WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simply-schedule-appointments
Published
2026-02-26
Title
Simply Schedule Appointments <= 1.6.10.4 - Missing Authorization
Slug
simply-show-hooks
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
simply-static
Published
2024-03-25
Title
Simply Static < 3.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simply-static
Published
2024-04-22
Title
Simply Static < 3.1.4 - Unauthenticated Information Exposure
Slug
simplyconvert
Published
2025-12-11
Title
SimplyConvert <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'simplyconvert_hash' Option
Slug
simpul-events-by-esotech
Published
2024-11-08
Title
Simpul Events by Esotech <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sina-extension-for-elementor
Published
2019-06-19
Title
Sina Extension For Elementor <= 2.2.0 - LFI
Slug
sina-extension-for-elementor
Published
2021-04-13
Title
Sina Extension for Elementor < 3.3.12 - Contributor+ Stored XSS
Slug
sina-extension-for-elementor
Published
2024-03-25
Title
Sina Extension for Elementor < 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sina-extension-for-elementor
Published
2024-04-24
Title
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) < 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sina Fancy Text Widget
Slug
sina-extension-for-elementor
Published
2024-05-03
Title
Sina Extension for Elementor < 3.5.2 - Authenticated (Contributor+) Local File Inclusion
Slug
sina-extension-for-elementor
Published
2024-05-13
Title
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) < 3.5.4 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting
Slug
sina-extension-for-elementor
Published
2024-05-14
Title
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) < 3.5.4 - Authenticated (Contributor+) Stored Cross-site Scriping via 'Sina Particle Layer'
Slug
sina-extension-for-elementor
Published
2024-06-19
Title
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) < 3.5.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
sina-extension-for-elementor
Published
2024-07-01
Title
Sina Extension for Elementor < 3.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter
Slug
sina-extension-for-elementor
Published
2024-10-15
Title
Sina Extension for Elementor < 3.5.8 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template
Slug
sina-extension-for-elementor
Published
2025-01-06
Title
Sina Extension for Elementor < 3.6.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ
Slug
sina-extension-for-elementor
Published
2025-02-25
Title
Sina Extension for Elementor < 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes
Slug
sina-extension-for-elementor
Published
2025-06-05
Title
Sina Extension for Elementor < 3.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
sina-extension-for-elementor
Published
2025-07-31
Title
Sina Extension for Elementor < 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Sina Posts`, `Sina Blog Post` and `Sina Table` Widgets
Slug
sina-extension-for-elementor
Published
2026-03-22
Title
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) < 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Fancy Text Widget` And `Countdown Widget`
Slug
single-post-exporter
Published
2021-11-15
Title
Single Post Exporter <= 1.1.1 - Plugin's Settings Update via CSRF
Slug
single-sign-on-client
Published
2022-08-09
Title
Simple Single Sign On <= 4.1.0 - Authentication Bypass
Slug
single-user-chat
Published
2025-01-30
Title
Single-user-chat <= 0.5 - Authenticated (Subscriber+) Limited Options Update
Slug
singsong
Published
2025-01-07
Title
SingSong <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting