WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
swiss-toolkit-for-wp
Published
2024-05-28
Title
Swiss Toolkit For WP < 1.0.8 - Contributor+ Authentication Bypass
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP < 1.4.1 - Missing Authorization
Slug
swiss-toolkit-for-wp
Published
2025-03-31
Title
Swiss Toolkit For WP <= 1.4.3 - Missing Authorization
Slug
swiss-toolkit-for-wp
Published
2026-07-10
Title
Swiss Toolkit For WP <= 1.4.6 - Authenticated (Author+) Arbitrary File Upload via upload_extension_files()
Slug
switch-cta-box
Published
2026-04-21
Title
Switch CTA Box <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
swoop-password-free-authentication
Published
2024-10-25
Title
1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass
Slug
swp-portfolio
Published
2026-02-05
Title
Portfolio Builder <= 1.2.5 - Unauthenticated Local File Inclusion
Slug
sydney-toolbox
Published
2024-02-14
Title
Sydney Toolbox < 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sydney-toolbox
Published
2024-03-28
Title
Sydney Toolbox < 1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id
Slug
sydney-toolbox
Published
2024-04-05
Title
Sydney Toolbox < 1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
Slug
sydney-toolbox
Published
2024-05-01
Title
Sydney Toolbox < 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sydney-toolbox
Published
2024-05-13
Title
Sydney Toolbox < 1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget
Slug
symbiostock
Published
2023-12-05
Title
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload
Slug
sync-basalam
Published
2026-07-12
Title
sync-basalam < 1.9.2 - Cross-Site Request Forgery
Slug
sync-ecommerce-neo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sync-ecommerce-neo
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sync-feedly
Published
2025-09-26
Title
Sync Feedly <= 1.0.1 - Cross-Site Request Forgery to Sync Trigger
Slug
sync-post-with-other-site
Published
2024-04-11
Title
Sync Post With Other Site < 1.5.2 - Cross-Site Request Forgery
Slug
sync-post-with-other-site
Published
2024-08-02
Title
Sync Post With Other Site < 1.7 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update
Slug
sync-post-with-other-site
Published
2026-07-09
Title
Sync Post With Other Site < 1.9.3 - Contributor+ Arbitrary Page Creation/Modification
Slug
sync-post-with-other-site
Published
2026-08-17
Title
Sync Post With Other Site < 1.9.4 - Contributor+ Arbitrary File Upload
Slug
sync-posts
Published
2025-04-10
Title
Sync Posts <= 1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
sync-qcloud-cos
Published
2022-02-17
Title
Sync iCloud COS < 2.0.1 - Admin+ Stored Cross-Site Scripting
Slug
sync-wc-google
Published
2025-04-01
Title
Bulk Product Sync < 9.0 - Cross-Site Request Forgery
Slug
sync-wc-google
Published
2025-04-08
Title
Bulk Product Sync < 9.0 - Unauthenticated SQL Injection