WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shopp-arrange
Published
2025-01-16
Title
CGD Arrange Terms <= 1.1.3 - Reflected Cross-Site Scripting
Slug
shopper
Published
2025-03-31
Title
Shopper < 3.2.6 - Unauthenticated SQL Injection
Slug
shopperapproved-reviews
Published
2025-04-01
Title
Shopper Approved Reviews 2.0 - 2.1 - Subscriber+ Arbitrary Options Update
Slug
shopping-pages
Published
2023-07-17
Title
WP Shopping Pages <= 1.14 - Stored XSS via CSRF
Slug
shopready-elementor-addon
Published
2024-11-20
Title
Shopready <= 3.6 - Contributor+ Local File Inclusion
Slug
shopsite-plugin
Published
2025-02-03
Title
ShopSite < 1.5.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
shopwarden
Published
2025-02-17
Title
Shopwarden – Automated WooCommerce monitoring & testing < 1.0.12 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
short-tax-post
Published
2025-05-05
Title
Reales WP STPT <= 2.1.2 - Unauthorized User Registration
Slug
short-tax-post
Published
2025-05-05
Title
Reales WP STPT <= 2.1.2 - Authenticated (Subscriber+) Privilege Escalation via Password Update
Slug
shortcode
Published
2025-09-22
Title
Shortcode <= 0.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shortcode-addons
Published
2021-12-21
Title
Shortcode Addons < 3.1.0 - Unauthenticated Arbitrary Option Update
Slug
shortcode-addons
Published
2021-12-28
Title
Shortcode Addons < 3.2.0 - Authenticated Arbitrary Options Update
Slug
shortcode-addons
Published
2024-03-29
Title
Shortcode Addons <= 3.2.5 - Authenticated (Admin+) Arbitrary File Upload
Slug
shortcode-addons
Published
2024-06-20
Title
Shortcode Addons <= 3.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
shortcode-ajax
Published
2025-12-12
Title
Shortcode Loader <= 1.0 - Unauthenticated Arbitrary Shortcode Execution via 'code' Parameter
Slug
shortcode-bootstrap-visuals
Published
2024-11-08
Title
Lewe Bootstrap Visuals <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shortcode-button
Published
2025-10-14
Title
Shortcode Button <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shortcode-cleaner-lite
Published
2025-03-07
Title
Shortcode Cleaner Lite <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Export
Slug
shortcode-collection
Published
2024-11-08
Title
Shortcode Collection <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shortcode-elementor
Published
2024-12-13
Title
Shortcodes for Elementor < 1.0.5 - Authenticated (Contributor+) Post Disclosure
Slug
shortcode-factory
Published
2015-04-21
Title
Shortcode Factory < 1.1.1 - XSS
Slug
shortcode-factory
Published
2019-01-16
Title
Shortcode Factory < 2.8 - Local File Inclusion
Slug
shortcode-for-current-date
Published
2022-07-07
Title
Shortcode For Current Date < 2.1.7 - Contributor+ Stored Cross-Site Scripting
Slug
shortcode-for-font-awesome
Published
2023-01-24
Title
Shortcode for Font Awesome < 1.4.1 - Contributor+ Stored XSS
Slug
shortcode-for-redirection
Published
2024-11-08
Title
Redirecter <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting