WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sailing
Published
2025-12-15
Title
Sailing < 4.4.6 - Missing Authorization
Slug
sailthru-triggermail
Published
2024-04-30
Title
Sailthru Triggermail <= 1.1 - Admin+ Stored XSS
Slug
sailthru-triggermail
Published
2024-04-30
Title
Sailthru Triggermail <= 1.1 - Reflected XSS
Slug
sailthru-triggermail
Published
2024-11-12
Title
Sailthru Triggermail < 1.1 - Subscriber+ Stored XSS
Slug
sakolawp-lite
Published
2025-01-06
Title
School Management System <= 1.0.8 - Unauthenticated Privilege Escalation
Slug
sakolawp-lite
Published
2025-02-26
Title
School Management System – SakolaWP <= 1.0.8 - Cross-Site Request Forgery to Exam Setting Manipulation
Slug
saksh-escrow-system
Published
2024-12-14
Title
Saksh Escrow System <= 2.4 - Authenticated (Subscriber+) SQL Injection
Slug
salat-times
Published
2022-11-02
Title
Salat Times < 3.2.2 - Admin+ Stored Cross-Site Scripting
Slug
salavat-counter
Published
2024-11-20
Title
salavat counter Plugin <= 0.9.1 - Reflected Cross-Site Scripting
Slug
salavat-counter
Published
2026-02-18
Title
salavat counter Plugin <= 0.9.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'image_url' Parameter
Slug
salert
Published
2023-05-09
Title
SALERT < 1.2.2 - Subscriber+ Missing Authorization
Slug
salert
Published
2023-05-09
Title
SALERT < 1.2.2 - Reflected XSS
Slug
sales-page-addon
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sales-page-addon
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sales-page-addon
Published
2024-10-31
Title
Sales Page Addon – Elementor & Beaver Builder <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
salesforce-wordpress-to-candidate
Published
2025-01-16
Title
WordPress-to-candidate for Salesforce CRM <= 1.0.1 - Reflected Cross-Site Scripting
Slug
salesforce-wordpress-to-lead
Published
2014-08-01
Title
WordPress-to-Lead for Salesforce CRM 1.0.4 - ov_plugin_tools.php textinput Function XSS
Slug
salesforce-wordpress-to-lead
Published
2014-08-01
Title
WordPress-to-Lead for Salesforce CRM 1.0.1 - salesforce.php salesforce_form_shortcode Function Error Message H&ling XSS
Slug
salesforce-wordpress-to-lead
Published
2014-08-01
Title
WordPress-to-Lead for Salesforce CRM 1.0 - salesforce.php Multiple Parameter XSS
Slug
salesforce-wordpress-to-lead
Published
2025-09-05
Title
To Lead For Salesforce <= 2.7.3.9 - Cross-Site Request Forgery
Slug
salesking
Published
2024-01-16
Title
SalesKing < 1.6.30 - Unauthenticated Sensitive Information Exposure
Slug
salesking
Published
2024-01-16
Title
SalesKing < 1.6.30 - Missing Authorization to Settings Change
Slug
salesking
Published
2024-01-16
Title
SalesKing < 1.6.30 - Unauthenticated Privilege Escalation
Slug
salesmanago
Published
2023-10-20
Title
SALESmanago < 3.2.5 - Log Injection via Weak Authentication Token
Slug
salesmanago
Published
2025-09-22
Title
SALESmanago < 3.8.2 - Missing Authorization