WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sinking-dropdowns
Published
2024-12-18
Title
Sinking Dropdowns <= 1.25 - Cross-Site Request Forgery
Slug
sintic_gallery
Published
2014-08-01
Title
sintic_gallery - Arbitrary File Upload
Slug
sintic_gallery
Published
2014-08-01
Title
sintic_gallery - Path Disclosure
Slug
sip-calculator
Published
2024-12-13
Title
SIP Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
sip-reviews-shortcode-woocommerce
Published
2024-10-31
Title
SIP Reviews Shortcode for WooCommerce <= 1.2.3 - Authenticated (Contributor+) Cross-Site Scripting
Slug
sip-reviews-shortcode-woocommerce
Published
2024-10-31
Title
SIP Reviews Shortcode for WooCommerce <= 1.2.3 - Authenticated (Contributor+) SQL Injection
Slug
sirv
Published
2016-11-10
Title
Sirv <= 1.3.1 - Authenticated SQL Injection
Slug
sirv
Published
2022-12-09
Title
Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSS
Slug
sirv
Published
2023-12-26
Title
Sirv < 7.1.3 - Missing Authorization via sirv_disconnect
Slug
sirv
Published
2024-03-01
Title
Image Optimizer, Resizer and CDN – Sirv < 7.2.1 - Missing Authorization
Slug
sirv
Published
2024-03-01
Title
Image Optimizer, Resizer and CDN – Sirv < 7.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
sirv
Published
2024-04-23
Title
Sirv < 7.2.3 - Missing Authorization to Arbitrary Options Update
Slug
sirv
Published
2024-06-18
Title
Image Optimizer, Resizer and CDN – Sirv < 7.2.7 - Authenticated (Contributor+) Arbitrary File Upload
Slug
sirv
Published
2024-07-11
Title
Image Optimizer, Resizer and CDN – Sirv < 7.2.8 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update
Slug
sirv
Published
2024-08-21
Title
Image Optimizer, Resizer and CDN – Sirv < 7.2.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload
Slug
sirv
Published
2024-10-07
Title
Image Optimizer, Resizer and CDN – Sirv < 7.3.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
sirv
Published
2024-11-19
Title
Image Optimizer, Resizer and CDN – Sirv < 7.3.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion
Slug
sirv
Published
2025-04-22
Title
Sirv < 7.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sis-handball
Published
2023-09-04
Title
SIS Handball <= 1.0.45 - Settings Update via CSRF
Slug
site-audit
Published
2021-07-19
Title
My Site Audit <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
site-chat-on-telegram
Published
2025-07-07
Title
Site Chat on Telegram < 1.0.6 - Unauthenticated PHP Object Injection
Slug
site-checkup
Published
2025-10-29
Title
Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue < 1.48 - Unauthenticated Log File Poisoning
Slug
site-editor
Published
2018-03-16
Title
Site Editor <= 1.1.1 - Local File Inclusion (LFI)
Slug
site-editor-google-map
Published
2025-03-18
Title
Site Editor Google Map <= 1.0.1 - Reflected Cross-Site Scripting
Slug
site-favicon
Published
2024-05-30
Title
Site Favicon < 0.3 - Authenticated (Admin+) Stored Cross-Site Scripting