WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sportspress-tv
Published
2025-01-07
Title
Legacy ePlayer <= 0.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spostarbust
Published
2025-05-07
Title
ELI's Related Posts Footer Links and Widget < 1.2.04.25 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
spotbot
Published
2025-02-26
Title
SpotBot <= 0.1.8 - Reflected XSS
Slug
spoter-elementor
Published
2025-12-11
Title
Spoter for Elementor <= 1.04 - Missing Authorization
Slug
spotify-embed-creator
Published
2025-09-11
Title
Spotify Embed Creator <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spotify-play-button
Published
2024-06-05
Title
Spotify Play Button <= 1.0 - Contributor+ Stored XSS
Slug
spotify-play-button-for-wordpress
Published
2023-04-04
Title
Sp*tify Play Button for WordPress < 2.08 - Admin+ Stored XSS
Slug
spotify-play-button-for-wordpress
Published
2023-02-24
Title
Sp*tify Play Button for WordPress < 2.06 - Contributor+ Stored XSS
Slug
spotify-play-button-for-wordpress
Published
2023-10-03
Title
Sp*tify Play Button for WordPress < 2.11 - Settings Update via CSRF
Slug
spotify-play-button-for-wordpress
Published
2024-11-25
Title
Spotify Play Button for WordPress < 2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via spotifyplaybutton Shortcode
Slug
spotim-comments
Published
2017-04-19
Title
Spots.IM Comments < 4.0.4 - Multiple Vulnerabilities
Slug
spotlight-social-photo-feeds
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
spotlight-social-photo-feeds
Published
2023-01-23
Title
Spotlight Social Feeds < 1.4.3 - Contributor+ Stored XSS
Slug
spotlight-social-photo-feeds
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
spotlight-social-photo-feeds
Published
2024-04-10
Title
Spotlight Social Media Feeds < 1.6.11 - Cross-Site Request Forgery
Slug
spotlight-social-photo-feeds
Published
2025-02-14
Title
Spotlight Social Media Feeds < 1.7.2 - Unauthenticated Sensitive Information Disclosure
Slug
spotlight-social-photo-feeds-premium
Published
2025-05-16
Title
Spotlight - Social Media Feeds (Premium) < 1.7.2 - Unauthenticated Information Exposure
Slug
spotlightr
Published
2024-12-19
Title
Spotlightr < 0.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spotlightyour
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
sprapid
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
spreadr-for-woocomerce
Published
2024-12-14
Title
Spreadr Woocommerce < 1.0.5 - Missing Authorization
Slug
spreadr-for-woocomerce
Published
2024-12-14
Title
Spreadr Woocommerce < 1.0.5 - Missing Authorization to Arbitrary Content Deletion
Slug
spreadshirt-rss-3d-cube-flash-gallery
Published
2014-04-25
Title
WP RSS Spreadshirt 3D Cube Gallery <= 1.3 - Unauthenticated Cross-Site Scripting (XSS)
Slug
springboard-video-quick-publish
Published
2014-08-01
Title
Springboard Video Quick Publish 0.2.6 - videolist.php paged Parameter Reflected XSS
Slug
springboard-video-quick-publish
Published
2014-08-01
Title
Springboard Video Quick Publish 0.2.6 - springboardvideo.php video_id Parameter XSS