WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
share-this-image
Published
2026-01-25
Title
Share This Image < 2.10 - Missing Authorization
Slug
share-this-image
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
share-this-image
Published
2026-03-26
Title
Share This Image < 2.13 - Missing Authorization
Slug
share-this-image
Published
2026-02-13
Title
Share This Image < 2.15 - Unauthenticated Server-Side Request Forgery
Slug
share-to-google-classroom
Published
2025-11-10
Title
Share to Google Classroom <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via share_to_google Shortcode
Slug
share-woocommerce-email
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
shareaholic
Published
2014-08-01
Title
Shareaholic - Unspecified CSRF
Slug
shareaholic
Published
2014-11-10
Title
Shareaholic 7.6.0.3 - XSS
Slug
shareaholic
Published
2022-07-04
Title
Shareaholic < 9.7.6 - Information Disclosure
Slug
shareaholic
Published
2023-11-14
Title
Shareaholic < 9.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
shareaholic
Published
2024-01-31
Title
Shareaholic < 9.7.12 - Missing Authorization via accept_terms_of_service
Slug
sharebang
Published
2025-07-11
Title
ShareBang, Ultimate Social Share Buttons for WordPress <= 1.4 - Reflected Cross-Site Scripting
Slug
sharebar
Published
2013-09-24
Title
Sharebar < 1.4.1 - Reflected Cross-Site Scripting (XSS)
Slug
sharebar
Published
2013-07-04
Title
Sharebar < 1.4.1 - Button Manipulation CSRF
Slug
sharebar
Published
2012-05-15
Title
Sharebar <= 1.2.1 - SQL Injection & Cross-Site Scripting (XSS)
Slug
sharebar
Published
2014-08-01
Title
Sharebar <= 1.2.1 - SQL Injection & Cross Site Scripting
Slug
sharebar
Published
2022-06-15
Title
Sharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
shared-counts
Published
2024-05-07
Title
Shared Counts – Social Media Share Buttons < 1.5.0 - Missing Authorization to Arbitrary Email Sending
Slug
shared-files
Published
2021-09-15
Title
Shared Files < 1.6.57 - Admin+ Stored Cross-Site Scripting
Slug
shared-files
Published
2021-10-18
Title
Shared Files < 1.6.61 - Admin+ Stored Cross-Site Scripting
Slug
shared-files
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
shared-files
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
shared-files
Published
2023-09-21
Title
Shared Files < 1.7.6 - Unauthenticated Stored Cross-Site Scripting
Slug
shared-files
Published
2024-04-17
Title
Shared Files < 1.7.17 - Missing Authorization to Notice Dismissal
Slug
shared-files
Published
2024-05-07
Title
Shared Files < 1.7.20 - Missing Authorization