WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sw_ajax_woocommerce_search
Published
2020-10-30
Title
SW Ajax WooCommerce Search < 1.2.8 - Unauthenticated Reflected XSS & XFS
Slug
swatchly
Published
2023-03-30
Title
Swatchly – WooCommerce Variation Swatches for Products < 1.2.1 - Cross-Site Request Forgery
Slug
swatchly
Published
2025-04-09
Title
Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
sweepwidget
Published
2025-01-06
Title
SweepWidget Contests, Giveaways, Photo Contests, Competitions <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sweet-energy-efficiency
Published
2025-09-22
Title
Sweet Energy Efficiency < 1.0.9 - Cross-Site Request Forgery
Slug
sweet-energy-efficiency
Published
2025-12-17
Title
Sweet Energy Efficiency < 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Graph Deletion
Slug
swift-framework
Published
2024-05-03
Title
Swift Framework <= 2.7.31 - Missing Authorization to Unauthenticated Arbitrary Content Update
Slug
swift-framework
Published
2024-05-03
Title
Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Slug
swift-performance-lite
Published
2023-11-27
Title
Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration Export
Slug
swift-performance-lite
Published
2024-05-08
Title
Swift Performance Lite < 2.3.6.19 - Subscriber+ Settings Update
Slug
swift-performance-lite
Published
2024-07-05
Title
Swift Performance Lite < 2.3.6.21 - Cross-Site Request Forgery
Slug
swift-performance-lite
Published
2024-12-05
Title
Swift Performance Lite < 2.3.7.2 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
Slug
swiftninjapro-inspect-element-console-blocker
Published
2025-09-05
Title
Developer Tools Blocker <= 3.2.1 - Cross-Site Request Forgery
Slug
swiftxr-3darvr-viewer
Published
2025-04-04
Title
SwiftXR (3D/AR/VR) Viewer <= 1.0.7 - Cross-Site Request Forgery
Slug
swifty-bar
Published
2023-10-02
Title
Swifty Bar, sticky bar by WPGens < 1.2.11 - Admin+ Stored XSS
Slug
swifty-page-manager
Published
2022-12-14
Title
Swifty Page Manager <= 3.0.1 - Page Creation/Deletion via CSRF
Slug
swifty-page-manager
Published
2022-12-14
Title
Swifty Page Manager <= 3.0.1 - Admin+ Stored XSS
Slug
swipehq-payment-gateway-woocommerce
Published
2014-05-28
Title
WooCommerce Swipe <= 2.7.1 - Unauthenticated Reflected XSS
Slug
swipehq-payment-gateway-wp-e-commerce
Published
2014-04-25
Title
WP e-Commerce Swipe <= 3.1.0 - Multiple XSS Issues
Slug
swiss-toolkit-for-wp
Published
2024-05-28
Title
Swiss Toolkit For WP < 1.0.8 - Contributor+ Authentication Bypass
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP < 1.4.1 - Missing Authorization
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP <= 1.4.3 - Missing Authorization
Slug
swoop-password-free-authentication
Published
2024-10-25
Title
1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass
Slug
swp-portfolio
Published
2026-02-05
Title
Portfolio Builder <= 1.2.5 - Unauthenticated Local File Inclusion
Slug
sydney-toolbox
Published
2024-02-14
Title
Sydney Toolbox < 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting