WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
spotify-play-button-for-wordpress
Published
2023-10-03
Title
Sp*tify Play Button for WordPress < 2.11 - Settings Update via CSRF
Slug
spotify-play-button-for-wordpress
Published
2024-11-25
Title
Spotify Play Button for WordPress < 2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via spotifyplaybutton Shortcode
Slug
spotim-comments
Published
2017-04-19
Title
Spots.IM Comments < 4.0.4 - Multiple Vulnerabilities
Slug
spotlight-social-photo-feeds
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
spotlight-social-photo-feeds
Published
2023-01-23
Title
Spotlight Social Feeds < 1.4.3 - Contributor+ Stored XSS
Slug
spotlight-social-photo-feeds
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
spotlight-social-photo-feeds
Published
2024-04-10
Title
Spotlight Social Media Feeds < 1.6.11 - Cross-Site Request Forgery
Slug
spotlight-social-photo-feeds
Published
2025-02-14
Title
Spotlight Social Media Feeds < 1.7.2 - Unauthenticated Sensitive Information Disclosure
Slug
spotlight-social-photo-feeds-premium
Published
2025-05-16
Title
Spotlight - Social Media Feeds (Premium) < 1.7.2 - Unauthenticated Information Exposure
Slug
spotlightr
Published
2024-12-19
Title
Spotlightr < 0.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
spotlightyour
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
sprapid
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
spreadr-for-woocomerce
Published
2024-12-14
Title
Spreadr Woocommerce < 1.0.5 - Missing Authorization
Slug
spreadr-for-woocomerce
Published
2024-12-14
Title
Spreadr Woocommerce < 1.0.5 - Missing Authorization to Arbitrary Content Deletion
Slug
spreadshirt-rss-3d-cube-flash-gallery
Published
2014-04-25
Title
WP RSS Spreadshirt 3D Cube Gallery <= 1.3 - Unauthenticated Cross-Site Scripting (XSS)
Slug
springboard-video-quick-publish
Published
2014-08-01
Title
Springboard Video Quick Publish 0.2.6 - videolist.php paged Parameter Reflected XSS
Slug
springboard-video-quick-publish
Published
2014-08-01
Title
Springboard Video Quick Publish 0.2.6 - springboardvideo.php video_id Parameter XSS
Slug
springboard-video-quick-publish
Published
2014-08-01
Title
Springboard Video Quick Publish 0.2.6 - sb_search.php paged Parameter Reflected XSS
Slug
sprout-clients
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sprout-clients
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
sprout-clients
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sprout-clients
Published
2025-04-01
Title
Sprout Clients < 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sprout-clients
Published
2025-10-23
Title
Sprout Clients < 3.2.2 - Reflected Cross-Site Scripting
Slug
sprout-invoices
Published
2021-10-18
Title
Client Invoicing by Sprout Invoices < 19.9.7 - Admin+ Stored Cross-Site Scripting
Slug
sprout-invoices
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting