WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sastra-essential-addons-for-elementor
Published
2025-01-23
Title
Sastra Essential Addons for Elementor – Free Elementor Addons, Widgets and Templates < 1.0.15 - Missing Authorization to Spexo Theme Install
Slug
sastra-essential-addons-for-elementor
Published
2025-08-23
Title
Spexo Addons for Elementor < 1.0.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Slug
save-as-image-by-pdfcrowd
Published
2023-09-27
Title
Save as Image by Pdfcrowd < 2.16.1 - Admin+ Stored XSS
Slug
save-as-image-by-pdfcrowd
Published
2024-03-09
Title
Save as PDF by Pdfcrowd < 3.2.2 - Admin+ Stored XSS
Slug
save-as-image-by-pdfcrowd
Published
2024-04-10
Title
Save as Image < 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
save-as-pdf
Published
2025-11-12
Title
Save as PDF Button <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via restpackpdfbutton Shortcode
Slug
save-as-pdf-by-pdfcrowd
Published
2023-09-27
Title
Save as PDF by Pdfcrowd < 2.16.1 - Admin+ Stored XSS
Slug
save-as-pdf-by-pdfcrowd
Published
2024-04-18
Title
Save as PDF < 3.2.0 - Admin+ Stored XSS
Slug
save-as-pdf-by-pdfcrowd
Published
2024-04-10
Title
Save as PDF < 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
save-as-pdf-by-pdfcrowd
Published
2024-04-26
Title
Save as PDF plugin by Pdfcrowd < 3.2.1 - Missing Authorization
Slug
save-as-pdf-by-pdfcrowd
Published
2024-06-03
Title
Save as PDF Plugin by Pdfcrowd < 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
save-as-pdf-by-pdfcrowd
Published
2024-07-06
Title
Save as PDF plugin by Pdfcrowd < 4.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
save-as-pdf-by-pdfcrowd
Published
2024-11-19
Title
Save as PDF Plugin by Pdfcrowd < 4.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
save-as-pdf-by-pdfcrowd
Published
2025-01-21
Title
Save as PDF Plugin by Pdfcrowd < 4.4.1 - Unauthenticated PHP Object Injection
Slug
save-as-pdf-by-pdfcrowd
Published
2025-09-22
Title
Save as PDF < 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
save-as-pdf-by-pdfcrowd
Published
2026-01-24
Title
Save as PDF Plugin by PDFCrowd < 4.5.6 - Reflected Cross-Site Scripting via options
Slug
save-grab
Published
2023-11-20
Title
Grab & Save <= 1.0.4 - Reflected Cross-Site Scripting
Slug
save-grab
Published
2023-11-20
Title
Grab & Save <= 1.0.4 - Cross-Site Request Forgery
Slug
save-import-image-from-url
Published
2025-01-16
Title
Save & Import Image from URL <= 0.7 - Reflected Cross-Site Scripting
Slug
savyour-affiliate-partner
Published
2025-08-25
Title
Savyour Affiliate Partner <= 2.1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
sayfa-sayac
Published
2023-12-05
Title
Sayfa Sayaç <= 2.6 - Unauthenticated PHP Object Injection
Slug
sayfa-sayac
Published
2023-12-05
Title
Sayfa Sayaç <= 2.6 - Unauthenticated SQL Injection
Slug
sb-breadcrumbs
Published
2025-06-26
Title
SB Breadcrumbs <= 1.0 - Reflected Cross-Site Scripting
Slug
sb-chart-block
Published
2025-04-18
Title
SB Chart block < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Slug
sb-child-list
Published
2023-08-11
Title
SB Child List <= 4.5 - Settings Update via CSRF