WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
show-notice-or-message-on-admin-area
Published
2025-02-03
Title
Show notice or message on admin area <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
show-pages-list
Published
2025-09-22
Title
Show Pages List <= 1.2.0 - Cross-Site Request Forgery
Slug
show-posts
Published
2023-04-01
Title
Weaver Show Posts < 1.7 - Contributor+ Stored Cross-Site Scripting
Slug
show-posts
Published
2023-08-08
Title
Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection
Slug
show-visitor-ip-address
Published
2024-10-31
Title
Show Visitor IP Address <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
show-website-content-in-wordpress-page-or-post
Published
2024-06-21
Title
Website Content in Page or Post < 2024.04.09 - Contributor+ Stored Cross-Site Scripting
Slug
showbizpro
Published
2015-05-03
Title
Showbiz Pro <= 1.7.1 - Shell Upload
Slug
showeblogin-facebook-page-like-box
Published
2025-04-04
Title
Showeblogin Social <= 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
showhide-shortcode
Published
2025-01-24
Title
Show/Hide Shortcode < 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
showpass
Published
2025-09-05
Title
Showpass WordPress Extension < 4.0.4 - Contributor+ Stored XSS
Slug
showtime-slideshow
Published
2025-03-28
Title
ShowTime Slideshow <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - plugins/metric-conversion.php Multiple Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - plugins/plugin-notification.php Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - plugins/variant-shortcode.php Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - admin/experiments.php Multiple Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - admin/experiment-new.php Multiple Unspecified XSS
Slug
shrinktheweb-website-preview-plugin
Published
2025-09-22
Title
ShrinkTheWeb (STW) Website Previews <= 2.8.5 - Cross-Site Request Forgery
Slug
shuffle
Published
2025-03-24
Title
Shuffle <= 0.5 - Authenticated (Subscriber+) SQL Injection
Slug
si-captcha-for-wordpress
Published
2014-09-27
Title
SI CAPTCHA 2.7.4 - Cross-Site Scripting (XSS)
Slug
si-contact-form
Published
2015-09-14
Title
Fast Secure Contact Form <= 4.0.37 - Authenticated Cross-Site Scripting (XSS)
Slug
side-cart-woocommerce
Published
2022-01-13
Title
XootiX Plugins - Various Versions CSRF to Arbitrary Options Update
Slug
side-cart-woocommerce
Published
2023-04-24
Title
Side Cart Woocommerce < 2.2 - Settings Reset via CSRF
Slug
side-cart-woocommerce
Published
2023-06-28
Title
Side Cart Woocommerce (Ajax) < 2.3 - Admin+ Stored XSS
Slug
side-menu
Published
2021-05-27
Title
Side Menu < 3.1.5 - Authenticated (admin+) SQL Injection
Slug
side-menu-lite
Published
2021-06-28
Title
Side Menu Lite < 2.2.1 - Authenticated SQL Injection