WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shorten-url
Published
2024-08-16
Title
Short URL <= 1.6.8 - Cross-Site Request Forgery via configuration_page
Slug
shorten-url
Published
2025-05-16
Title
Short URL <= 1.6.8 - Subscriber+ SQLi
Slug
shortlinkspro
Published
2025-06-05
Title
ShortLinks Pro < 1.0.8 - Authenticated (Administrator+) SQL Injection
Slug
shortpixel-adaptive-images
Published
2022-04-25
Title
ShortPixel Adaptive Images < 3.4.0 - Subscriber+ Arbitrary Settings Update
Slug
shortpixel-adaptive-images
Published
2023-01-31
Title
ShortPixel Adaptive Images < 3.6.3 - Reflected XSS
Slug
shortpixel-adaptive-images
Published
2023-05-08
Title
ShortPixel Adaptive Images < 3.7.2 - Settings Update via CSRF
Slug
shortpixel-adaptive-images
Published
2024-04-02
Title
ShortPixel Adaptive Images < 3.8.3 - Missing Authorization in activate_ai_handler and deactivate_ai_handler
Slug
shortpixel-adaptive-images
Published
2024-05-10
Title
ShortPixel Adaptive Images < 3.8.4 - Authenticated (Admin+) Server-Side Request Forgery
Slug
shortpixel-adaptive-images
Published
2024-05-09
Title
ShortPixel Adaptive Images < 3.8.4 - Cross-Site Request Forgery
Slug
shortpixel-adaptive-images
Published
2025-04-01
Title
ShortPixel Adaptive Images < 3.10.1 - Missing Authorization
Slug
shortpixel-adaptive-images
Published
2025-08-01
Title
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization < 3.10.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URL
Slug
shortpixel-critical-css
Published
2024-04-22
Title
ShortPixel Critical CSS < 1.0.3 - Missing Authorization
Slug
shortpixel-image-optimiser
Published
2022-06-14
Title
ShortPixel Image Optimizer < 4.22.10 - Reflected Cross-Site Scripting
Slug
shortpixel-image-optimiser
Published
2023-09-14
Title
ShortPixel Image Optimizer < 5.4.2 - Authenticated(Editor+) PHP Object Injection
Slug
shortpixel-image-optimiser
Published
2024-10-13
Title
ShortPixel Image Optimizer < 5.6.4 - Missing Authorization
Slug
shortpixel-image-optimiser
Published
2024-10-13
Title
ShortPixel Image Optimizer < 5.6.4 - Authenticated (Editor+) SQL Injection
Slug
shortpixel-image-optimiser
Published
2025-10-17
Title
ShortPixel Image Optimizer < 6.3.5 - Authenticated (Contributor+) Settings Import/Export
Slug
shortpixel-image-optimiser
Published
2026-02-04
Title
ShortPixel Image Optimizer < 6.4.3 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parameter
Slug
shoutcast-and-icecast-html5-web-radio-player-by-yesstreaming-com
Published
2025-01-16
Title
Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com <= 3.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
shoutcast-icecast-html5-radio-player
Published
2024-10-24
Title
Shoutcast Icecast HTML5 Radio Player <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shoutout
Published
2026-01-19
Title
ShoutOut <= 4.0.2 - Reflected Cross-Site Scripting
Slug
shouty
Published
2025-11-26
Title
Shouty <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shouty Shortcode Attributes
Slug
show-all-comments-in-one-page
Published
2022-12-23
Title
Show All Comments < 7.0.1 - Reflected XSS
Slug
show-all-comments-in-one-page
Published
2025-05-07
Title
Show All Comments <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
show-google-analytics-widget
Published
2025-01-07
Title
Show Google Analytics widget <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting