WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-user-capabilities
Published
2025-11-03
Title
Simple User Capabilities <= 1.0 - Missing Authorization to Unauthenticated Capability Reset
Slug
simple-user-capabilities
Published
2025-11-03
Title
Simple User Capabilities <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Slug
simple-user-listing
Published
2023-10-25
Title
Simple User Listing < 1.9.3 - Reflected XSS
Slug
simple-user-meta-editor
Published
2026-01-06
Title
Simple User Meta Editor <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via User Meta Value Field
Slug
simple-user-profile
Published
2025-02-03
Title
Simple User Profile <= 1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
simple-vertical-timeline
Published
2025-01-16
Title
Simple Vertical Timeline <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-video-embedder
Published
2022-11-09
Title
Simple Video Embedder <= 2.2 - Contributor+ Stored Cross-Site Scripting
Slug
simple-video-management-system
Published
2025-01-06
Title
Simple Video Management System <= 1.0.4 - Reflected Cross-Site Scripting
Slug
simple-video-management-system
Published
2025-01-23
Title
Simple Video Management System <= 1.0.4 - Admin+ Stored XSS
Slug
simple-visitor-stat
Published
2014-12-12
Title
Simple Visitor Stat <= 1.0 - Multiple XSS
Slug
simple-website-logo
Published
2025-04-04
Title
Simple Website Logo <= 1.1 - Missing Authorization
Slug
simple-woocommerce-csv-loader
Published
2022-06-02
Title
Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site Scripting
Slug
simple-wp-events
Published
2025-04-07
Title
Simple WP Events < 1.9.0 - Unauthenticated Arbitrary File Deletion
Slug
simple-wp-events
Published
2025-04-04
Title
Simple WP Events < 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-wp-events
Published
2025-04-10
Title
Simple WP Events < 1.9.0 - Unauthenticated Sensitive Information Exposure
Slug
simple-xml-sitemap
Published
2025-12-30
Title
Simple XML Sitemap <= 1.3 - Cross-Site Request Forgery
Slug
simple-yearly-archive
Published
2023-02-13
Title
Simple Yearly Archive < 2.1.9 - Admin+ Stored XSS
Slug
simple-youtube-gdpr
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simple-youtube-gdpr
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simple-youtube-responsive
Published
2023-02-23
Title
Simple YouTube Responsive < 3.0 - Contributor+ Stored XSS
Slug
simple-youtube-shortcode
Published
2025-10-21
Title
Simple Youtube Shortcode <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simplebooklet
Published
2025-02-17
Title
Simplebooklet PDF Viewer and Embedder < 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simplebooklet
Published
2025-03-27
Title
Simplebooklet PDF Viewer and Embedder < 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simpleflickr
Published
2015-01-03
Title
SimpleFlickr 3.0.3 - CSRF & XSS
Slug
simpleform
Published
2024-11-15
Title
SimpleForm – Contact form made simple <= 2.2.0 - Reflected Cross-Site Scripting