WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
same-but-different
Published
2025-01-06
Title
Same but Different – Related Posts by Taxonomy <= 1.0.16 - Reflected Cross-Site Scripting
Slug
same-category-posts
Published
2026-01-23
Title
Same Category Posts < 1.1.20 - Authenticated (Author+) Stored Cross-Site Scripting via Widget Title Placeholder
Slug
sandbox
Published
2025-01-16
Title
Sandbox <= 0.4 - Reflected Cross-Site Scripting
Slug
sandbox
Published
2025-01-16
Title
Sandbox <= 0.4 - Missing Authorization to Authenticated (Subscriber+) Sandbox Download
Slug
sangar-slider-lite
Published
2024-04-11
Title
Sangar Slider <= 1.3.2 - Cross-Site Request Forgery
Slug
saoshyant-element
Published
2024-12-16
Title
Saoshyant Element <= 1.2 - Reflected Cross-Site Scripting
Slug
saoshyant-page-builder
Published
2025-01-07
Title
Saoshyant Page Builder <= 3.8 - Missing Authorization
Slug
saoshyant-slider
Published
2025-02-21
Title
Saoshyant Slider <= 3.0 - Unauthenticated PHP Object Injection
Slug
saphali-liqpay-for-donate
Published
2025-11-07
Title
Saphali LiqPay for donate < 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
saphali-woocommerce-lite
Published
2023-07-26
Title
Saphali Woocommerce Lite < 1.9.0 - Settings Update/Reset via CSRF
Slug
sapo-feed
Published
2025-09-22
Title
SAPO Feed < 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
saragna-social-stream
Published
2024-11-04
Title
Saragna <= 1.0 - Reflected Cross-Site Scripting
Slug
saskaita123-lt
Published
2026-07-09
Title
Invoice123 < 1.7.1 - Missing Authorization to Authenticated (Subscriber+) Setting Modification via s123_submit_api_key & s123_submit_invoice_settings AJAX actions
Slug
sassy-social-share
Published
2019-11-17
Title
Sassy Social Share <= 3.3.3 - Cross-Site Scripting (XSS)
Slug
sassy-social-share
Published
2021-10-20
Title
Sassy Social Share 3.3.23 - Missing Access Controls to PHP Object Injection
Slug
sassy-social-share
Published
2022-03-15
Title
Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting
Slug
sassy-social-share
Published
2022-12-27
Title
Sassy Social Share < 3.3.45 - Contributor+ Stored XSS
Slug
sassy-social-share
Published
2024-02-20
Title
Sassy Social Share < 3.3.57 - Contributor+ Stored XSS
Slug
sassy-social-share
Published
2024-03-05
Title
Social Sharing Plugin – Sassy Social Share < 3.3.59 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
sassy-social-share
Published
2024-04-05
Title
Sassy Social Share < 3.3.61 - Contributor+ Stored XSS
Slug
sassy-social-share
Published
2024-05-22
Title
Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting
Slug
sassy-social-share
Published
2024-11-29
Title
Social Sharing Plugin – Sassy Social Share < 3.3.70 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter
Slug
sassy-social-share
Published
2025-04-17
Title
Sassy Social Share < 3.3.74 - Open Redirect
Slug
sassy-social-share
Published
2025-06-06
Title
Social Sharing Plugin – Sassy Social Share < 3.3.76 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter
Slug
sastra-essential-addons-for-elementor
Published
2024-11-01
Title
Sastra Essential Addons for Elementor < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting