WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simplified-content
Published
2016-10-10
Title
Simplified Content <= 1.0.0 - XSS
Slug
simplistic-seo
Published
2024-11-04
Title
Simplistic SEO <= 2.3.0 - Reflected Cross-Site Scripting
Slug
simplr-registration-form
Published
2023-09-12
Title
Simplr Registration Form Plus+ <= 2.4.5 - Subscriber+ Arbitrary User Password Change via IDOR
Slug
simply-excerpts
Published
2023-11-13
Title
Simply Excerpts <= 1.4 - Admin+ Stored XSS
Slug
simply-exclude
Published
2023-11-24
Title
Simply Exclude <= 2.0.6.6 - Reflected Cross-Site Scripting
Slug
simply-featured-video
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simply-gallery-block
Published
2021-08-23
Title
Gallery Blocks with Lightbox < 2.2.1 - Authenticated Stored Cross-Site Scripting
Slug
simply-gallery-block
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simply-gallery-block
Published
2023-03-06
Title
Gallery Blocks with Lightbox < 3.0.8 - Subscriber+ Arbitrary Options Update
Slug
simply-gallery-block
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simply-gallery-block
Published
2024-06-27
Title
Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery < 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via galleryID and className Parameters
Slug
simply-gallery-block
Published
2024-11-21
Title
Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery < 3.2.4.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
simply-gallery-block
Published
2025-04-04
Title
Gallery Blocks with Lightbox < 3.2.6 - Contributor+ Stored XSS
Slug
simply-gallery-block
Published
2025-10-26
Title
SimpLy Gallery <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simply-gallery-block
Published
2025-12-12
Title
Gallery Blocks with Lightbox < 3.3.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Modification
Slug
simply-poll
Published
2014-08-01
Title
Simply Poll 1.4.1 - wp-admin/admin.php question Parameter XSS
Slug
simply-poll
Published
2014-08-01
Title
Simply Poll 1.4.1 - wp-admin/admin.php Poll Manipulation CSRF
Slug
simply-rets
Published
2025-01-08
Title
SimplyRETS Real Estate IDX < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simply-rets
Published
2025-03-27
Title
SimplyRETS Real Estate IDX < 3.1.0 - Cross-Site Request Forgery
Slug
simply-rets
Published
2025-04-01
Title
SimplyRETS Real Estate IDX <= 3.1.0 - Reflected Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2022-08-08
Title
Simply Schedule Appointments < 1.5.7.7 - Unauthenticated Email Address Disclosure
Slug
simply-schedule-appointments
Published
2022-08-08
Title
Simply Schedule Appointments < 1.5.7.7 - Admin+ Stored Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2023-12-21
Title
Simply Schedule Appointments < 1.6.6.1 - Authenticated(Administrator+) SQL Injection
Slug
simply-schedule-appointments
Published
2024-03-05
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.6.24 - Cross-Site Request Forgery to Plugin Data Reset
Slug
simply-schedule-appointments
Published
2024-03-20
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.7.9 - Authenticated (Contributor+) SQL Injection via Shortcode