WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
slideshow-se
Published
2022-10-28
Title
Slideshow SE < 2.5.6 - Subscriber+ Stored XSS
Slug
slideshow-se
Published
2022-10-28
Title
Slideshow SE < 2.5.6 - Author+ Stored XSS
Slug
slideshow-se
Published
2024-06-18
Title
Slideshow SE <= 2.5.20 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
slideshow-se
Published
2024-06-19
Title
Slideshow SE < 2.5.18 - Authenticated (Author+) Limited Local File Inclusion
Slug
sliding-social-icons
Published
2014-12-15
Title
Sliding Social Icons <= 1.61 - CSRF & Stored XSS
Slug
sliding-widgets
Published
2024-04-29
Title
Sliding Widgets <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
slightly-troublesome-permalink
Published
2025-09-22
Title
Slightly troublesome permalink <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
slim-seo
Published
2025-05-20
Title
Slim SEO < 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode
Slug
slim-seo
Published
2025-06-12
Title
Slim SEO < 4.5.5 - Authenticated (Administrator+) SQL Injection
Slug
slingblocks
Published
2024-07-10
Title
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) < 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slingblocks
Published
2025-03-07
Title
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) < 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slingblocks
Published
2025-08-20
Title
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) < 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sliper-elementor
Published
2025-12-31
Title
Sliper for Elementor <= 1.0.10 - Missing Authorization
Slug
slippy-slider-responsive-touch-navigation-slider
Published
2025-11-10
Title
Slippy Slider – Responsive Touch Navigation Slider <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slivery-extender
Published
2024-02-26
Title
Slivery Extender <= 1.0.2 - Authenticated(Contributor+) Remote Code Execution via shortcode
Slug
slope-widgets
Published
2024-12-16
Title
Slope Widgets < 4.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sloth-logo-customizer
Published
2023-04-17
Title
Sloth Logo Customizer <= 2.0.2 - Stored XSS via CSRF
Slug
slotti-ajanvaraus
Published
2024-11-22
Title
Slotti Ajanvaraus < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slotti-ajanvaraus
Published
2025-01-07
Title
Slotti Ajanvaraus < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slp-extended-data-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
slp-extended-data-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
slp-extenders
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
slp-extenders
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
slp-gravity-forms-locations
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
slp-gravity-forms-locations
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting