WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
seo-wordpress
Published
2026-07-02
Title
Praison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure)
Slug
seofy-core
Published
2025-06-03
Title
Seofy Core < 1.6.11 - Unauthenticated Local File Inclusion
Slug
seolinkrotator
Published
2014-08-01
Title
Seo Link Rotator - pusher.php title Parameter Reflected XSS
Slug
seopress-for-mainwp
Published
2025-07-25
Title
SEOPress for MainWP < 1.5 - Unauthenticated Local File Inclusion
Slug
seos-contact-form
Published
2023-12-19
Title
Seos Contact Form <= 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
seosamba-webmasters
Published
2022-10-10
Title
SeoSamba for WordPress Webmasters < 1.0.6 - Access Key Update via CSRF
Slug
sepa-girocode
Published
2025-06-05
Title
SEPA Girocode <= 0.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sepay-gateway
Published
2026-05-26
Title
SePay Gateway < 1.1.21 - Unauthenticated Information Exposure
Slug
sequel
Published
2025-04-02
Title
Sequel < 1.0.13 - Reflected Cross-Site Scripting
Slug
sequential-order-numbers-for-woocommerce
Published
2025-04-04
Title
Sequential Order Numbers for WooCommerce < 3.6.3 - Cross-Site Request Forgery
Slug
seraphinite-accelerator
Published
2023-10-27
Title
Seraphinite Accelerator < 2.2.29 - Authenticated Arbitrary Redirect
Slug
seraphinite-accelerator
Published
2023-10-27
Title
Seraphinite Accelerator < 2.2.29 - Reflected XSS
Slug
seraphinite-accelerator
Published
2023-11-06
Title
Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import
Slug
seraphinite-accelerator
Published
2023-12-01
Title
Seraphinite Accelerator < 2.20.29 - Reflected Cross-Site Scripting via rt
Slug
seraphinite-accelerator
Published
2024-01-08
Title
Seraphinite Accelerator < 2.20.48 - Unauthenticated Sensitive Information Exposure via Log File
Slug
seraphinite-accelerator
Published
2024-02-27
Title
Seraphinite Accelerator < 2.21 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck
Slug
seraphinite-accelerator
Published
2024-12-19
Title
Seraphinite Accelerator <= 2.22.15 (2.21.13 PRO) - Authenticated (Subscriber+) Information Exposure
Slug
seraphinite-accelerator
Published
2025-04-29
Title
Seraphinite Accelerator < 2.27.22 - Cross-Site Request Forgery to Multiple Administrative Actions
Slug
seraphinite-accelerator
Published
2026-03-03
Title
Seraphinite Accelerator < 2.28.15 - Missing Authorization to Authenticated (Subscriber+) Log Clearing
Slug
seraphinite-accelerator
Published
2026-03-03
Title
Seraphinite Accelerator < 2.28.15 - Authenticated (Subscriber+) Exposure of Sensitive Information to an Unauthorized Actor
Slug
seraphinite-accelerator-ext
Published
2024-07-09
Title
Seraphinite Accelerator Premium < 2.21.13.1 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
seraphinite-accelerator-ext
Published
2024-12-19
Title
Seraphinite Accelerator <= 2.22.15 (2.21.13 PRO) - Authenticated (Subscriber+) Information Exposure
Slug
seraphinite-discount-for-woocommerce
Published
2024-12-11
Title
Seraphinite Bulk Discounts for WooCommerce < 2.4.7 - Reflected Cross-Site Scripting
Slug
seraphinite-old-slugs-mgr
Published
2024-01-09
Title
Seraphinite Alternative Slugs Manager < 1.4 - Cross-Site Request Forgery
Slug
seraphinite-post-docx-source
Published
2023-11-23
Title
Seraphinite Post .DOCX Source < 2.16.7 - Settings Update/Reset/Import via CSRF