WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
social-images-widget
Published
2025-11-24
Title
Social Images Widget <= 2.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Deletion
Slug
social-kit
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
social-kit
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
social-link-groups
Published
2024-10-18
Title
Social Link Groups <= 1.1.0 - Authenticated (Contributor+) SQL Injection
Slug
social-link-pages
Published
2024-06-03
Title
Social Link Pages: link-in-bio landing pages for your social media profiles <= 1.6.9 - Missing Authorization to Arbitrary Page Creation and Cross-Site Scripting
Slug
social-links
Published
2025-02-02
Title
Social Links <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
social-links
Published
2025-02-02
Title
Social Links <= 1.0.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
social-locker
Published
2015-08-25
Title
OnePress Social Locker < 4.2.5 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
social-locker
Published
2022-05-18
Title
OnePress Social Locker <= 5.6.2 - Arbitrary Settings Update via CSRF
Slug
social-locker-content
Published
2024-11-08
Title
Social Locker <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
social-login-bws
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
social-login-lite-for-woocommerce
Published
2024-06-03
Title
Social Login Lite For WooCommerce <= 1.6.0 - Authentication Bypass
Slug
social-login-wp
Published
2023-02-20
Title
Social Login WP <= 5.0.0.0 - CSRF
Slug
social-media-auto-publish
Published
2025-12-12
Title
Social Media Auto Publish < 3.6.6 - Reflected Cross-Site Scripting via PostMessage
Slug
social-media-builder
Published
2024-03-15
Title
Social Media Share Buttons <= 2.1.0 - Authenticated (Subscriber+) PHP Object Injection
Slug
social-media-buttons-toolbar
Published
2022-09-26
Title
Social Media Follow Buttons Bar <= 4.73 - Admin+ Stored XSS
Slug
social-media-engine
Published
2025-01-14
Title
Social Media Engine <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
social-media-feather
Published
2022-02-10
Title
Social Media Feather < 2.0.5 - Admin+ Stored Cross-Site Scripting
Slug
social-media-feather
Published
2023-12-07
Title
Social Media Feather < 2.1.4 - Subscriber+ Unauthorised Action
Slug
social-media-links
Published
2025-04-17
Title
Social Media Links <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-media-sharing
Published
2024-12-12
Title
Social Media Sharing <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-media-shortcodes
Published
2024-12-11
Title
Social Media Shortcodes < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
social-media-shortcodes
Published
2025-09-16
Title
Social Media Shortcodes < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
social-media-widget
Published
2014-08-01
Title
Social Media Widget < 4.0.2 - Malicious Code