WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-banner
Published
2025-04-03
Title
Simple Banner < 3.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-banner
Published
2025-10-21
Title
Simple Banner < 3.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
simple-bar
Published
2025-10-02
Title
Notification Bar <= 2.2 - Cross-Site Request Forgery
Slug
simple-baseball-scoreboard
Published
2024-10-09
Title
Simple Baseball Scoreboard <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-basic-contact-form
Published
2022-12-02
Title
Simple Basic Contact Form < 20221201 - Admin+ Stored XSS
Slug
simple-basic-contact-form
Published
2024-05-03
Title
Simple Basic Contact Form < 20240502 - Reflected Cross-Site Scripting
Slug
simple-basic-contact-form
Published
2024-05-13
Title
Simple Basic Contact Form < 20240511 - Unauthenticated Arbitrary Shortcode Execution
Slug
simple-basic-contact-form
Published
2024-11-27
Title
Simple Basic Contact Form < 20250114 - Admin+ Stored XSS
Slug
simple-behace-portfolio
Published
2021-08-13
Title
Simple Behance Portfolio <= 0.2 - Reflected Cross-Site Scripting
Slug
simple-behace-portfolio
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
simple-bike-rental
Published
2025-12-11
Title
Simple Bike Rental < 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Sensitive Booking Data Exposure
Slug
simple-bitcoin-faucets
Published
2022-08-31
Title
Simple Bitcoin Faucets <= 1.7.0 - Unauthorised AJAX Call to Stored XSS
Slug
simple-blog-card
Published
2023-08-02
Title
Simple Blog Card < 1.31 - Contributor+ Stored XSS via Shortcode
Slug
simple-blog-card
Published
2023-08-07
Title
Simple Blog Card < 1.32 - Subscriber+ Arbitrary Post Access
Slug
simple-blog-stats
Published
2025-05-07
Title
Simple Blog Stats < 20250423 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-blueprint-installer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simple-booking-widget
Published
2024-12-12
Title
Simple Booking Widget <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
simple-business-data
Published
2025-10-21
Title
Simple Business Data <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-business-directory-pro
Published
2025-05-22
Title
Simple Business Directory Pro <= 15.4.8 - Unauthenticated Privilege Escalation
Slug
simple-business-directory-pro
Published
2025-07-23
Title
Simple Business Directory Pro < 15.5.2 - Reflected Cross-Site Scripting
Slug
simple-business-directory-pro
Published
2025-08-19
Title
Simple Business Directory Pro < 15.6.9 - Unauthenticated Privilege Escalation
Slug
simple-business-manager
Published
2024-10-31
Title
Simple Business Manager <= 4.6.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-buttons-creator
Published
2024-03-25
Title
Simple Buttons Creator <= 1.04 - Unauthenticated Stored XSS
Slug
simple-buttons-creator
Published
2024-03-25
Title
Simple Buttons Creator <= 1.04 - Aribtrary Button Deletion via CSRF
Slug
simple-calendar-for-elementor
Published
2025-04-22
Title
Simple calendar for Elementor < 1.6.5 - Cross-Site Request Forgery