WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
slicewp
Published
2024-09-12
Title
WordPress Affiliates Plugin — SliceWP Affiliates < 1.1.21 - Reflected Cross-Site Scripting
Slug
slicewp
Published
2024-09-30
Title
SliceWP < 1.1.19 - Reflected Cross-Site Scripting
Slug
slicewp
Published
2024-12-17
Title
Affiliate Program Suite — SliceWP Affiliates < 1.1.24 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
slicewp
Published
2026-05-05
Title
Affiliate Program Suite < 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode
Slug
slicewp
Published
2026-05-06
Title
Affiliate Program Suite — SliceWP Affiliates < 1.2.7 - Unauthenticated Stored Cross-Site Scripting
Slug
slicewp
Published
2026-08-28
Title
Affiliate Program Suite — SliceWP Affiliates < 1.2.11 - Unauthenticated Stored Cross-Site Scripting
Slug
slicewp
Published
2026-10-26
Title
Affiliate Program Suite — SliceWP Affiliates < 1.2.14 - Unauthenticated Stored Cross-Site Scripting
Slug
slick-contact-forms
Published
2023-10-09
Title
Slick Contact Forms <= 1.3.7 - Contributor+ Stored XSS
Slug
slick-engagement
Published
2024-11-11
Title
Slickstream: Engagement and Conversions < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via slick-grid Shortcode
Slug
slick-engagement
Published
2025-06-27
Title
Slickstream < 3.0.0 - Cross-Site Request Forgery
Slug
slick-google-map
Published
2025-10-13
Title
Slick Google Map < 1.0.0 - Cross-Site Request Forgery
Slug
slick-popup
Published
2019-05-28
Title
Slick Popup <= 1.7.1 - Privilege Escalation
Slug
slick-popup
Published
2023-10-29
Title
Slick Popup: Contact Form 7 Popup Plugin < 1.7.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
slick-sitemap
Published
2024-11-20
Title
Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slick-slider
Published
2026-07-31
Title
Slick Slider < 0.5.3 - Contributor+ Stored XSS via Gallery Shortcode
Slug
slick-social-share-buttons
Published
2023-12-15
Title
Slick Social Share Buttons <= 2.4.11 - Authenticated (Subscriber+) Arbitrary Option Update
Slug
slicknav-mobile-menu
Published
2023-12-09
Title
SlickNav Mobile Menu < 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
slicko-for-elementor
Published
2024-10-31
Title
Slicko <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slickquiz
Published
2019-09-10
Title
SlickQuiz <= 1.3.7.1 - Unauthenticated Stored XSS
Slug
slickquiz
Published
2019-09-10
Title
SlickQuiz <= 1.3.7.1 - Authenticated SQL Injection
Slug
slickr-flickr
Published
2022-08-29
Title
Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting
Slug
slide
Published
2025-01-07
Title
Slides & Presentations <= 0.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slide
Published
2025-01-07
Title
Slides & Presentations <= 0.0.39 - Missing Authorization
Slug
slide
Published
2025-01-16
Title
Slides & Presentations <= 0.0.39 - Missing Authorization to Content Injection
Slug
slide-anything
Published
2022-03-08
Title
Slide Anything < 2.3.41 - Contributor+ SQLi