WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
salert
Published
2023-05-09
Title
SALERT < 1.2.2 - Reflected XSS
Slug
sales-page-addon
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sales-page-addon
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sales-page-addon
Published
2024-10-31
Title
Sales Page Addon – Elementor & Beaver Builder <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
salesforce-wordpress-to-candidate
Published
2025-01-16
Title
WordPress-to-candidate for Salesforce CRM <= 1.0.1 - Reflected Cross-Site Scripting
Slug
salesforce-wordpress-to-lead
Published
2014-08-01
Title
WordPress-to-Lead for Salesforce CRM 1.0.4 - ov_plugin_tools.php textinput Function XSS
Slug
salesforce-wordpress-to-lead
Published
2014-08-01
Title
WordPress-to-Lead for Salesforce CRM 1.0.1 - salesforce.php salesforce_form_shortcode Function Error Message H&ling XSS
Slug
salesforce-wordpress-to-lead
Published
2014-08-01
Title
WordPress-to-Lead for Salesforce CRM 1.0 - salesforce.php Multiple Parameter XSS
Slug
salesforce-wordpress-to-lead
Published
2025-09-05
Title
To Lead For Salesforce <= 2.7.3.9 - Cross-Site Request Forgery
Slug
salesking
Published
2024-01-16
Title
SalesKing < 1.6.30 - Unauthenticated Sensitive Information Exposure
Slug
salesking
Published
2024-01-16
Title
SalesKing < 1.6.30 - Missing Authorization to Settings Change
Slug
salesking
Published
2024-01-16
Title
SalesKing < 1.6.30 - Unauthenticated Privilege Escalation
Slug
salesmanago
Published
2023-10-20
Title
SALESmanago < 3.2.5 - Log Injection via Weak Authentication Token
Slug
salesmanago
Published
2025-09-22
Title
SALESmanago < 3.8.2 - Missing Authorization
Slug
salesmanago
Published
2025-09-22
Title
SALESmanago < 3.8.2 - Cross-Site Request Forgery
Slug
salesmanago
Published
2025-12-24
Title
SALESmanago < 3.9.1 - Missing Authorization
Slug
salient-core
Published
2023-11-24
Title
Salient Core < 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
salient-core
Published
2023-11-24
Title
Salient Core < 2.0.3 - Reflected Cross-Site Scripting
Slug
salient-core
Published
2024-04-17
Title
Salient Core < 2.0.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Slug
salient-core
Published
2025-10-08
Title
Salient Core < 3.0.9 - Missing Authorization
Slug
salient-shortcodes
Published
2024-04-17
Title
Salient Shortcodes < 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
salient-shortcodes
Published
2024-04-17
Title
Salient Shortcodes < 1.5.4 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Slug
salient-shortcodes
Published
2025-10-09
Title
Salient Shortcodes < 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
salon-booking-plugin-pro
Published
2022-03-21
Title
Salon booking system < 7.6.3 - Unauthenticated Sensitive Data Disclosure
Slug
salon-booking-plugin-pro
Published
2022-03-21
Title
Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure