WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-ads-manager
Published
2015-04-02
Title
Simple Ads Manager < 2.7.102 - Arbitrary File Upload & SQL Injection
Slug
simple-ads-manager
Published
2015-07-02
Title
Simple Ads Manager < 2.9.4.116 - Unauthenticated Denial of Service (DoS)
Slug
simple-ads-manager
Published
2016-01-30
Title
Simple Ads Manager < 2.9.5.118 - SQL Injection
Slug
simple-ads-manager
Published
2017-03-01
Title
Simple Ads Manager - Unauthenticated PHP Object Injection
Slug
simple-ajax-chat
Published
2022-04-15
Title
Simple Ajax Chat < 20220216 - Log Clearing & Arbitrary Chat Message Deletion via CSRF
Slug
simple-ajax-chat
Published
2022-04-15
Title
Simple Ajax Chat < 20220216 - Sensitive Information Disclosure
Slug
simple-ajax-chat
Published
2022-02-16
Title
Simple Ajax Chat < 20220216 - Unauthenticated Stored XSS
Slug
simple-ajax-chat
Published
2024-02-28
Title
Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS
Slug
simple-ajax-chat
Published
2024-03-26
Title
Simple Ajax Chat < 20240216 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
simple-ajax-chat
Published
2024-03-26
Title
Simple Ajax Chat < 20240223 - Unauthenticated Stored Cross-Site Scripting
Slug
simple-ajax-chat
Published
2024-05-14
Title
Simple Ajax Chat < 20240412 - Admin+ Stored XSS
Slug
simple-al-slider
Published
2024-06-07
Title
Simple AL Slider <= 1.2.10 - Reflected XSS
Slug
simple-al-slider
Published
2025-12-11
Title
Simple AL Slider <= 1.2.10 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
simple-alert-boxes
Published
2024-07-08
Title
Simple Alert Boxes <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Alert Shortcode
Slug
simple-amazon-affiliate
Published
2025-03-11
Title
Simple Amazon Affiliate <= 1.0.9 - Reflected Cross-Site Scripting
Slug
simple-archive-generator
Published
2025-12-31
Title
Simple Archive Generator <= 5.2 - Cross-Site Request Forgery
Slug
simple-audioplayer
Published
2025-03-31
Title
Simple-Audioplayer <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-author-box
Published
2023-07-24
Title
Simple Author Box < 2.52 - Contributor+ Arbitrary User Information Disclosure via IDOR
Slug
simple-author-box
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simple-auto-tag
Published
2025-02-03
Title
Simple Auto Tag <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
simple-backup
Published
2015-05-19
Title
Simple Backup <= 2.7.10 - Arbitrary File Download
Slug
simple-banner
Published
2021-07-26
Title
Simple Banner < 2.10.4 - Admin+ Stored XSS
Slug
simple-banner
Published
2022-07-22
Title
Simple Banner < 2.12.0 - Admin+ Stored Cross-Site Scripting
Slug
simple-banner
Published
2022-07-26
Title
Simple Banner < 2.12.0 - Admin+ Stored Cross Site Scripting
Slug
simple-banner
Published
2025-03-03
Title
Simple Banner < 3.0.4 - Admin+ Stored XSS