WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
social-bookmarking-reloaded
Published
2025-04-09
Title
Social Bookmarking RELOADED <= 3.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-button
Published
2024-11-08
Title
Social button <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
social-buttons-pack
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
social-connect
Published
2014-08-01
Title
Social Connect 0.10.1 - diagnostics/test.php testing Parameter Reflected XSS
Slug
social-connect
Published
2024-05-07
Title
Social Connect <= 1.2 - Authentication Bypass
Slug
social-counter
Published
2025-04-24
Title
Social Counter < 2.1 - Authenticated (Administrator+) PHP Object Injection
Slug
social-crowd
Published
2025-04-09
Title
Social Crowd <= 0.9.6.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-discussions
Published
2014-08-01
Title
Social Discussions - Multiple Path Disclosure
Slug
social-discussions
Published
2014-08-01
Title
Social Discussions 6.1.1 - Remote File Inclusion
Slug
social-feed-gallery-portfolio
Published
2025-12-05
Title
Social Feed Gallery Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
social-gallery-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
social-gallery-lite
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
social-hashtags
Published
2014-08-01
Title
Social Hashtags 2.0.0 - New Post Title Field Stored XSS
Slug
social-icons-widget-by-wpzoom
Published
2024-03-28
Title
Social Icons Widget & Block by WPZOOM < 4.2.16 - Missing Authorization
Slug
social-icons-widget-by-wpzoom
Published
2024-04-30
Title
Social Icons Widget & Block < 4.2.18 - Admin+ Stored XSS
Slug
social-images-widget
Published
2025-11-24
Title
Social Images Widget <= 2.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Deletion
Slug
social-kit
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
social-kit
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
social-link-groups
Published
2024-10-18
Title
Social Link Groups <= 1.1.0 - Authenticated (Contributor+) SQL Injection
Slug
social-link-pages
Published
2024-06-03
Title
Social Link Pages: link-in-bio landing pages for your social media profiles <= 1.6.9 - Missing Authorization to Arbitrary Page Creation and Cross-Site Scripting
Slug
social-links
Published
2025-02-02
Title
Social Links <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
social-links
Published
2025-02-02
Title
Social Links <= 1.0.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
social-locker
Published
2015-08-25
Title
OnePress Social Locker < 4.2.5 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
social-locker
Published
2022-05-18
Title
OnePress Social Locker <= 5.6.2 - Arbitrary Settings Update via CSRF