WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
surbma-minicrm-shortcode
Published
2025-11-20
Title
Surbma | MiniCRM Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surbma-premium-wp
Published
2025-01-07
Title
Surbma | Premium WP < 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surbma-recent-comments-shortcode
Published
2025-08-15
Title
Surbma | Recent Comments Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surbma-salesautopilot-shortcode
Published
2024-12-11
Title
Surbma | SalesAutopilot Shortcode <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surecart
Published
2023-08-29
Title
SureCart < 2.5.1 - Admin+ Stored XSS
Slug
surecart
Published
2024-08-28
Title
SureCart < 2.29.4 - Reflected Cross-Site Scripting
Slug
surecart
Published
2026-03-26
Title
SureCart < 4.0.3 - Missing Authorization
Slug
suredash
Published
2025-07-31
Title
SureDash < 1.2.0 - Authenticated (Subscriber+) Information Disclosure
Slug
suredash
Published
2025-07-28
Title
SureDash < 1.1.0 - Subscriber+ Privilege Escalation
Slug
sureforms
Published
2025-01-07
Title
SureForms – Drag and Drop Form Builder for WordPress < 1.2.3 - Missing Authorization to Unauthenticated Protected Post Disclosure
Slug
sureforms
Published
2025-04-09
Title
SureForms < 1.4.4 - Contributor+ Settings Update
Slug
sureforms
Published
2025-04-11
Title
SureForms < 1.4.4 - Admin+ Stored XSS
Slug
sureforms
Published
2025-04-11
Title
SureForms < 1.4.4 - Admin+ Stored XSS
Slug
sureforms
Published
2025-07-11
Title
SureForms < 1.7.2 - Reflected XSS
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated PHP Object Injection
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated Arbitrary File Deletion
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated PHP Object Injection
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated PHP Object Injection
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated PHP Object Injection
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated Arbitrary File Deletion
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated Arbitrary File Deletion
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated Arbitrary File Deletion
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated Arbitrary File Deletion
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated PHP Object Injection
Slug
sureforms
Published
2025-07-08
Title
SureForms < 1.7.4 - Unauthenticated PHP Object Injection