WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2022-01-03
Title
NextScripts: Social Networks Auto-Poster < 4.3.25 - Arbitrary Post Deletion via CSRF
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2022-01-03
Title
NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2022-07-04
Title
NextScripts: Social Networks Auto-Poster < 4.3.26 - Reflected Cross-Site Scripting
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2023-11-29
Title
NextScripts < 4.4.3 - Reflected Cross-Site Scripting via code
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2024-05-21
Title
NextScripts: Social Networks Auto-Poster < 4.4.4 - Cross-Site Request Forgery to Arbitrary Post Deletion
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2024-05-21
Title
NextScripts: Social Networks Auto-Poster < 4.4.4 - Unauthenticated Stored Cross-Site Scripting via User Agent
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2024-05-21
Title
NextScripts: Social Networks Auto-Poster < 4.4.4 - Subscriber+ Sensitive Information Exposure
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2024-06-27
Title
NextScripts <= 4.4.6 - Reflected Cross-Site Scripting
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2026-02-24
Title
NextScripts: Social Networks Auto-Poster <= 4.4.7 - Authenticated (Contributor+) PHP Object Injection
Slug
social-networks-auto-poster-facebook-twitter-g
Published
2026-03-09
Title
NextScripts: Social Networks Auto-Poster < 4.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode
Slug
social-photo-feed-widget
Published
2025-12-23
Title
Widgets for Social Photo Feed < 1.7.9 - Missing Authorization
Slug
social-photo-feed-widget
Published
2026-04-03
Title
Widgets for Social Photo Feed < 1.8.0 - Unauthenticated Stored Cross-Site Scripting via feed_data
Slug
social-photo-feed-widget
Published
2026-05-01
Title
Widgets for Social Photo Feed < 1.8.1 - Missing Authentication to Unauthenticated Plugin Settings Access/Update via trustindex_feed_hook_instagram REST API endpoints
Slug
social-photo-gallery
Published
2019-11-13
Title
Social Photo Gallery <= 1.0 - Remote Code Execution (RCE)
Slug
social-pixel
Published
2024-05-24
Title
Social Pixel <= 2.1 - Admin+ Stored XSS
Slug
social-polls-by-opinionstage
Published
2019-09-16
Title
Poll, Survey, Form & Quiz Maker by OpinionStage < 19.6.25 - Unauthenticated Cross-Site Scripting (XSS)
Slug
social-polls-by-opinionstage
Published
2025-06-16
Title
Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.10.0 - Incorrect Authorization to Authenticated (Contributor+) Plugin Settings Update
Slug
social-polls-by-opinionstage
Published
2025-08-26
Title
Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.11.1 - Unauthenticated Local File Inclusion
Slug
social-polls-by-opinionstage
Published
2025-11-26
Title
Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.12.1 - Cross-Site Request Forgery to Account Disconnection
Slug
social-polls-by-opinionstage
Published
2025-12-22
Title
Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.12.1 - Missing Authorization
Slug
social-post-embed
Published
2026-04-27
Title
Social Post Embed < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embed
Slug
social-profilr-display-social-network-profile
Published
2025-12-31
Title
Social Profilr <= 1.0 - Cross-Site Request Forgery
Slug
social-proof-testimonials-slider
Published
2023-03-29
Title
Social Proof (Testimonial) Slider < 2.2.4 - Admin+ Stored XSS
Slug
social-proof-testimonials-slider
Published
2024-11-12
Title
Social Proof (Testimonials) Slider <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via spslider-block Shortcode
Slug
social-pug
Published
2016-12-09
Title
Social Share Buttons - Social Pug <= 1.2.5 - Authenticated Cross-Site Scripting (XSS)