WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-embed-code
Published
2024-11-08
Title
Code Embed < 2.5.1 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
simple-embed-code
Published
2026-03-17
Title
Code Embed < 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields
Slug
simple-event-attendance
Published
2026-02-13
Title
SEATT: Simple Event Attendance <= 1.5.0 - Cross-Site Request Forgery to Arbitrary Event Deletion
Slug
simple-event-planner
Published
2022-03-23
Title
Simple Event Planner < 1.5.5 - Author+ Stored Cross-Site Scripting
Slug
simple-event-planner
Published
2022-03-23
Title
Simple Event Planner < 1.5.5 - Contributor+ Stored XSS
Slug
simple-events-calendar
Published
2017-11-03
Title
Simple Events Calendar <= 1.3.5 - Authenticated SQL Injection
Slug
simple-events-calendar
Published
2021-07-24
Title
Simple Events Calendar <= 1.4.0 - Authenticated (admin+) SQL Injection
Slug
simple-excel-pricelist-for-woocommerce
Published
2025-10-23
Title
Simple Excel Pricelist for WooCommerce <= 1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-facebook-plugin
Published
2023-11-06
Title
Simple Like Page Plugin < 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-facebook-plugin
Published
2024-05-29
Title
Simple Like Page Plugin < 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-facebook-plugin
Published
2025-12-31
Title
Simple Like Page < 2.0.0 - Missing Authorization
Slug
simple-facebook-twitter-widget
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simple-facebook-twitter-widget
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simple-feature-requests
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simple-feature-requests
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simple-featured-image
Published
2025-07-08
Title
Simple Featured Image <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via slideshow Parameter
Slug
simple-feed-stats
Published
2025-08-22
Title
Simple Statistics for Feeds < 20250820 - Cross-Site Request Forgery
Slug
simple-fields
Published
2014-08-01
Title
Simple Fields 1.1.6 - Admin Functions CSRF
Slug
simple-fields
Published
2014-08-01
Title
Simple Fields 0.3.5 - Remote File Inclusion
Slug
simple-fields
Published
2015-08-25
Title
Simple Fields <= 1.4.10 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
simple-fields
Published
2019-09-16
Title
Simple Fields <= 1.4.11 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
simple-file-downloader
Published
2023-01-25
Title
Simple File Downloader <= 1.0.4 - Contributor+ Stored XSS via Shortcode
Slug
simple-file-list
Published
2019-05-23
Title
Simple File List Plugin < 3.2.8 - Unauthenticated Arbitrary File Download
Slug
simple-file-list
Published
2019-05-23
Title
Simple File List Plugin <= 3.2.4 - Authenticated Arbitrary File Delete
Slug
simple-file-list
Published
2020-04-27
Title
Simple File List < 4.2.3 - Unauthenticated Arbitrary File Upload RCE