WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
so-pinyin-slugs
Published
2023-11-07
Title
Pinyin Slugs < 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
so-widgets-bundle
Published
2023-11-27
Title
so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion
Slug
so-widgets-bundle
Published
2024-01-29
Title
SiteOrigin Widgets Bundle < 1.58.2 - Contributor+ Stored XSS
Slug
so-widgets-bundle
Published
2024-02-12
Title
SiteOrigin Widgets Bundle < 1.58.4 - Contributor+ Stored Cross-Site Scripting
Slug
so-widgets-bundle
Published
2024-02-12
Title
SiteOrigin Widgets Bundle < 1.58.3 - Contributor+ Stored Cross-Site Scripting
Slug
so-widgets-bundle
Published
2024-03-04
Title
SiteOrigin Widgets Bundle < 1.58.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
so-widgets-bundle
Published
2024-05-21
Title
SiteOrigin Widgets Bundle < 1.61.0 - Contributor+ Stored XSS via siteorigin_widget Shortcode
Slug
so-widgets-bundle
Published
2024-06-10
Title
SiteOrigin Widgets Bundle < 1.62.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget
Slug
so-widgets-bundle
Published
2024-07-30
Title
SiteOrigin Widgets Bundle < 1.62.3 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget
Slug
so-widgets-bundle
Published
2024-12-10
Title
SiteOrigin Widgets Bundle < 1.64.1 - Missing Authorization
Slug
so-widgets-bundle
Published
2025-06-24
Title
SiteOrigin Widgets Bundle < 1.69.0 - Contributor+ Stored XSS via `data-url` DOM Element Attribute
Slug
soccer-engine-lite
Published
2024-05-07
Title
Soccer Engine – Soccer Plugin for WordPress < 1.13 - Cross-Site Request Forgery
Slug
soccer-live-scores
Published
2025-05-07
Title
Soccer Live Scores <= 1.0.5 - Cross-Site Request Forgery
Slug
sociable
Published
2021-09-20
Title
Sociable <= 4.3.4.1 - Admin+ Stored Cross-Site Scripting
Slug
social-analytics
Published
2025-01-16
Title
Social Analytics <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-autho-bio
Published
2024-03-29
Title
Social Author Bio <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Missing Authorization via Multiple Functions
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Unauthenticated Stored Cross-Site Scripting
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Cross-Site Request Forgery via Multiple Functions
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Authenticated (Contributor+) Arbitrary File Upload
Slug
social-auto-poster
Published
2024-09-30
Title
Social Auto Poster < 5.3.16 - Reflected Cross-Site Scripting
Slug
social-auto-poster
Published
2024-10-14
Title
Social Auto Poster < 5.3.16 - Cross-Site Request Forgery