WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shortpixel-image-optimiser
Published
2025-10-17
Title
ShortPixel Image Optimizer < 6.3.5 - Authenticated (Contributor+) Settings Import/Export
Slug
shortpixel-image-optimiser
Published
2026-02-04
Title
ShortPixel Image Optimizer < 6.4.3 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parameter
Slug
shortpixel-image-optimiser
Published
2026-03-25
Title
ShortPixel Image Optimizer < 6.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title
Slug
shortpixel-image-optimiser
Published
2026-04-20
Title
ShortPixel Image Optimizer < 6.4.4 - Author+ PHP Object Injection
Slug
shoutcast-and-icecast-html5-web-radio-player-by-yesstreaming-com
Published
2025-01-16
Title
Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com <= 3.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
shoutcast-icecast-html5-radio-player
Published
2024-10-24
Title
Shoutcast Icecast HTML5 Radio Player <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shoutout
Published
2026-01-19
Title
ShoutOut <= 4.0.2 - Reflected Cross-Site Scripting
Slug
shouty
Published
2025-11-26
Title
Shouty <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shouty Shortcode Attributes
Slug
show-all-comments-in-one-page
Published
2022-12-23
Title
Show All Comments < 7.0.1 - Reflected XSS
Slug
show-all-comments-in-one-page
Published
2025-05-07
Title
Show All Comments <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
show-google-analytics-widget
Published
2025-01-07
Title
Show Google Analytics widget <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
show-hidecollapse-expand
Published
2023-02-02
Title
Show-Hide / Collapse-Expand < 1.3.0 - Contributor+ Stored XSS via Shortcode
Slug
show-hidecollapse-expand
Published
2023-01-04
Title
Show-Hide / Collapse-Expand <= 1.2.5 - Subscriber+ Settings Update
Slug
show-me-the-cookies
Published
2025-02-21
Title
Show Me The Cookies <= 1.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
show-notice-or-message-on-admin-area
Published
2025-02-03
Title
Show notice or message on admin area <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
show-pages-list
Published
2025-09-22
Title
Show Pages List <= 1.2.0 - Cross-Site Request Forgery
Slug
show-posts
Published
2023-04-01
Title
Weaver Show Posts < 1.7 - Contributor+ Stored Cross-Site Scripting
Slug
show-posts
Published
2023-08-08
Title
Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection
Slug
show-posts
Published
2026-03-20
Title
Weaver Show Posts < 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget Setting
Slug
show-posts-shortcodes
Published
2026-03-20
Title
Show Posts list <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
show-visitor-ip-address
Published
2024-10-31
Title
Show Visitor IP Address <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
show-website-content-in-wordpress-page-or-post
Published
2024-06-21
Title
Website Content in Page or Post < 2024.04.09 - Contributor+ Stored Cross-Site Scripting
Slug
show-youtube-video
Published
2026-03-06
Title
Show YouTube video <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
showbizpro
Published
2015-05-03
Title
Showbiz Pro <= 1.7.1 - Shell Upload
Slug
showeblogin-facebook-page-like-box
Published
2025-04-04
Title
Showeblogin Social <= 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting