WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
safe-ai-malware-protection-for-wp
Published
2025-01-30
Title
Safe Ai Malware Protection for WP < 1.0.18 - Missing Authorization to Unauthenticated Database Export
Slug
safe-ai-malware-protection-for-wp
Published
2025-03-31
Title
Safe Ai Malware Protection for WP <= 1.0.20 - Missing Authorization
Slug
safe-editor
Published
2016-05-06
Title
safe-editor <= 1.1 - Unauthenticated CSS/JS-injection
Slug
safe-svg
Published
2019-11-05
Title
Safe SVG <= 1.9.4 - Denial of Service
Slug
safe-svg
Published
2019-11-08
Title
Safe SVG < 1.9.6 - XSS Protection Bypass
Slug
safe-svg
Published
2022-03-25
Title
Safe SVG < 1.9.10 - SVG Sanitisation Bypass
Slug
safe-svg
Published
2024-10-17
Title
Safe SVG < 2.2.6 - Author+ SVG Sanitisation Bypass
Slug
safety-exit
Published
2024-05-30
Title
Safety Exit < 1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
safety-exit
Published
2025-09-22
Title
Safety Exit < 1.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
safetymails-forms
Published
2024-10-18
Title
SafetyForms <= 1.0.0 - Cross-Site Request Forgery
Slug
sagepay-direct-for-woocommerce-payment-gateway
Published
2014-08-01
Title
WooCommerce SagePay Direct Payment Gateway 0.1.6.6 - pages/3DRedirect.php Multiple Parameter Reflected XSS
Slug
sagepay-direct-for-woocommerce-payment-gateway
Published
2014-08-01
Title
WooCommerce SagePay Direct Payment Gateway 0.1.6.6 - pages/3DCallBack.php Multiple Parameter Reflected XSS
Slug
sagepay-direct-for-woocommerce-payment-gateway
Published
2014-08-01
Title
WooCommerce SagePay Direct Payment Gateway 0.1.6.6 - pages/3DComplete.php Multiple Parameter Reflected XSS
Slug
sagepay-server-gateway-for-woocommerce
Published
2017-12-10
Title
SagePay Server Gateway for WooCommerce <= 1.0.8 - Unauthenticated Cross-Site Scripting (XSS)
Slug
sahu-tiktok-pixel
Published
2023-10-25
Title
SAHU TikTok Pixel for E-Commerce <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
sailing
Published
2025-12-15
Title
Sailing < 4.4.6 - Missing Authorization
Slug
sailthru-triggermail
Published
2024-04-30
Title
Sailthru Triggermail <= 1.1 - Admin+ Stored XSS
Slug
sailthru-triggermail
Published
2024-04-30
Title
Sailthru Triggermail <= 1.1 - Reflected XSS
Slug
sailthru-triggermail
Published
2024-11-12
Title
Sailthru Triggermail < 1.1 - Subscriber+ Stored XSS
Slug
sakolawp-lite
Published
2025-01-06
Title
School Management System <= 1.0.8 - Unauthenticated Privilege Escalation
Slug
sakolawp-lite
Published
2025-02-26
Title
School Management System – SakolaWP <= 1.0.8 - Cross-Site Request Forgery to Exam Setting Manipulation
Slug
saksh-escrow-system
Published
2024-12-14
Title
Saksh Escrow System <= 2.4 - Authenticated (Subscriber+) SQL Injection
Slug
salat-times
Published
2022-11-02
Title
Salat Times < 3.2.2 - Admin+ Stored Cross-Site Scripting
Slug
salavat-counter
Published
2024-11-20
Title
salavat counter Plugin <= 0.9.1 - Reflected Cross-Site Scripting
Slug
salert
Published
2023-05-09
Title
SALERT < 1.2.2 - Subscriber+ Missing Authorization