WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
super-socializer
Published
2022-03-15
Title
Super Socializer < 7.13.30 - Reflected Cross-Site Scripting
Slug
super-socializer
Published
2022-12-23
Title
Super Socializer < 7.13.44 - Contributor+ Stored XSS
Slug
super-socializer
Published
2023-05-29
Title
Super Socializer < 7.13.52 - Reflected XSS
Slug
super-socializer
Published
2023-06-19
Title
Super Socializer < 1.13.53 - Contributor+ Stored XSS
Slug
super-socializer
Published
2023-09-05
Title
Super Socializer < 7.13.55 - Missing Authorization
Slug
super-socializer
Published
2024-03-25
Title
Super Socializer < 7.13.64 - Editor+ Stored XSS
Slug
super-socializer
Published
2024-11-05
Title
Social Share, Social Login and Social Comments Plugin – Super Socializer < 7.14 - Authentication Bypass
Slug
super-socializer
Published
2025-01-20
Title
Social Share, Social Login and Social Comments Plugin – Super Socializer < 7.14.1 - Unauthenticated Limited SQL Injection via 'SuperSocializerKey'
Slug
super-socializer
Published
2026-07-07
Title
Social Share, Social Login and Social Comments Plugin <= 7.14.5 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter
Slug
super-stage-wp
Published
2026-02-06
Title
Super Stage WP < 1.0.2 - Unauthenticated PHP Object Injection
Slug
super-static-cache
Published
2025-03-24
Title
Super Static Cache <= 3.3.5 - Cross-Site Request Forgery
Slug
super-testimonial
Published
2022-10-20
Title
Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scripting
Slug
super-testimonial
Published
2022-10-27
Title
Testimonials < 2.7 - Admin+ Stored Cross-Site Scripting
Slug
super-testimonial
Published
2023-10-16
Title
Super Testimonials < 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
super-testimonial
Published
2024-04-05
Title
Testimonials < 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
super-testimonial
Published
2024-08-26
Title
Testimonials < 3.0.9 - Reflected Cross-Site Scripting
Slug
super-testimonial
Published
2025-02-17
Title
Super Testimonials < 4.0.2 - Unauthenticated Stored Cross-Site Scripting
Slug
super-testimonial-pro
Published
2022-10-20
Title
Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scripting
Slug
super-transactional-emails-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
super-transactional-emails-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
super-video-player
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
super-video-player
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
superb-slideshow-gallery
Published
2023-10-30
Title
Superb slideshow gallery < 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
superb-social-share-and-follow-buttons
Published
2023-04-06
Title
Superb Social Media Share Buttons and Follow Buttons < 1.1.5 - CSRF
Slug
superfast-mailgun-newsletter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius