WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
salon-booking-system
Published
2024-09-13
Title
Salon Booking System < 10.9.4 - Admin+ Stored XSS
Slug
salon-booking-system
Published
2025-04-04
Title
Salon booking system <= 10.30.17 - Missing Authorization
Slug
salon-booking-system
Published
2025-04-01
Title
Salon booking system < 10.15 - Authenticated Privilege Escalation
Slug
salon-booking-system
Published
2025-05-15
Title
Salon booking system < 10.17 - Cross-Site Request Forgery to Arbitrary Post/Page Deletion
Slug
salon-booking-system
Published
2025-09-10
Title
Salon Booking System < 10.24 - Missing Authorization to Unauthenticated AJAX Actions Execution
Slug
salon-booking-system
Published
2025-12-07
Title
Salon booking system < 10.30.4 - Cross-Site Request Forgery
Slug
salon-booking-system
Published
2026-01-21
Title
Salon booking system < 10.30.4 - Authenticated (Subscriber+) Information Exposure
Slug
salt-shaker
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
salvador-ai-image-generator
Published
2025-01-16
Title
Salvador – AI Image Generator <= 1.0.11 - Missing Authorization
Slug
sam-pro-free
Published
2016-10-28
Title
SAM Pro (Free Edition) < 1.9.7.69 - Local File Inclusion (LFI)
Slug
samandehi-logo-manager
Published
2025-06-19
Title
Logo Manager For Samandehi <= 0.5 - Cross-Site Request Forgery
Slug
same-but-different
Published
2025-01-06
Title
Same but Different – Related Posts by Taxonomy <= 1.0.16 - Reflected Cross-Site Scripting
Slug
same-category-posts
Published
2026-01-23
Title
Same Category Posts < 1.1.20 - Authenticated (Author+) Stored Cross-Site Scripting via Widget Title Placeholder
Slug
sandbox
Published
2025-01-16
Title
Sandbox <= 0.4 - Reflected Cross-Site Scripting
Slug
sandbox
Published
2025-01-16
Title
Sandbox <= 0.4 - Missing Authorization to Authenticated (Subscriber+) Sandbox Download
Slug
sangar-slider-lite
Published
2024-04-11
Title
Sangar Slider <= 1.3.2 - Cross-Site Request Forgery
Slug
saoshyant-element
Published
2024-12-16
Title
Saoshyant Element <= 1.2 - Reflected Cross-Site Scripting
Slug
saoshyant-page-builder
Published
2025-01-07
Title
Saoshyant Page Builder <= 3.8 - Missing Authorization
Slug
saoshyant-slider
Published
2025-02-21
Title
Saoshyant Slider <= 3.0 - Unauthenticated PHP Object Injection
Slug
saphali-liqpay-for-donate
Published
2025-11-07
Title
Saphali LiqPay for donate < 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
saphali-woocommerce-lite
Published
2023-07-26
Title
Saphali Woocommerce Lite < 1.9.0 - Settings Update/Reset via CSRF
Slug
sapo-feed
Published
2025-09-22
Title
SAPO Feed < 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
saragna-social-stream
Published
2024-11-04
Title
Saragna <= 1.0 - Reflected Cross-Site Scripting
Slug
sassy-social-share
Published
2019-11-17
Title
Sassy Social Share <= 3.3.3 - Cross-Site Scripting (XSS)
Slug
sassy-social-share
Published
2021-10-20
Title
Sassy Social Share 3.3.23 - Missing Access Controls to PHP Object Injection