WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sky-elementor-addons
Published
2024-11-21
Title
Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) < 2.6.2 - Cross-Site Request Forgery to Limited Arbitrary Options Update
Slug
sky-elementor-addons
Published
2025-04-22
Title
Sky Addons for Elementor < 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sky-elementor-addons
Published
2025-07-28
Title
Sky Addons for Elementor < 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
sky-elementor-addons
Published
2026-05-07
Title
Sky Addons < 3.3.3 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Script
Slug
sky-login-redirect
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sky-login-redirect
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
skyboot-portfolio-gallery
Published
2024-11-28
Title
Elementor Image Gallery Plugin < 1.0.6 - Contributor+ Stored XSS
Slug
skype-online-status
Published
2023-10-17
Title
Skype Legacy Buttons <= 3.1 - Contributor+ Stored XSS
Slug
skysa-text-ticker-app
Published
2026-05-11
Title
Skysa Text Ticker App <= 1.4 - Cross-Site Request Forgery to Settings Modification via 'Save Settings' Form
Slug
skyword-plugin
Published
2025-01-08
Title
Skyword API Plugin < 2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
skyword-plugin
Published
2025-09-22
Title
Skyword API Plugin <= 2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sl-user-create
Published
2014-08-01
Title
SL User Create 0.2.4 - LSL script Secret String Weakness Information Disclosure
Slug
slash-admin
Published
2024-04-23
Title
Slash Admin < 3.8.2 - Cross-Site Request Forgery
Slug
slazzer-background-changer
Published
2025-04-16
Title
Slazzer Background Changer <= 3.14 - Missing Authorization
Slug
sleekplan
Published
2025-03-18
Title
Sleekplan <= 0.2.0 - Reflected Cross-Site Scripting
Slug
slek-gateway-for-woocommerce
Published
2026-05-11
Title
Slek Gateway for WooCommerce <= 1.0 - Unauthenticated Insufficiently Protected Credentials via Payment Redirect Form Hidden Fields
Slug
sliced-invoices
Published
2019-10-17
Title
Sliced Invoices < 3.8.4 - Multiple Vulnerabilities
Slug
sliced-invoices
Published
2024-03-28
Title
Sliced Invoices < 3.9.3 - Missing Authorization
Slug
sliced-invoices
Published
2025-03-31
Title
Sliced Invoices <= 3.10.0 - Missing Authorization
Slug
slicewp
Published
2021-08-09
Title
SliceWP < 1.0.46 - Reflected Cross-Site Scripting (XSS)
Slug
slicewp
Published
2024-05-06
Title
WordPress Affiliates Plugin — SliceWP Affiliates < 1.1.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
slicewp
Published
2024-09-12
Title
WordPress Affiliates Plugin — SliceWP Affiliates < 1.1.21 - Reflected Cross-Site Scripting
Slug
slicewp
Published
2024-09-30
Title
SliceWP < 1.1.19 - Reflected Cross-Site Scripting
Slug
slicewp
Published
2024-12-17
Title
Affiliate Program Suite — SliceWP Affiliates < 1.1.24 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
slicewp
Published
2026-05-05
Title
Affiliate Program Suite < 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode