WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-301-redirects
Published
2023-08-30
Title
Simple 301 Redirects < 2.0.8 - Cross-Site Request Forgery via 'clicked'
Slug
simple-301-redirects
Published
2023-11-13
Title
Simple 301 Redirects by BetterLinks < 2.0.8 - Missing Authorization via clicked
Slug
simple-301-redirects-addon-bulk-uploader
Published
2019-08-10
Title
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Multiple Issues
Slug
simple-add-pages-or-posts
Published
2016-02-02
Title
Simple Add Pages or Posts <= 1.6 - CSRF
Slug
simple-add-pages-or-posts
Published
2025-01-06
Title
Simple add pages or posts <= 2.0.0 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
simple-add-pages-or-posts
Published
2025-02-08
Title
Simple add pages or posts <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-admin-language-change
Published
2021-05-05
Title
Simple Admin Language Change < 2.0.2 - Arbitrary User Locale Change
Slug
simple-ads-manager
Published
2015-04-02
Title
Simple Ads Manager < 2.7.102 - Arbitrary File Upload & SQL Injection
Slug
simple-ads-manager
Published
2015-07-02
Title
Simple Ads Manager < 2.9.4.116 - Unauthenticated Denial of Service (DoS)
Slug
simple-ads-manager
Published
2016-01-30
Title
Simple Ads Manager < 2.9.5.118 - SQL Injection
Slug
simple-ads-manager
Published
2017-03-01
Title
Simple Ads Manager - Unauthenticated PHP Object Injection
Slug
simple-ajax-chat
Published
2022-04-15
Title
Simple Ajax Chat < 20220216 - Log Clearing & Arbitrary Chat Message Deletion via CSRF
Slug
simple-ajax-chat
Published
2022-04-15
Title
Simple Ajax Chat < 20220216 - Sensitive Information Disclosure
Slug
simple-ajax-chat
Published
2022-02-16
Title
Simple Ajax Chat < 20220216 - Unauthenticated Stored XSS
Slug
simple-ajax-chat
Published
2024-02-28
Title
Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS
Slug
simple-ajax-chat
Published
2024-03-26
Title
Simple Ajax Chat < 20240216 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
simple-ajax-chat
Published
2024-03-26
Title
Simple Ajax Chat < 20240223 - Unauthenticated Stored Cross-Site Scripting
Slug
simple-ajax-chat
Published
2024-05-14
Title
Simple Ajax Chat < 20240412 - Admin+ Stored XSS
Slug
simple-ajax-chat
Published
2026-02-17
Title
Simple Ajax Chat < 20260217 - Unauthenticated Information Exposure
Slug
simple-al-slider
Published
2024-06-07
Title
Simple AL Slider <= 1.2.10 - Reflected XSS
Slug
simple-al-slider
Published
2025-12-11
Title
Simple AL Slider <= 1.2.10 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
simple-alert-boxes
Published
2024-07-08
Title
Simple Alert Boxes <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Alert Shortcode
Slug
simple-amazon-affiliate
Published
2025-03-11
Title
Simple Amazon Affiliate <= 1.0.9 - Reflected Cross-Site Scripting
Slug
simple-archive-generator
Published
2025-12-31
Title
Simple Archive Generator <= 5.2 - Cross-Site Request Forgery
Slug
simple-archive-generator
Published
2026-01-27
Title
Simple Archive Generator <= 5.2 - Reflected Cross-Site Scripting