WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
spiffy-calendar
Published
2022-02-10
Title
Spiffy Calendar < 4.9.1 - Subscriber+ Arbitrary Event Edition/Deletion via IDOR
Slug
spiffy-calendar
Published
2023-05-03
Title
Spiffy Calendar < 4.9.4 - Reflected XSS
Slug
spiffy-calendar
Published
2023-04-07
Title
Spiffy Calendar < 4.9.2 - SQL Injection
Slug
spiffy-calendar
Published
2023-12-01
Title
Spiffy Calendar < 4.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spiffy-calendar
Published
2024-01-12
Title
Spiffy Calendar < 4.9.9 - Broken Access Control
Slug
spiffy-calendar
Published
2024-03-29
Title
Spiffy Calendar < 4.9.11 - Missing Authorization
Slug
spiffy-calendar
Published
2024-03-28
Title
Spiffy Calendar < 4.9.10 - Reflected Cross-Site Scripting
Slug
spiffy-calendar
Published
2024-07-10
Title
Spiffy Calendar < 4.9.12 - Authenticated (Administrator+) SQL Injection
Slug
spiffy-calendar
Published
2024-09-12
Title
Spiffy Calendar < 4.9.14 - Reflected Cross-Site Scripting
Slug
spiffy-calendar
Published
2024-09-12
Title
Spiffy Calendar < 4.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spiffy-calendar
Published
2024-08-28
Title
Spiffy Calendar < 4.9.13 - Authenticated (Admin+) SQL Injection
Slug
spiffy-calendar
Published
2026-01-05
Title
Spiffy Calendar < 5.0.8 - Missing Authorization
Slug
spin-wheel
Published
2026-01-16
Title
Spin Wheel < 2.1.1 - Unauthenticated Client-Side Prize Manipulation
Slug
spin360
Published
2024-03-29
Title
Spin 360 deg and 3D Model Viewer <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spiraclethemes-site-library
Published
2025-05-07
Title
Spiraclethemes Site Library < 1.5.5 - Contributor+ Stored XSS
Slug
spirit-framework
Published
2025-09-03
Title
Spirit Framework <= 1.2.13 - Authenticated (Subscriber+) Local File Inclusion
Slug
spirit-framework
Published
2025-10-02
Title
Spirit Framework < 1.2.15 - Account Takeover and Privilege Escalation
Slug
spirit-framework
Published
2025-09-03
Title
Spirit Framework <= 1.2.13 - Authenticated (Subscriber+) Local File Inclusion
Slug
spiritual-gifts-survey
Published
2025-01-02
Title
Spiritual Gifts Survey <= 0.9.10 - Unauthenticated CSRF to XSS
Slug
spiritual-gifts-survey
Published
2025-01-02
Title
Spiritual Gifts Survey <= 0.9.10 - Unauthenticated CSRF to XSS
Slug
splash-connector
Published
2024-12-05
Title
Splash Sync < 2.0.8 - Reflected Cross-Site Scripting
Slug
splash-header
Published
2021-07-29
Title
Splash Header < 1.20.8 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
splashscreen
Published
2024-01-19
Title
Splashscreen <= 0.20 - Settings Update via CSRF
Slug
split-test-for-elementor
Published
2023-12-27
Title
Split Test For Elementor < 1.7.0 - Cross-Site Request Forgery
Slug
split-test-for-elementor
Published
2025-04-04
Title
Split Test For Elementor < 1.8.4 - Editor+ SQLi