WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
seo-spy-google-wordpress-plugin
Published
2014-08-01
Title
seo-spy-google - ofc_upload_image.php Arbitrary File Upload
Slug
seo-title-tag
Published
2024-03-29
Title
SEO Title Tag <= 3.5.9 - Reflected Cross-Site Scripting
Slug
seo-watcher
Published
2014-08-01
Title
SEO Watcher - Open Flash Chart Arbitrary File Creation
Slug
seo-wizard
Published
2021-06-30
Title
SEO Wizard <= 4.0.2 - Unauthorised robots.txt & .htaccess Edit via CSRF
Slug
seo-wizard
Published
2021-06-30
Title
SEO Wizard <= 4.0.2 - Unauthorised AJAX Calls
Slug
seo-wordpress
Published
2024-05-20
Title
Praison SEO WordPress < 4.0.16 - Author+ Stored XSS
Slug
seo-wordpress
Published
2026-07-02
Title
Praison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure)
Slug
seofy-core
Published
2025-06-03
Title
Seofy Core < 1.6.11 - Unauthenticated Local File Inclusion
Slug
seolinkrotator
Published
2014-08-01
Title
Seo Link Rotator - pusher.php title Parameter Reflected XSS
Slug
seopress-for-mainwp
Published
2025-07-25
Title
SEOPress for MainWP < 1.5 - Unauthenticated Local File Inclusion
Slug
seos-contact-form
Published
2023-12-19
Title
Seos Contact Form <= 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
seosamba-webmasters
Published
2022-10-10
Title
SeoSamba for WordPress Webmasters < 1.0.6 - Access Key Update via CSRF
Slug
seowriting
Published
2026-09-02
Title
SEOWriting <= 1.12.5 - Authenticated (Contributor +) Stored Cross-Site Scripting
Slug
sepa-girocode
Published
2025-06-05
Title
SEPA Girocode <= 0.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sepay-gateway
Published
2026-05-26
Title
SePay Gateway < 1.1.21 - Unauthenticated Information Exposure
Slug
sequel
Published
2025-04-02
Title
Sequel < 1.0.13 - Reflected Cross-Site Scripting
Slug
sequential-order-numbers-for-woocommerce
Published
2025-04-04
Title
Sequential Order Numbers for WooCommerce < 3.6.3 - Cross-Site Request Forgery
Slug
sequential-order-numbers-for-woocommerce
Published
2026-10-28
Title
Sequential Order Numbers for WooCommerce < 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'condition' Post Meta Array Keys
Slug
seraphinite-accelerator
Published
2023-10-27
Title
Seraphinite Accelerator < 2.2.29 - Authenticated Arbitrary Redirect
Slug
seraphinite-accelerator
Published
2023-10-27
Title
Seraphinite Accelerator < 2.2.29 - Reflected XSS
Slug
seraphinite-accelerator
Published
2023-11-06
Title
Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import
Slug
seraphinite-accelerator
Published
2023-12-01
Title
Seraphinite Accelerator < 2.20.29 - Reflected Cross-Site Scripting via rt
Slug
seraphinite-accelerator
Published
2024-01-08
Title
Seraphinite Accelerator < 2.20.48 - Unauthenticated Sensitive Information Exposure via Log File
Slug
seraphinite-accelerator
Published
2024-02-27
Title
Seraphinite Accelerator < 2.21 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck
Slug
seraphinite-accelerator
Published
2024-12-19
Title
Seraphinite Accelerator <= 2.22.15 (2.21.13 PRO) - Authenticated (Subscriber+) Information Exposure