WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sl-user-create
Published
2014-08-01
Title
SL User Create 0.2.4 - LSL script Secret String Weakness Information Disclosure
Slug
slash-admin
Published
2024-04-23
Title
Slash Admin < 3.8.2 - Cross-Site Request Forgery
Slug
slazzer-background-changer
Published
2025-04-16
Title
Slazzer Background Changer <= 3.14 - Missing Authorization
Slug
sleekplan
Published
2025-03-18
Title
Sleekplan <= 0.2.0 - Reflected Cross-Site Scripting
Slug
slek-gateway-for-woocommerce
Published
2026-05-11
Title
Slek Gateway for WooCommerce <= 1.0 - Unauthenticated Insufficiently Protected Credentials via Payment Redirect Form Hidden Fields
Slug
sliced-invoices
Published
2019-10-17
Title
Sliced Invoices < 3.8.4 - Multiple Vulnerabilities
Slug
sliced-invoices
Published
2024-03-28
Title
Sliced Invoices < 3.9.3 - Missing Authorization
Slug
sliced-invoices
Published
2025-03-31
Title
Sliced Invoices <= 3.10.1 - Missing Authorization
Slug
sliced-invoices
Published
2026-06-15
Title
Sliced Invoices – WordPress Invoice Plugin <= 3.8.2 - Authenticated (Contributor+) SQL Injection
Slug
slicewp
Published
2021-08-09
Title
SliceWP < 1.0.46 - Reflected Cross-Site Scripting (XSS)
Slug
slicewp
Published
2024-05-06
Title
WordPress Affiliates Plugin — SliceWP Affiliates < 1.1.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
slicewp
Published
2024-09-12
Title
WordPress Affiliates Plugin — SliceWP Affiliates < 1.1.21 - Reflected Cross-Site Scripting
Slug
slicewp
Published
2024-09-30
Title
SliceWP < 1.1.19 - Reflected Cross-Site Scripting
Slug
slicewp
Published
2024-12-17
Title
Affiliate Program Suite — SliceWP Affiliates < 1.1.24 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
slicewp
Published
2026-05-05
Title
Affiliate Program Suite < 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode
Slug
slicewp
Published
2026-05-06
Title
Affiliate Program Suite — SliceWP Affiliates < 1.2.7 - Unauthenticated Stored Cross-Site Scripting
Slug
slicewp
Published
2026-08-28
Title
Affiliate Program Suite — SliceWP Affiliates < 1.2.11 - Unauthenticated Stored Cross-Site Scripting
Slug
slick-contact-forms
Published
2023-10-09
Title
Slick Contact Forms <= 1.3.7 - Contributor+ Stored XSS
Slug
slick-engagement
Published
2024-11-11
Title
Slickstream: Engagement and Conversions < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via slick-grid Shortcode
Slug
slick-engagement
Published
2025-06-27
Title
Slickstream < 3.0.0 - Cross-Site Request Forgery
Slug
slick-google-map
Published
2025-10-13
Title
Slick Google Map < 1.0.0 - Cross-Site Request Forgery
Slug
slick-popup
Published
2019-05-28
Title
Slick Popup <= 1.7.1 - Privilege Escalation
Slug
slick-popup
Published
2023-10-29
Title
Slick Popup: Contact Form 7 Popup Plugin < 1.7.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
slick-sitemap
Published
2024-11-20
Title
Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slick-slider
Published
2026-07-31
Title
Slick Slider < 0.5.3 - Contributor+ Stored XSS via Gallery Shortcode