WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
smart-slider-3
Published
2026-06-05
Title
Smart Slider 3 < 3.5.1.37 - Admin+ Path Traversal to Arbitrary File Read via HTML Export
Slug
smart-slider-3
Published
2026-07-13
Title
Smart Slider 3 < 3.5.1.38 - Contributor+ Sensitive Information Exposure via keyword Parameter
Slug
smart-slider-3
Published
2026-08-27
Title
Smart Slider 3 < 3.5.1.39 - Contributor+ Stored XSS via 'slider' Block Attribute
Slug
smart-smtp
Published
2026-08-19
Title
SmartSMTP < 1.2.1 - Unauthenticated Stored Cross-Site Scripting
Slug
smart-table-builder
Published
2025-09-05
Title
Smart Table Builder < 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
smart-tools-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
smart-tools-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
smart-variations-images
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
smart-variations-images
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
smart-wetransfer
Published
2025-09-29
Title
Smart WeTransfer <= 1.3 - Missing Authorization
Slug
smart-wishlist-for-more-convert
Published
2024-05-09
Title
MC Woocommerce Wishlist < 1.7.3 - Missing Authorization
Slug
smart-wishlist-for-more-convert
Published
2024-05-09
Title
MC Woocommerce Wishlist < 1.7.9 - Missing Authorization
Slug
smart-wishlist-for-more-convert
Published
2025-01-29
Title
WooCommerce Wishlist < 1.8.8 - Unauthenticated Wishlist Disclosure via download_pdf_file Function
Slug
smart-wishlist-for-more-convert
Published
2025-03-27
Title
MC Woocommerce Wishlist < 1.9.0 - Authenticated (Administrator+) SQL Injection
Slug
smart-wishlist-for-more-convert
Published
2025-06-04
Title
MC Woocommerce Wishlist < 1.9.2 - Reflected Cross-Site Scripting
Slug
smart-wishlist-for-more-convert
Published
2026-07-01
Title
MoreConvert Wishlist for WooCommerce < 1.9.20 - Unauthenticated Stored Cross-Site Scripting
Slug
smart-wishlist-for-more-convert-premium
Published
2026-05-04
Title
MoreConvert Pro < 1.9.15 - Authentication Bypass via Waitlist Guest Verification Token Reuse
Slug
smart-youtube
Published
2023-02-28
Title
Smart YouTube PRO <= 4.3 - Cross-Site Request Forgery
Slug
smartaipress
Published
2026-08-27
Title
SmartAIPress <= 1.2.0 - Subscriber+ Server-Side Request Forgery via smartaipress_openai_upload_and_set_featured_image
Slug
smartarget-contact-us
Published
2025-02-03
Title
Smartarget <= 1.5.3 - Subscriber+ Stored XSS
Slug
smartarget-message-bar
Published
2024-05-30
Title
Smartarget Message Bar <= 1.5 - Admin+ Stored XSS
Slug
smartarget-popup
Published
2025-04-01
Title
Smartarget Popup <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
smartcat-wpml
Published
2025-09-10
Title
Smartcat Translator for WPML < 3.1.73 - Authenticated (Author+) SQL Injection via orderby Parameter
Slug
smartcat-wpml
Published
2026-05-14
Title
Smartcat Translator for WPML < 3.1.78 - Missing Authorization to Unauthenticated Plugin Settings Update
Slug
smartcrawl-seo
Published
2023-11-23
Title
SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure