WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ss-downloads
Published
2014-08-01
Title
SS Downloads 1.4.4.1 - templates/emailsent.php Multiple Parameter Reflected XSS
Slug
ss-downloads
Published
2014-08-01
Title
SS Downloads 1.4.4.1 - templates/emailform.php Multiple Parameter Reflected XSS
Slug
ss-downloads
Published
2014-08-01
Title
SS Downloads 1.4.4.1 - templates/email&nameform.php Multiple Parameter Reflected XSS
Slug
ss-font-awesome-icon
Published
2025-09-05
Title
SS Font Awesome Icon <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ssl-atlas-free-ssl-certificate-https-redirect
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ssl-wireless-sms-notification
Published
2025-01-03
Title
SSL Wireless SMS Notification < 3.6.0 - Unauthenticated SQL Injection
Slug
ssl-wireless-sms-notification
Published
2024-12-19
Title
SSL Wireless SMS Notification < 3.7.0 - Unauthenticated Privilege Escalation
Slug
ssl-zen
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ssl-zen
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ssl-zen
Published
2024-04-17
Title
SSL Zen <= 4.5.3 - Unauthenticated Private Keys Access
Slug
ssp-debugging
Published
2025-12-04
Title
SSP Debug <= 1.0.0 - Unauthenticated Sensitive Information Exposure
Slug
ssquiz
Published
2014-08-01
Title
SS Quiz - Multiple Unspecified Vulnerabilities
Slug
ssquiz
Published
2025-02-21
Title
SS Quiz <= 2.0.5 - Unauthenticated PHP Object Injection
Slug
ssv-events
Published
2024-10-15
Title
SSV Events <= 3.2.7 - Unauthenticated Local File Inclusion
Slug
ssv-mailchimp
Published
2024-10-15
Title
SSV MailChimp <= 3.1.5 - Unauthenticated Local File Inclusion
Slug
st-category-wp
Published
2025-10-21
Title
ST Categories Widget <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
st-daily-tip
Published
2021-09-21
Title
St Daily Tip <= 4.7 - CSRF to Stored Cross-Site Scripting
Slug
st-gallery-wp
Published
2025-01-07
Title
ST Gallery WP <= 1.0.8 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
st_newsletter
Published
2014-08-01
Title
st_newsletter - Remote SQL Injection
Slug
st_newsletter
Published
2014-08-01
Title
st_newsletter - (stnl_iframe.php) SQL Injection
Slug
stackable-ultimate-gutenberg-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
stackable-ultimate-gutenberg-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
stackable-ultimate-gutenberg-blocks
Published
2024-03-28
Title
Stackable < 3.12.12 - Contributor+ Stored XSS via Posts Block
Slug
stackable-ultimate-gutenberg-blocks
Published
2024-06-27
Title
Stackable – Page Builder Gutenberg Blocks < 3.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
stackable-ultimate-gutenberg-blocks
Published
2024-10-11
Title
Stackable – Page Builder Gutenberg Blocks < 3.13.7 - Unauthenticated CSS Injection