WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simplesamlphp-authentication
Published
2021-09-08
Title
simpleSAMLphp Authentication <= 0.7.0 - Reflected Cross-Site Scripting
Slug
simpleschema-free
Published
2024-11-28
Title
SimpleSchema <= 1.7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simpleshop-cz
Published
2024-05-03
Title
SimpleShop < 2.10.1 - Cross-Site Request Forgery
Slug
simpleshop-cz
Published
2024-05-03
Title
SimpleShop < 2.10.3 - Missing Authorization
Slug
simplified
Published
2025-01-03
Title
Simplified Plugin < 1.0.7 - Unauthenticated Arbitrary File Upload
Slug
simplified
Published
2025-08-14
Title
Simplified < 1.0.12 - Authenticated (Administrator+) Server-Side Request Forgery
Slug
simplified-content
Published
2016-10-10
Title
Simplified Content <= 1.0.0 - XSS
Slug
simplistic-seo
Published
2024-11-04
Title
Simplistic SEO <= 2.3.0 - Reflected Cross-Site Scripting
Slug
simplr-registration-form
Published
2023-09-12
Title
Simplr Registration Form Plus+ <= 2.4.5 - Subscriber+ Arbitrary User Password Change via IDOR
Slug
simply-excerpts
Published
2023-11-13
Title
Simply Excerpts <= 1.4 - Admin+ Stored XSS
Slug
simply-exclude
Published
2023-11-24
Title
Simply Exclude <= 2.0.6.6 - Reflected Cross-Site Scripting
Slug
simply-featured-video
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simply-gallery-block
Published
2021-08-23
Title
Gallery Blocks with Lightbox < 2.2.1 - Authenticated Stored Cross-Site Scripting
Slug
simply-gallery-block
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
simply-gallery-block
Published
2023-03-06
Title
Gallery Blocks with Lightbox < 3.0.8 - Subscriber+ Arbitrary Options Update
Slug
simply-gallery-block
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
simply-gallery-block
Published
2024-06-27
Title
Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery < 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via galleryID and className Parameters
Slug
simply-gallery-block
Published
2024-11-21
Title
Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery < 3.2.4.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
simply-gallery-block
Published
2025-04-04
Title
Gallery Blocks with Lightbox < 3.2.6 - Contributor+ Stored XSS
Slug
simply-gallery-block
Published
2025-10-26
Title
SimpLy Gallery < 3.3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simply-gallery-block
Published
2025-12-12
Title
Gallery Blocks with Lightbox < 3.3.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Modification
Slug
simply-poll
Published
2014-08-01
Title
Simply Poll 1.4.1 - wp-admin/admin.php question Parameter XSS
Slug
simply-poll
Published
2014-08-01
Title
Simply Poll 1.4.1 - wp-admin/admin.php Poll Manipulation CSRF
Slug
simply-rets
Published
2025-01-08
Title
SimplyRETS Real Estate IDX < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simply-rets
Published
2025-03-27
Title
SimplyRETS Real Estate IDX < 3.1.0 - Cross-Site Request Forgery