WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sa-post-author-filter
Published
2025-01-03
Title
Kikx Simple Post Author Filter <= 1.0 - Reflected Cross-Site Scripting
Slug
saan-world-clock
Published
2023-02-21
Title
Saan World Clock <= 1.8 - Contributor+ Stored XSS
Slug
saasplate-core
Published
2026-01-28
Title
Saasplate Core <= 1.2.8 - Unauthenticated SQL Injection
Slug
saaspricing
Published
2024-12-19
Title
SaasPricing < 1.2.5 - Contributor+ Stored XSS
Slug
sabai-discuss
Published
2022-09-26
Title
Sabai Discuss < 1.4.14 - Reflected Cross Site Scripting
Slug
sabre
Published
2014-08-01
Title
SABRE < 1.2.2 - Cross Site Scripting
Slug
safe-ai-malware-protection-for-wp
Published
2025-01-30
Title
Safe Ai Malware Protection for WP < 1.0.18 - Missing Authorization to Unauthenticated Database Export
Slug
safe-ai-malware-protection-for-wp
Published
2025-03-31
Title
Safe Ai Malware Protection for WP <= 1.0.20 - Missing Authorization
Slug
safe-editor
Published
2016-05-06
Title
safe-editor <= 1.1 - Unauthenticated CSS/JS-injection
Slug
safe-redirect-manager
Published
2026-09-28
Title
Safe Redirect Manager < 2.3.0 - Open Redirect via Wildcard Redirect Rules
Slug
safe-svg
Published
2019-11-05
Title
Safe SVG <= 1.9.4 - Denial of Service
Slug
safe-svg
Published
2019-11-08
Title
Safe SVG < 1.9.6 - XSS Protection Bypass
Slug
safe-svg
Published
2022-03-25
Title
Safe SVG < 1.9.10 - SVG Sanitisation Bypass
Slug
safe-svg
Published
2024-10-17
Title
Safe SVG < 2.2.6 - Author+ SVG Sanitisation Bypass
Slug
safe-svg
Published
2026-09-23
Title
Safe SVG < 2.5.1 - Contributor+ Stored XSS
Slug
safe-svg
Published
2026-09-23
Title
Safe SVG < 2.5.1 - Contributor+ IDOR
Slug
safesnap
Published
2026-10-05
Title
SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 - Unauthenticated Information Exposure
Slug
safety-exit
Published
2024-05-30
Title
Safety Exit < 1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
safety-exit
Published
2025-09-22
Title
Safety Exit < 1.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
safetymails-forms
Published
2024-10-18
Title
SafetyForms <= 1.0.0 - Cross-Site Request Forgery
Slug
sagepay-direct-for-woocommerce-payment-gateway
Published
2014-08-01
Title
WooCommerce SagePay Direct Payment Gateway 0.1.6.6 - pages/3DRedirect.php Multiple Parameter Reflected XSS
Slug
sagepay-direct-for-woocommerce-payment-gateway
Published
2014-08-01
Title
WooCommerce SagePay Direct Payment Gateway 0.1.6.6 - pages/3DCallBack.php Multiple Parameter Reflected XSS
Slug
sagepay-direct-for-woocommerce-payment-gateway
Published
2014-08-01
Title
WooCommerce SagePay Direct Payment Gateway 0.1.6.6 - pages/3DComplete.php Multiple Parameter Reflected XSS
Slug
sagepay-server-gateway-for-woocommerce
Published
2017-12-10
Title
SagePay Server Gateway for WooCommerce <= 1.0.8 - Unauthenticated Cross-Site Scripting (XSS)
Slug
sahu-tiktok-pixel
Published
2023-10-25
Title
SAHU TikTok Pixel for E-Commerce <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting