WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sendpulse-web-push
Published
2023-10-16
Title
SendPulse Free Web Push < 1.3.2 - CSRF
Slug
sendpulse-web-push
Published
2024-10-16
Title
SendPulse Free Web Push < 1.3.7 - Unauthenticated Stored Cross-Site Scripting
Slug
sendsms
Published
2024-12-17
Title
SendSMS <= 1.2.9 - Reflected Cross-Site Scripting
Slug
sendy
Published
2026-01-28
Title
Sendy < 3.4.3 - Missing Authorization
Slug
sensei-lms
Published
2022-08-04
Title
Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API
Slug
sensei-lms
Published
2022-08-04
Title
Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR
Slug
sensei-lms
Published
2023-12-22
Title
Sensei LMS < 4.18.0 - Contributor+ Stored XSS
Slug
sensei-lms
Published
2024-06-06
Title
Sensei LMS <= 4.23.1 & Sensei Pro (WC Paid Courses) <= 4.24.0.1.24.0 - Unauthenticated Rewrite Rules Flushing
Slug
sensei-lms
Published
2024-08-14
Title
Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak
Slug
sensei-lms
Published
2023-12-14
Title
Sensei LMS < 4.20.0 - Teacher+ Users Email Address Disclosure
Slug
sensei-lms
Published
2025-01-14
Title
Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure
Slug
sensei-lms
Published
2025-03-27
Title
Sensei LMS < 4.24.5 - Missing Authorization
Slug
sensitive-chinese-words-scanner
Published
2025-01-16
Title
The Great Firewords of China <= 1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
sensitive-tag-cloud
Published
2025-12-31
Title
SensitiveTagCloud <= 1.4.1 - Cross-Site Request Forgery
Slug
sensly-online-presence
Published
2025-01-24
Title
Sensly Online Presence <= 0.6 - Admin+ Stored XSS
Slug
sensorpress-uptime-monitoring
Published
2025-08-19
Title
SensorPress <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
seo-301-meta
Published
2022-02-21
Title
SEO 301 Meta <= 1.9.1 - Admin+ Stored Cross-Site Scripting
Slug
seo-alert
Published
2023-04-26
Title
SEO ALert <= 1.59 - Admin+ Stored XSS
Slug
seo-automated-link-building
Published
2020-08-18
Title
Internal Links Manager < 2.1.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS)
Slug
seo-automated-link-building
Published
2025-01-24
Title
Internal Links Manager < 2.5.3 - Missing Authorization
Slug
seo-automated-link-building
Published
2025-09-19
Title
Internal Links Manager < 3.0.2 - Cross-Site Request Forgery
Slug
seo-automatic-links
Published
2022-09-05
Title
SEO Smart Links <= 3.0.1 - Admin+ Stored Cross-Site Scripting
Slug
seo-automatic-seo-tools
Published
2025-02-18
Title
SEO Tools <= 4.0.7 - Reflected XSS
Slug
seo-automatic-seo-tools
Published
2025-04-02
Title
SEO Tools <= 4.0.7 - Reflected Cross-Site Scripting
Slug
seo-automatic-wp-core-tweaks
Published
2021-10-21
Title
Core Tweaks WP Setup <= 4.1 - Arbitrary Admin Account Creation / Admin Email Update via CSRF