WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-author-box
Published
2023-07-24
Title
Simple Author Box < 2.52 - Contributor+ Arbitrary User Information Disclosure via IDOR
Slug
simple-author-box
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simple-auto-tag
Published
2025-02-03
Title
Simple Auto Tag <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
simple-backup
Published
2015-05-19
Title
Simple Backup <= 2.7.10 - Arbitrary File Download
Slug
simple-banner
Published
2021-07-26
Title
Simple Banner < 2.10.4 - Admin+ Stored XSS
Slug
simple-banner
Published
2022-07-22
Title
Simple Banner < 2.12.0 - Admin+ Stored Cross-Site Scripting
Slug
simple-banner
Published
2022-07-26
Title
Simple Banner < 2.12.0 - Admin+ Stored Cross Site Scripting
Slug
simple-banner
Published
2025-03-03
Title
Simple Banner < 3.0.4 - Admin+ Stored XSS
Slug
simple-banner
Published
2025-04-03
Title
Simple Banner < 3.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-banner
Published
2025-10-21
Title
Simple Banner < 3.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
simple-bar
Published
2025-10-02
Title
Notification Bar <= 2.2 - Cross-Site Request Forgery
Slug
simple-baseball-scoreboard
Published
2024-10-09
Title
Simple Baseball Scoreboard <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-basic-contact-form
Published
2022-12-02
Title
Simple Basic Contact Form < 20221201 - Admin+ Stored XSS
Slug
simple-basic-contact-form
Published
2024-05-03
Title
Simple Basic Contact Form < 20240502 - Reflected Cross-Site Scripting
Slug
simple-basic-contact-form
Published
2024-05-13
Title
Simple Basic Contact Form < 20240511 - Unauthenticated Arbitrary Shortcode Execution
Slug
simple-basic-contact-form
Published
2024-11-27
Title
Simple Basic Contact Form < 20250114 - Admin+ Stored XSS
Slug
simple-behace-portfolio
Published
2021-08-13
Title
Simple Behance Portfolio <= 0.2 - Reflected Cross-Site Scripting
Slug
simple-behace-portfolio
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
simple-bible-verse-via-shortcode
Published
2026-02-06
Title
Simple Bible Verse via Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-bike-rental
Published
2025-12-11
Title
Simple Bike Rental < 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Sensitive Booking Data Exposure
Slug
simple-bitcoin-faucets
Published
2022-08-31
Title
Simple Bitcoin Faucets <= 1.7.0 - Unauthorised AJAX Call to Stored XSS
Slug
simple-blog-card
Published
2023-08-02
Title
Simple Blog Card < 1.31 - Contributor+ Stored XSS via Shortcode
Slug
simple-blog-card
Published
2023-08-07
Title
Simple Blog Card < 1.32 - Subscriber+ Arbitrary Post Access
Slug
simple-blog-stats
Published
2025-05-07
Title
Simple Blog Stats < 20250423 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-blueprint-installer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting