WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
show-posts
Published
2026-03-20
Title
Weaver Show Posts < 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget Setting
Slug
show-posts-shortcodes
Published
2026-03-20
Title
Show Posts list <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
show-visitor-ip-address
Published
2024-10-31
Title
Show Visitor IP Address <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
show-website-content-in-wordpress-page-or-post
Published
2024-06-21
Title
Website Content in Page or Post < 2024.04.09 - Contributor+ Stored Cross-Site Scripting
Slug
show-youtube-video
Published
2026-03-06
Title
Show YouTube video <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
showbizpro
Published
2015-05-03
Title
Showbiz Pro <= 1.7.1 - Shell Upload
Slug
showeblogin-facebook-page-like-box
Published
2025-04-04
Title
Showeblogin Social <= 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
showhide-shortcode
Published
2025-01-24
Title
Show/Hide Shortcode < 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
shown-connector
Published
2026-01-15
Title
Shown Connector <= 1.2.10 - Missing Authorization to Unauthenticated Settings Update
Slug
showpass
Published
2025-09-05
Title
Showpass WordPress Extension < 4.0.4 - Contributor+ Stored XSS
Slug
showtime-slideshow
Published
2025-03-28
Title
ShowTime Slideshow <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - plugins/metric-conversion.php Multiple Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - plugins/plugin-notification.php Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - plugins/variant-shortcode.php Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - admin/experiments.php Multiple Unspecified XSS
Slug
shrimptest
Published
2014-08-01
Title
ShrimpTest 1.0b2 - admin/experiment-new.php Multiple Unspecified XSS
Slug
shrinktheweb-website-preview-plugin
Published
2025-09-22
Title
ShrinkTheWeb (STW) Website Previews <= 2.8.5 - Cross-Site Request Forgery
Slug
shuffle
Published
2025-03-24
Title
Shuffle <= 0.5 - Authenticated (Subscriber+) SQL Injection
Slug
si-captcha-for-wordpress
Published
2014-09-27
Title
SI CAPTCHA 2.7.4 - Cross-Site Scripting (XSS)
Slug
si-contact-form
Published
2015-09-14
Title
Fast Secure Contact Form <= 4.0.37 - Authenticated Cross-Site Scripting (XSS)
Slug
sibs-woocommerce
Published
2026-02-03
Title
SIBS - WooCommerce <= 2.2.0 - Authenticated (Admin+) SQL Injection via 'referencedId' Parameter
Slug
side-cart-woocommerce
Published
2022-01-13
Title
XootiX Plugins - Various Versions CSRF to Arbitrary Options Update
Slug
side-cart-woocommerce
Published
2023-04-24
Title
Side Cart Woocommerce < 2.2 - Settings Reset via CSRF
Slug
side-cart-woocommerce
Published
2023-06-28
Title
Side Cart Woocommerce (Ajax) < 2.3 - Admin+ Stored XSS
Slug
side-menu
Published
2021-05-27
Title
Side Menu < 3.1.5 - Authenticated (admin+) SQL Injection