WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
svgplus
Published
2024-11-15
Title
SVGPlus <= 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
svs-pricing-tables
Published
2024-04-29
Title
SVS Pricing Tables <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
svs-pricing-tables
Published
2024-04-29
Title
SVS Pricing Tables <= 1.0.4 - Cross-Site Request Forgery to Pricing Table Edit/Creation
Slug
svs-pricing-tables
Published
2024-04-29
Title
SVS Pricing Tables <= 1.0.4 - Cross-Site Request Forgery to Pricing Table Deletion
Slug
svt-simple
Published
2024-11-04
Title
SVT Simple <= 1.0.1 - Reflected Cross-Site Scripting
Slug
sw-contact-form
Published
2024-10-18
Title
SW Contact Form <= 1.0 - Authenticated (Subscriber+) SQL Injection
Slug
sw_ajax_woocommerce_search
Published
2020-10-30
Title
SW Ajax WooCommerce Search < 1.2.8 - Unauthenticated Reflected XSS & XFS
Slug
swatchly
Published
2023-03-30
Title
Swatchly – WooCommerce Variation Swatches for Products < 1.2.1 - Cross-Site Request Forgery
Slug
swatchly
Published
2025-04-09
Title
Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
sweepwidget
Published
2025-01-06
Title
SweepWidget Contests, Giveaways, Photo Contests, Competitions <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sweet-energy-efficiency
Published
2025-09-22
Title
Sweet Energy Efficiency <= 1.0.6 - Cross-Site Request Forgery
Slug
sweet-energy-efficiency
Published
2025-12-17
Title
Sweet Energy Efficiency < 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Graph Deletion
Slug
swift-framework
Published
2024-05-03
Title
Swift Framework <= 2.7.31 - Missing Authorization to Unauthenticated Arbitrary Content Update
Slug
swift-framework
Published
2024-05-03
Title
Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Slug
swift-performance-lite
Published
2023-11-27
Title
Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration Export
Slug
swift-performance-lite
Published
2024-05-08
Title
Swift Performance Lite < 2.3.6.19 - Subscriber+ Settings Update
Slug
swift-performance-lite
Published
2024-07-05
Title
Swift Performance Lite < 2.3.6.21 - Cross-Site Request Forgery
Slug
swift-performance-lite
Published
2024-12-05
Title
Swift Performance Lite < 2.3.7.2 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
Slug
swiftninjapro-inspect-element-console-blocker
Published
2025-09-05
Title
Developer Tools Blocker <= 3.2.1 - Cross-Site Request Forgery
Slug
swiftxr-3darvr-viewer
Published
2025-04-04
Title
SwiftXR (3D/AR/VR) Viewer <= 1.0.7 - Cross-Site Request Forgery
Slug
swifty-bar
Published
2023-10-02
Title
Swifty Bar, sticky bar by WPGens < 1.2.11 - Admin+ Stored XSS
Slug
swifty-page-manager
Published
2022-12-14
Title
Swifty Page Manager <= 3.0.1 - Page Creation/Deletion via CSRF
Slug
swifty-page-manager
Published
2022-12-14
Title
Swifty Page Manager <= 3.0.1 - Admin+ Stored XSS
Slug
swipehq-payment-gateway-woocommerce
Published
2014-05-28
Title
WooCommerce Swipe <= 2.7.1 - Unauthenticated Reflected XSS
Slug
swipehq-payment-gateway-wp-e-commerce
Published
2014-04-25
Title
WP e-Commerce Swipe <= 3.1.0 - Multiple XSS Issues