WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-pull-quote
Published
2025-10-23
Title
Simple Pull Quote < 1.6.4 - Contributor+ Stored XSS
Slug
simple-quotation
Published
2022-02-16
Title
Simple Quotation <= 1.3.2 - Subscriber+ SQL injection
Slug
simple-quotation
Published
2022-02-16
Title
Simple Quotation <= 1.3.2 - Quote Creation/Edition via CSRF to Stored Cross-Site Scripting
Slug
simple-rating
Published
2025-03-24
Title
Simple Rating <= 1.4 - Cross-Site Request Forgery
Slug
simple-real-estate-pack-4
Published
2022-05-09
Title
Simple Real Estate Pack <= 1.4.8 - Admin+ Stored Cross Site Scripting
Slug
simple-responsive-image-gallery
Published
2021-12-14
Title
Simple Image Gallery <= 1.0.6 - Reflected Cross-Site Scripting
Slug
simple-responsive-menu
Published
2025-02-13
Title
Simple Responsive Menu <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
simple-responsive-slider
Published
2024-07-10
Title
Simple Responsive Slider <= 0.2.2.5 - Reflected Cross-Site Scripting
Slug
simple-restaurant-menu
Published
2025-09-22
Title
Simple Restaurant Menu <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-restrict
Published
2024-03-07
Title
Simple Restrict < 1.2.7 - Missing Authorization to Sensitive Information Exposure
Slug
simple-restrict
Published
2024-12-09
Title
Simple Restrict < 1.2.8 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
simple-retail-menus
Published
2014-08-01
Title
Simple Retail Menus 4.0.1 - includes/actions.php targetmenu Parameter SQL Injection
Slug
simple-retail-menus
Published
2014-08-01
Title
Simple Retail Menus 4.0.1 - includes/mode-edit.php targetmenu Parameter SQL Injection
Slug
simple-retail-menus
Published
2026-02-09
Title
Simple Retail Menus <= 4.2.1 - Unauthenticated Local File Inclusion
Slug
simple-revisions-delete
Published
2024-03-28
Title
Simple Revisions Delete < 1.5.4 - Cross-Site Request Forgery
Slug
simple-sales-tax
Published
2026-01-21
Title
TaxCloud for WooCommerce < 8.4.0 - Missing Authorization
Slug
simple-schools-staff-directory
Published
2021-08-23
Title
Simple School Staff Directory <= 1.1 - Admin+ Arbitrary File Upload
Slug
simple-security
Published
2015-01-14
Title
Simple Security <= 1.1.5 - 2 x Cross-Site Scripting (XSS)
Slug
simple-select-all-text-box
Published
2025-02-03
Title
Simple Select All Text Box <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-share-buttons-adder
Published
2014-06-26
Title
Simple Share Buttons Adder 4.4 - options-general.php Multiple Admin Actions CSRF
Slug
simple-share-buttons-adder
Published
2014-06-26
Title
Simple Share Buttons Adder 4.4 - options-general.php ssba_share_text Parameter Stored XSS Weakness
Slug
simple-share-buttons-adder
Published
2015-06-02
Title
Simple Share Buttons Adder <= 6.0.0 - Reflected Cross-Site Scripting (XSS)
Slug
simple-share-buttons-adder
Published
2023-04-19
Title
Simple Share Buttons Adder < 8.5.1 - CSRF
Slug
simple-share-buttons-adder
Published
2024-02-14
Title
Simple Share Buttons Adder < 8.4.12 - Authenticated(Administrator+) Stored Cross-Site Scripting via CSS Settings
Slug
simple-share-buttons-adder
Published
2024-05-28
Title
Simple Share Buttons Adder < 8.5.1 - Admin+ Stored XSS