WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
side-menu-lite
Published
2021-07-27
Title
Side Menu Lite < 2.2.6 - Authenticated SQL Injection
Slug
side-menu-lite
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
side-menu-lite
Published
2024-04-11
Title
Side Menu Lite < 4.2.1 - Menu Deletion via CSRF
Slug
side-menu-lite
Published
2025-01-24
Title
Side Menu Lite < 5.3.2 - Cross-Site Request Forgery to Settings Update
Slug
side-slide-responsive-menu
Published
2025-09-11
Title
Side Slide Responsive Menu <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
sidebar-adder
Published
2021-08-13
Title
Add Sidebar <= 2.0.0 - Reflected Cross-Site Scripting
Slug
sidebar-content-from-shortcode
Published
2025-01-16
Title
Sidebar-Content from Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sidebar-manager
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
sidebar-manager
Published
2020-09-16
Title
Lightweight Sidebar Manager < 1.1.5 - Cross-Site Request Forgery
Slug
sidebar-manager-light
Published
2025-04-04
Title
Sidebar Manager Light <= 1.1.8 - Cross-Site Request Forgery
Slug
sidebar-manager-light
Published
2025-05-07
Title
Sidebar Manager Light <= 1.18 - Cross-Site Request Forgery
Slug
sidebartabs
Published
2025-02-14
Title
sidebarTabs <= 3.1 - Reflected Cross-Site Scripting
Slug
sideblog
Published
2022-05-23
Title
Sideblog <= 6.0 - Arbitrary Settings Update via CSRF to Stored XSS
Slug
sided
Published
2024-10-31
Title
Sided <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sight
Published
2024-09-25
Title
Sight – Professional Image Gallery and Portfolio < 1.1.3 - Missing Authorization to Sensitive Information Exposure in handler_post_title
Slug
sign-in-with-google
Published
2024-12-11
Title
Sign In With Google <= 1.8.0 - Authentication Bypass in authenticate_user
Slug
sign-up-sheets
Published
2021-06-21
Title
Sign-up Sheets < 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
sign-up-sheets
Published
2021-06-21
Title
Sign-up Sheets < 1.0.14 - Authenticated CSV Injection
Slug
sign-up-sheets
Published
2023-08-07
Title
Sign-up Sheets < 2.2.9 - Settings Update/Reset via CSRF
Slug
sign-up-sheets
Published
2024-04-05
Title
Sign-up Sheets < 2.2.12 - Cross-Site Request Forgery
Slug
sign-up-sheets
Published
2024-08-01
Title
Sign-up Sheets < 2.2.13 - Missing Authorization
Slug
sign-up-sheets
Published
2024-08-13
Title
Sign-up Sheets < 2.2.13 - Reflected XSS
Slug
sign-up-sheets
Published
2025-04-15
Title
Sign-up Sheets < 2.3.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
sign-up-sheets
Published
2025-08-20
Title
Sign-up Sheets < 2.3.3.1 - Cross-Site Request Forgery
Slug
sign-up-sheets
Published
2025-09-23
Title
Sign-up Sheets < 2.3.3 - Unauthenticated PHP Object Injection