WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
searchterms-tagging-2
Published
2015-07-08
Title
SEO SearchTerms Tagging 2 <= 1.535 - XSS & Authenticated SQL Injection
Slug
searchwp
Published
2022-10-24
Title
SearchWP < 4.2.6 - Subscriber+ Settings Update
Slug
searchwp-live-ajax-search
Published
2022-07-25
Title
SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure
Slug
searchwp-live-ajax-search
Published
2022-09-15
Title
SearchWP Live Ajax Search < 1.6.3 - Unauthenticated Local File Inclusion
Slug
seatgeek-affiliate-tickets
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
seatreg
Published
2025-01-30
Title
SeatReg < 1.56.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
secondary-title
Published
2023-07-05
Title
Secondary Title < 2.1.0 - Contributor+ Stored Cross-Site Scripting
Slug
section-slider
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
section-slider
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
section-slider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
section-widget
Published
2025-05-02
Title
Section Widget <= 3.3.1 - Reflected Cross-Site Scripting
Slug
section-widget
Published
2025-04-30
Title
Section Widget <= 3.3.1 - Unauthenticated Path Traversal
Slug
secupress
Published
2021-03-23
Title
SecuPress < 2.0 - Unauthenticated Arbitrary IP Ban
Slug
secupress
Published
2024-04-01
Title
SecuPress Free — WordPress Security < 2.2.5.2 - Cross-Site Request Forgery to Banned IP Address
Slug
secupress
Published
2025-02-27
Title
SecuPress Free < 2.3 - Contributor+ Stored XSS
Slug
secupress
Published
2025-03-11
Title
SecuPress Free < 2.3 - Missing Authorization
Slug
secupress
Published
2025-03-27
Title
SecuPress Free < 2.2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
secupress
Published
2025-04-28
Title
SecuPress Free < 2.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Slug
secupress-pro
Published
2021-03-23
Title
SecuPress < 2.0 - Unauthenticated Arbitrary IP Ban
Slug
secure-admin-ip
Published
2023-08-24
Title
Secure Admin IP <= 2.0 - Missing Authorization via 'saveSettings'
Slug
secure-captcha
Published
2025-01-16
Title
Secure CAPTCHA <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
secure-copy-content-protection
Published
2021-06-29
Title
Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL Injections
Slug
secure-copy-content-protection
Published
2021-11-08
Title
Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection
Slug
secure-copy-content-protection
Published
2024-04-22
Title
Secure Copy Content Protection and Content Locking < 3.7.2 - Missing Authorization
Slug
secure-copy-content-protection
Published
2024-04-25
Title
Secure Copy Content Protection and Content Locking < 3.9.1 - Missing Authorization