WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-mobile-url-redirect
Published
2023-03-20
Title
Simple Mobile URL Redirect <= 1.7.2 - Cross-Site Request Forgery
Slug
simple-nav-archives
Published
2024-07-11
Title
Simple Nav Archives <= 2.1.3 - Settings Update via CSRF
Slug
simple-nested-menu
Published
2025-06-05
Title
Simple Nested Menu <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-news
Published
2024-10-24
Title
Simple News <= 2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via news Shortcode
Slug
simple-nivo-slider
Published
2025-12-11
Title
Simple Nivo Slider <= 0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
simple-notification
Published
2024-12-06
Title
Simple Notification <= 1.3 - Missing Authorization
Slug
simple-notification
Published
2025-03-04
Title
Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-optimizer
Published
2025-03-24
Title
Simple Optimizer <= 1.2.7 - Cross-Site Request Forgery
Slug
simple-org-chart
Published
2023-08-17
Title
Simple Org Chart < 2.3.5 - Unauthenticated Tree Settings Update
Slug
simple-org-chart
Published
2023-08-17
Title
Simple Org Chart < 2.3.5 - Settings Update via CSRF
Slug
simple-owl-carousel
Published
2025-03-31
Title
Simple Owl Carousel <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-page-access-restriction
Published
2024-02-07
Title
Simple Page Access Restriction < 1.0.23 - Improper Access Control to Sensitive Information Exposure via REST API
Slug
simple-page-access-restriction
Published
2024-12-17
Title
Simple Page Access Restriction < 1.0.30 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
simple-page-access-restriction
Published
2025-05-29
Title
Simple Page Access Restriction < 1.0.32 - Cross-Site Request Forgery via Multiple Parameters
Slug
simple-page-access-restriction
Published
2025-08-27
Title
Simple Page Access Restriction < 1.0.33 - Cross-Site Request Forgery
Slug
simple-page-transition
Published
2022-06-27
Title
Simple Page Transition <= 1.4.1 - Admin+ Stored Cross-Site Scripting
Slug
simple-payment
Published
2024-12-11
Title
Simple Payment < 2.3.8 - Reflected Cross-Site Scripting
Slug
simple-payment
Published
2025-06-26
Title
Simple Payment 1.3.6 - 2.3.8 - Authentication Bypass to Admin
Slug
simple-payment
Published
2025-10-29
Title
Simple Payment < 2.4.7 - Unauthenticated Local File Inclusion
Slug
simple-payment
Published
2025-10-29
Title
Simple Payment < 2.4.7 - Unauthenticated Stored Cross-Site Scripting
Slug
simple-pdf-viewer
Published
2023-02-17
Title
Simple PDF Viewer <= 1.9 - Contributor+ XSS
Slug
simple-personal-message
Published
2016-12-05
Title
Single Personal Message 1.0.3 – Authenticated SQL Injection
Slug
simple-photo-feed
Published
2025-02-18
Title
Simple Photo Feed < 1.4.1 - Missing Authorization
Slug
simple-photo-gallery
Published
2015-05-21
Title
Simple Photo Gallery 1.7.8 - Blind SQL Injection
Slug
simple-photo-gallery
Published
2016-04-28
Title
Simple Photo Gallery <= 1.8.0 - Stored Cross-Site Scripting (XSS)