WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sms-alert
Published
2026-06-16
Title
SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery < 3.9.4 - Missing Authorization
Slug
sms-alert
Published
2026-06-30
Title
SMS Alert < 3.9.6 - Unauthenticated Privilege Escalation via Arbitrary Password Reset
Slug
sms-ovh
Published
2021-09-09
Title
SMS OVH <= 0.1 - Reflected Cross-Site Scripting
Slug
sms4wp
Published
2025-11-04
Title
SMS for WordPress <= 1.1.8 - Reflected Cross-Site Scripting
Slug
smsa-shipping-for-woocommerce
Published
2022-11-22
Title
SMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File Download
Slug
smsa-shipping-official
Published
2024-12-20
Title
SMSA Shipping(official) < 2.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
smsa-shipping-official
Published
2026-01-06
Title
SMSA Shipping < 2.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
smsify
Published
2024-12-11
Title
SMSify < 6.1.0 - Reflected Cross-Site Scripting
Slug
smtp-amazon-ses
Published
2025-02-22
Title
Vulnerability: SMTP for Amazon SES < 1.9 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Slug
smtp-amazon-ses
Published
2025-04-10
Title
SMTP for Amazon SES – YaySMTP < 1.9 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Slug
smtp-amazon-ses
Published
2025-07-16
Title
SMTP for Amazon SES < 1.9.1 - Authenticated (Administrator+) SQL Injection
Slug
smtp-mail
Published
2021-08-24
Title
SMTP Mail < 1.2.2 - Authenticated SQL Injections
Slug
smtp-mail
Published
2021-08-24
Title
SMTP Mail < 1.2 - Reflected Cross-Site Scripting (XSS)
Slug
smtp-mail
Published
2023-07-05
Title
SMTP Mail < 1.3.43 - Unauthenticated Stored Cross-Site Scripting
Slug
smtp-mail
Published
2024-02-12
Title
SMTP Mail Plugin < 1.3.21 - Cross Site Request Forgery
Slug
smtp-mail
Published
2025-12-04
Title
SMTP Mail <= 1.3.49 - Cross-Site Request Forgery
Slug
smtp-mailer
Published
2026-03-20
Title
SMTP Mailer < 1.1.25 - Unauthenticated Information Exposure
Slug
smtp-mailing-queue
Published
2023-04-05
Title
WP SMTP Mailing Queue < 2.0.1 - Admin+ Stored XSS
Slug
smtp-mailing-queue
Published
2023-06-22
Title
Mail Queue < 1.2 - Unauthenticated Stored Cross-Site Scripting
Slug
smtp-sendgrid
Published
2025-02-22
Title
SMTP for SendGrid – YaySMTP < 1.5 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Slug
smtp-sendgrid
Published
2025-07-16
Title
SMTP for SendGrid – YaySMTP < 1.5.1 - Authenticated (Administrator+) SQL Injection
Slug
smtp-sendinblue
Published
2025-02-22
Title
SMTP for Sendinblue – YaySMTP < 1.3 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Slug
smtp-sendinblue
Published
2025-07-16
Title
YaySMTP < 1.3.1 - Authenticated (Administrator+) SQL Injection
Slug
smtp2go
Published
2023-03-16
Title
SMTP2GO < 1.5.0 - Admin+ Stored XSS
Slug
smtp2go
Published
2025-07-16
Title
SMTP2GO < 1.12.2 - Missing Authorization