WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sell-with-razorpay
Published
2025-01-16
Title
Sale with Razorpay <= 1.0 - Reflected Cross-Site Scripting
Slug
selling-commander-connector
Published
2025-06-19
Title
Selling Commander for WooCommerce <= 1.2.46 - Unauthenticated Privilege Escalation
Slug
sellkit
Published
2024-03-28
Title
SellKit < 1.8.3 - Authenticated (Subscriber+) Arbitrary File Download
Slug
sellkit
Published
2024-06-05
Title
SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
sello-channelconnector
Published
2025-08-20
Title
Sello ChannelConnector <= 1.6.3 - Reflected Cross-Site Scripting
Slug
sellsy
Published
2025-01-06
Title
Sellsy < 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sem-wysiwyg
Published
2014-08-01
Title
SEM WYSIWYG - Arbitrary File Upload
Slug
sema-api
Published
2022-04-13
Title
SEMA API < 4.02 - Unauthenticated SQLi
Slug
sema-api
Published
2025-01-08
Title
SEMA API < 5.30 - Reflected Cross-Site Scripting via catid Parameter
Slug
semalt
Published
2023-04-18
Title
Semalt Blocker <= 1.1.3 - Admin+ Stored XSS
Slug
semantic-shortcode
Published
2024-11-08
Title
Semantic Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
semrush-contentshake
Published
2025-12-15
Title
Semrush Content Toolkit < 1.1.33 - Cross-Site Request Forgery
Slug
send-booking-invites-to-friends
Published
2025-01-16
Title
Send to a Friend Addon <= 1.4.1 - Reflected Cross-Site Scripting
Slug
send-e-mail
Published
2025-03-31
Title
Send E-mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
send-email-only-on-reply-to-my-comment
Published
2024-07-09
Title
Send email only on Reply to My Comment <= 1.0.6 - Reflected XSS
Slug
send-email-only-on-reply-to-my-comment
Published
2024-07-09
Title
Send email only on Reply to My Comment <= 1.0.6 - Stored XSS via CSRF
Slug
send-emails-with-mandrill
Published
2024-08-09
Title
Send Emails with Mandrill < 1.4.2 - Missing Authorization
Slug
send-from
Published
2025-04-24
Title
Send From < 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
send-pdf-for-contact-form-7
Published
2023-01-11
Title
Send PDF for Contact Form 7 < 0.9.9.2 - Contributor+ Stored XSS via Shortcode
Slug
send-pdf-for-contact-form-7
Published
2024-04-23
Title
Send PDF for Contact Form 7 < 1.0.2.4 - Missing Authorization
Slug
send-prebuilt-emails
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
send-prebuilt-emails
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
send-to-twitter
Published
2025-01-16
Title
Send to Twitter <= 1.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
send-users-email
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
send-users-email
Published
2023-12-28
Title
Send Users Email < 1.4.4 - Sensitive Information Exposure via Error Logs