WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shipyaari-shipping-managment
Published
2024-10-18
Title
Shipyaari Shipping Management <= 1.2 - Unauthenticated PHP Object Injection
Slug
shmapper-by-teplitsa
Published
2024-12-23
Title
shMapper by Teplitsa < 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shmapper-by-teplitsa
Published
2025-01-24
Title
ShMapper by Teplitsa < 1.5.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
shockingly-big-ie6-warning
Published
2025-01-16
Title
Shockingly Big IE6 Warning <= 1.6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
shockingly-simple-favicon
Published
2023-09-29
Title
Shockingly Simple Favicon <= 1.8.2 - Settings Update via CSRF
Slug
shop-as-a-customer-for-woocommerce
Published
2023-07-31
Title
Shop as a Customer for WooCommerce < 1.2.4 - Shop Manager+ Privilege Escalation
Slug
shop-as-a-customer-for-woocommerce
Published
2023-07-31
Title
Shop as a Customer for WooCommerce < 1.1.8 - Subscriber+ Privilege Escalation
Slug
shop-assistant-for-woocommerce-jarvis
Published
2024-11-11
Title
Floating Buttons for WooCommerce < 2.9.2 - Missing Authorization
Slug
shop-page-wp
Published
2021-11-01
Title
Shop Page WP < 1.2.8 - Admin+ Stored Cross-Site Scripting
Slug
shopbuilder
Published
2024-05-09
Title
ShopBuilder – Elementor WooCommerce Builder Addons < 2.1.9 - Unauthenticated Sensitive Information Exposure
Slug
shopbuilder
Published
2024-07-05
Title
ShopBuilder – Elementor WooCommerce Builder Addons < 2.1.13 - Authenticated (Contributor+) Local File Inclusion
Slug
shopbuilder
Published
2025-12-12
Title
Shopbuilder < 3.2.2 - Reflected XSS
Slug
shopconstruct
Published
2023-09-01
Title
ShopConstruct <= 1.1.2 - Admin+ Stored XSS
Slug
shopcred
Published
2025-04-01
Title
ShopCred <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shopelement
Published
2024-12-30
Title
ShopElement < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shopello
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
shopengine
Published
2023-04-19
Title
ShopEngine < 4.1.2 - CSRF
Slug
shopengine
Published
2025-09-25
Title
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution < 4.8.4 - Insufficient Authorization to Authenticated (Editor+) Settings Update
Slug
shopengine
Published
2025-10-24
Title
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution < 4.8.5 - Incorrect Authorization to Authenticated (Editor+) License Status Update
Slug
shopengine
Published
2025-12-02
Title
ShopEngine < 4.8.6 - Cross-Site Request Forgery to Wishlist Manipulation
Slug
shopkeeper-extender
Published
2024-04-11
Title
Shopkeeper Extender < 3.7 - Contributor+ Stored XSS
Slug
shopkeeper-extender
Published
2025-11-13
Title
Shopkeeper Extender < 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shopmagic-for-woocommerce
Published
2025-10-15
Title
ShopMagic < 4.5.7 - Unauthenticated Information Exposure
Slug
shopmagic-for-woocommerce
Published
2026-01-07
Title
ShopMagic < 4.7.3 - Missing Authorization
Slug
shopp
Published
2021-08-17
Title
Shopp eCommerce <= 1.4 - Unauthenticated Arbitrary File Upload