocart
Published
2025-11-03
Title
Studiocart <= 2.9.0 - Reflected XSS
Slug
stumble-for-wordpress
Published
2026-01-06
Title
Stumble! for WordPress <= 1.1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
style-admin
Published
2025-01-16
Title
Style Admin <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
style-it
Published
2014-04-25
Title
Style It <= 1.0 - XSS
Slug
style-manager
Published
2025-04-17
Title
Style Manager <= 2.2.7 - Cross-Site Request Forgery to Settings Update
Slug
style-tweaker
Published
2025-02-03
Title
Style Tweaker <= 0.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
stylebidet
Published
2026-02-13
Title
StyleBidet <= 1.0.0 - Reflected Cross-Site Scripting
Slug
styler-for-ninja-forms-lite
Published
2024-11-12
Title
Styler for Ninja Forms <= 3.3.4 - Authenticated (Subscriber+) Arbitrary Option Deletion via deactivate_license
Slug
stylish-cost-calculator
Published
2021-11-01
Title
Stylish Cost Calculator < 7.0.4 - Subscriber+ Unauthorised AJAX Calls to Stored XSS
Slug
stylish-cost-calculator
Published
2025-11-14
Title
Stylish Cost Calculator < 8.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting