WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-link-directory
Published
2022-02-28
Title
Simple Link Directory < 7.7.2 - Unauthenticated SQL injection
Slug
simple-link-directory
Published
2024-12-12
Title
Simple Link Directory < 8.4.6 - Unauthenticated Arbitrary Shortcode Execution
Slug
simple-link-directory
Published
2025-12-15
Title
Simple Link Directory < 8.8.4 - Cross-Site Request Forgery
Slug
simple-link-directory
Published
2025-12-15
Title
Simple Link Directory < 8.8.4 - Missing Authorization
Slug
simple-link-list-widget
Published
2025-09-05
Title
Simple Link List Widget <= 0.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-load-more
Published
2024-10-21
Title
Simple Load More <= 1.0 - Reflected Cross-Site Scripting
Slug
simple-local-avatars
Published
2024-08-07
Title
Simple Local Avatars < 2.7.11 - Cross-Site Request Forgery via save_default_avatar_file_id()
Slug
simple-local-avatars
Published
2024-11-15
Title
Simple Local Avatars < 2.8.0 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing
Slug
simple-local-avatars
Published
2025-08-11
Title
Simple Local Avatars < 2.8.5 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration
Slug
simple-locator
Published
2024-12-13
Title
Simple Locator < 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-locator
Published
2025-01-07
Title
Simple Locator <= 2.0.4 - Reflected Cross-Site Scripting
Slug
simple-login-log
Published
2014-08-01
Title
Simple Login Log - Cross-Site Scripting (XSS)
Slug
simple-login-log
Published
2014-08-01
Title
Simple Login Log - SQL Injection
Slug
simple-login-log
Published
2017-10-10
Title
Simple Login Log < 1.1.2 - Authenticated SQL Injection
Slug
simple-login-log
Published
2025-08-17
Title
Simple Login Log < 2.0.0 - Authenticated (Administrator+) PHP Object Injection
Slug
simple-logo-carousel
Published
2025-06-16
Title
Simple Logo Carousel < 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
simple-long-form
Published
2023-11-27
Title
Simple Long Form <= 2.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-mail-address-encoder
Published
2019-07-03
Title
Simple Mail Address Encoder < 1.7 - Reflected Authenticated XSS
Slug
simple-map-no-api
Published
2025-02-17
Title
Simple Map No Api <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Slug
simple-map-no-api
Published
2025-04-01
Title
Simple Map No Api <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-matomo-tracking-code
Published
2025-09-03
Title
Simple Matomo Tracking Code < 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-matted-thumbnails
Published
2021-09-09
Title
Simple Matted Thumbnails <= 1.01 - Reflected Cross-Site Scripting
Slug
simple-media-directory
Published
2024-06-21
Title
Simple Video Directory < 1.4.4 - Contributor+ Stored XSS
Slug
simple-media-directory
Published
2024-05-21
Title
Simple Video Directory < 1.4.3 - Unauthenticated SQLi
Slug
simple-membership
Published
2016-07-14
Title
Simple Membership <= 3.2.8 - Cross-Site Scripting (XSS)