WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sociable
Published
2021-09-20
Title
Sociable <= 4.3.4.1 - Admin+ Stored Cross-Site Scripting
Slug
social-analytics
Published
2025-01-16
Title
Social Analytics <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-autho-bio
Published
2024-03-29
Title
Social Author Bio <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Missing Authorization via Multiple Functions
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Unauthenticated Stored Cross-Site Scripting
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Cross-Site Request Forgery via Multiple Functions
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
social-auto-poster
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Authenticated (Contributor+) Arbitrary File Upload
Slug
social-auto-poster
Published
2024-09-30
Title
Social Auto Poster < 5.3.16 - Reflected Cross-Site Scripting
Slug
social-auto-poster
Published
2024-10-14
Title
Social Auto Poster < 5.3.16 - Cross-Site Request Forgery
Slug
social-bookmarking-reloaded
Published
2025-04-09
Title
Social Bookmarking RELOADED <= 3.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-button
Published
2024-11-08
Title
Social button <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
social-buttons-pack
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
social-connect
Published
2014-08-01
Title
Social Connect 0.10.1 - diagnostics/test.php testing Parameter Reflected XSS
Slug
social-connect
Published
2024-05-07
Title
Social Connect <= 1.2 - Authentication Bypass
Slug
social-contact-form
Published
2026-07-07
Title
Contact Form to Chat Apps | Click to Chat to Order – FormyChat < 2.15.4 - Unauthenticated Stored Cross-Site Scripting
Slug
social-contact-form
Published
2026-08-17
Title
Contact Form to Chat Apps | Click to Chat to Order – FormyChat <= 2.15.7 - Missing Authorization
Slug
social-counter
Published
2025-04-24
Title
Social Counter < 2.1 - Authenticated (Administrator+) PHP Object Injection
Slug
social-crowd
Published
2025-04-09
Title
Social Crowd <= 0.9.6.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
social-discussions
Published
2014-08-01
Title
Social Discussions - Multiple Path Disclosure
Slug
social-discussions
Published
2014-08-01
Title
Social Discussions 6.1.1 - Remote File Inclusion
Slug
social-feed-gallery-portfolio
Published
2025-12-05
Title
Social Feed Gallery Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
social-gallery-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius