WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shareaholic
Published
2014-11-10
Title
Shareaholic 7.6.0.3 - XSS
Slug
shareaholic
Published
2022-07-04
Title
Shareaholic < 9.7.6 - Information Disclosure
Slug
shareaholic
Published
2023-11-14
Title
Shareaholic < 9.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
shareaholic
Published
2024-01-31
Title
Shareaholic < 9.7.12 - Missing Authorization via accept_terms_of_service
Slug
sharebang
Published
2025-07-11
Title
ShareBang, Ultimate Social Share Buttons for WordPress <= 1.4 - Reflected Cross-Site Scripting
Slug
sharebar
Published
2013-09-24
Title
Sharebar < 1.4.1 - Reflected Cross-Site Scripting (XSS)
Slug
sharebar
Published
2013-07-04
Title
Sharebar < 1.4.1 - Button Manipulation CSRF
Slug
sharebar
Published
2012-05-15
Title
Sharebar <= 1.2.1 - SQL Injection & Cross-Site Scripting (XSS)
Slug
sharebar
Published
2014-08-01
Title
Sharebar <= 1.2.1 - SQL Injection & Cross Site Scripting
Slug
sharebar
Published
2022-06-15
Title
Sharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
shared-counts
Published
2024-05-07
Title
Shared Counts – Social Media Share Buttons < 1.5.0 - Missing Authorization to Arbitrary Email Sending
Slug
shared-files
Published
2021-09-15
Title
Shared Files < 1.6.57 - Admin+ Stored Cross-Site Scripting
Slug
shared-files
Published
2021-10-18
Title
Shared Files < 1.6.61 - Admin+ Stored Cross-Site Scripting
Slug
shared-files
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
shared-files
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
shared-files
Published
2023-09-21
Title
Shared Files < 1.7.6 - Unauthenticated Stored Cross-Site Scripting
Slug
shared-files
Published
2024-04-17
Title
Shared Files < 1.7.17 - Missing Authorization to Notice Dismissal
Slug
shared-files
Published
2024-05-07
Title
Shared Files < 1.7.20 - Missing Authorization
Slug
shared-files
Published
2024-08-09
Title
Shared Files < 1.7.29 - Unauthenticated Sensitive Information Exposure
Slug
shared-files
Published
2025-01-30
Title
Shared Files – Frontend File Upload Form & Secure File Sharing < 1.7.43 - Limited Unauthenticated Stored Cross-Site Scripting via File Upload
Slug
shared-files
Published
2025-06-02
Title
Shared Files < 1.7.49 - Unauthenticated Stored Cross-Site Scripting via sanitize_file Function
Slug
shared-files
Published
2026-03-05
Title
Shared Files < 1.7.58 - Contributor+ Arbitrary File Download
Slug
sharespine-woocommerce-connector
Published
2025-05-16
Title
Sharespine Woocommerce Connector < 4.8.56 - Missing Authorization
Slug
sharethis-share-buttons
Published
2024-05-22
Title
ShareThis Share Buttons < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sharethis-inline-buttons Shortcode
Slug
shareyourcart
Published
2014-08-01
Title
ShareYourCart 1.6.1 - SDK Multiple Unspecified Path Disclosure