WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
section-widget
Published
2025-04-30
Title
Section Widget <= 3.3.1 - Unauthenticated Path Traversal
Slug
secupress
Published
2021-03-23
Title
SecuPress < 2.0 - Unauthenticated Arbitrary IP Ban
Slug
secupress
Published
2024-04-01
Title
SecuPress Free — WordPress Security < 2.2.5.2 - Cross-Site Request Forgery to Banned IP Address
Slug
secupress
Published
2025-02-27
Title
SecuPress Free < 2.3 - Contributor+ Stored XSS
Slug
secupress
Published
2025-03-11
Title
SecuPress Free < 2.3 - Missing Authorization
Slug
secupress
Published
2025-03-27
Title
SecuPress Free < 2.2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
secupress
Published
2025-04-28
Title
SecuPress Free < 2.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Slug
secupress-pro
Published
2021-03-23
Title
SecuPress < 2.0 - Unauthenticated Arbitrary IP Ban
Slug
secure-admin-ip
Published
2023-08-24
Title
Secure Admin IP <= 2.0 - Missing Authorization via 'saveSettings'
Slug
secure-captcha
Published
2025-01-16
Title
Secure CAPTCHA <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
secure-copy-content-protection
Published
2021-06-29
Title
Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL Injections
Slug
secure-copy-content-protection
Published
2021-11-08
Title
Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection
Slug
secure-copy-content-protection
Published
2024-04-22
Title
Secure Copy Content Protection and Content Locking < 3.7.2 - Missing Authorization
Slug
secure-copy-content-protection
Published
2024-04-25
Title
Secure Copy Content Protection and Content Locking < 3.9.1 - Missing Authorization
Slug
secure-copy-content-protection
Published
2024-06-20
Title
Secure Copy Content Protection < 4.0.9 - Admin+ Stored XSS
Slug
secure-copy-content-protection
Published
2024-08-13
Title
Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS
Slug
secure-copy-content-protection
Published
2024-08-13
Title
Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS
Slug
secure-copy-content-protection
Published
2024-09-25
Title
Secure Copy Content Protection and Content Locking < 4.2.4 - Reflected Cross-Site Scripting
Slug
secure-copy-content-protection
Published
2025-02-28
Title
Secure Copy Content Protection and Content Locking < 4.4.8 - Missing Authorization to Unauthenticated User Email Retrieval via ays_sccp_reports_user_search Function
Slug
secure-copy-content-protection
Published
2025-04-04
Title
Secure Copy Content Protection and Content Locking < 4.5.6 - Admin+ Stored XSS
Slug
secure-copy-content-protection
Published
2025-04-01
Title
Secure Copy Content Protection and Content Locking < 4.4.5 - Unauthenticated Stored Cross-Site Scripting
Slug
secure-copy-content-protection
Published
2025-12-11
Title
Secure Copy Content Protection and Content Locking < 4.9.3 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File
Slug
secure-copy-content-protection
Published
2025-12-11
Title
Secure Copy Content Protection and Content Locking < 4.9.3 - Cross-Site Request Forgery to Data Export
Slug
secure-copy-content-protection
Published
2026-02-12
Title
Secure Copy Content Protection and Content Locking < 4.9.9 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header
Slug
secure-downloads
Published
2024-07-09
Title
Secure Downloads < 1.2.3 - Admin+ Arbitrary File Download