WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
smartarget-popup
Published
2025-04-01
Title
Smartarget Popup <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
smartcat-wpml
Published
2025-09-10
Title
Smartcat Translator for WPML < 3.1.73 - Authenticated (Author+) SQL Injection via orderby Parameter
Slug
smartcat-wpml
Published
2026-05-14
Title
Smartcat Translator for WPML < 3.1.78 - Missing Authorization to Unauthenticated Plugin Settings Update
Slug
smartcrawl-seo
Published
2023-11-23
Title
SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure
Slug
smartcrawl-seo
Published
2024-04-19
Title
SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer < 3.10.3 - Missing Authorization
Slug
smartcrawl-seo
Published
2024-07-09
Title
SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer < 3.10.9 - Unauthenticated Full Path Disclosure
Slug
smartcrawl-seo
Published
2025-09-29
Title
SmartCrawl SEO checker, analyzer & optimizer < 3.14.4 - Missing Authorization to Plugin Settings Update
Slug
smartcrawl-seo
Published
2025-10-16
Title
SmartCrawl < 3.14.4 - Missing Authorization
Slug
smartcrawl-seo
Published
2026-08-17
Title
SmartCrawl < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration
Slug
smartcrawl-seo
Published
2026-10-16
Title
SmartCrawl SEO checker, analyzer & optimizer < 3.17.1 - Authenticated (Contributor+) Insecure Direct Object Reference
Slug
smartemailing
Published
2025-01-06
Title
SmartEmailing.cz < 2.2.6 - Reflected Cross-Site Scripting
Slug
smarter-analytics
Published
2026-03-20
Title
Smarter Analytics <= 2.0 - Missing Authorization to Unauthenticated Plugin Settings Reset via 'reset' Parameter
Slug
smartifw
Published
2025-04-01
Title
Smart Icons For WordPress <= 1.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
smartlink-dinamic-urls
Published
2024-11-01
Title
SmartLink Dynamic URLs < 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
smartpay
Published
2025-05-06
Title
Download Manager and Payment Form WordPress Plugin – WP SmartPay 1.1.0 - 2.7.13 - Authenticated (Subscriber+) Information Exposure
Slug
smartpay
Published
2025-06-24
Title
WP SmartPay < 2.8.0 - Authenticated (Subscriber+) Account Takeover
Slug
smartpay
Published
2025-07-01
Title
Download Manager and Payment Form WordPress Plugin – WP SmartPay 1.1.0 - 2.7.13 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Slug
smartsearchwp
Published
2024-07-29
Title
SmartSearch WP <= 2.4.4 - Unauthenticated SQLi
Slug
smartsearchwp
Published
2024-07-29
Title
SmartSearch WP <= 2.4.4 - Unauthenticated Stored XSS
Slug
smartsearchwp
Published
2024-08-14
Title
SmartSearchWP <= 2.4.4 - Unauthenticated Log Purge
Slug
smartsearchwp
Published
2024-09-04
Title
SmartSearchWP < 2.4.6 - Unauthenticated OpenAI Key Disclosure
Slug
smartseo
Published
2025-07-08
Title
smart SEO <= 4.0 - Authenticated (Subscriber+) SQL Injection
Slug
smartsoftbutton-widget-de-botones-de-chat
Published
2022-06-16
Title
Button Widget Smartsoft <= 1.0.1 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
smartsupp-live-chat
Published
2024-07-20
Title
Smartsupp < 3.7 - Cross-Site Request Forgery
Slug
smartsupp-live-chat
Published
2026-02-18
Title
Smartsupp – live chat, AI shopping assistant and chatbots < 3.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting