WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
site-reviews
Published
2023-01-27
Title
Site Reviews < 6.4.0 - Unauthenticated CSV Injection
Slug
site-reviews
Published
2023-08-29
Title
Site Reviews < 6.10.3 - Missing Authorization
Slug
site-reviews
Published
2024-03-11
Title
Site Reviews < 6.11.7 - Authenticated(Subscriber+) Stored Cross-Site Scripting via display name
Slug
site-reviews
Published
2024-03-15
Title
Site Reviews < 6.11.7 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
site-reviews
Published
2024-05-08
Title
Site Reviews < 7.0.0 - IP Spoofing
Slug
site-reviews
Published
2025-02-26
Title
Site Reviews < 7.2.5 - Unauthenticated Stored XSS
Slug
site-reviews
Published
2026-06-26
Title
Site Reviews < 8.0.12 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
site-search-360
Published
2025-01-31
Title
Site Search 360 < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
site-search-360
Published
2025-04-16
Title
Site Search 360 <= 2.1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
site-suggest
Published
2026-02-26
Title
Site Suggest <= 1.3.9 - Missing Authorization
Slug
site-table-of-contents
Published
2025-04-09
Title
Site Table of Contents <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
sitebuilder-dynamic-components
Published
2017-04-27
Title
SiteBuilder Dynamic Components <= 1.0 - Unauthenticated PHP Object Injection
Slug
sitebuilder-dynamic-components
Published
2024-10-18
Title
SiteBuilder Dynamic Components <= 1.0 - Unauthenticated PHP Object Injection
Slug
siteground-email-marketing
Published
2025-09-30
Title
SiteGround Email Marketing < 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
siteground-email-marketing
Published
2026-06-25
Title
SiteGround Email Marketing < 1.7.6 - Missing Authorization
Slug
siteground-email-marketing
Published
2026-07-08
Title
SiteGround Email Marketing < 1.7.6 - Unauthenticated Stored Cross-Site Scripting
Slug
siteguard
Published
2024-06-21
Title
SiteGuard WP Plugin < 1.7.7 - Login Page Disclosure
Slug
siteguard
Published
2026-02-23
Title
SiteGuard WP Plugin < 1.7.10 - Missing Authorization
Slug
siteimprove
Published
2024-04-11
Title
Siteimprove < 2.0.7 - Cross-Site Request Forgery
Slug
sitekit
Published
2023-08-28
Title
Sitekit < 1.4 - Contributor+ Stored XSS
Slug
sitekit
Published
2023-08-28
Title
Sitekit < 1.5 - Contributor+ Stored XSS
Slug
sitekit
Published
2024-03-16
Title
Sitekit < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
sitekit
Published
2025-03-27
Title
Sitekit < 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sitekit
Published
2025-06-19
Title
Sitekit < 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sitekit
Published
2025-09-22
Title
Sitekit <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting