WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-social-media-icons
Published
2023-08-29
Title
Social Media & Share Icons < 2.8.4 - Reflected XSS
Slug
ultimate-social-media-icons
Published
2023-10-16
Title
Social Media Share Buttons & Social Sharing Icons < 2.8.6 - Arbitrary Settings Update via CSRF
Slug
ultimate-social-media-icons
Published
2023-10-16
Title
Social Media Share Buttons & Social Sharing Icons < 2.8.6 - Subscriber+ Sensitive Information Exposure
Slug
ultimate-social-media-icons
Published
2024-03-27
Title
Social Media Share Buttons < 2.8.9 - Admin+ Stored XSS via settings
Slug
ultimate-social-media-icons
Published
2024-07-06
Title
Social Media & Share Icons < 2.9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ultimate-social-media-icons
Published
2024-04-29
Title
Social Media Share Buttons < 2.9.0 - Admin+ Stored XSS
Slug
ultimate-social-media-icons
Published
2026-08-20
Title
Social Media Share Buttons & Social Sharing Icons < 3.0.0 - Unauthenticated Stored XSS
Slug
ultimate-social-media-icons
Published
2026-08-31
Title
Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected XSS via Pin It Share Handler
Slug
ultimate-social-media-icons
Published
2026-08-31
Title
Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Contributor+ Stored XSS via Post Title
Slug
ultimate-social-media-icons
Published
2026-09-30
Title
Social Media Share Buttons & Social Sharing Icons < 3.0.2 - Reflected DOM-Based Cross-Site Scripting via URL
Slug
ultimate-social-media-plus
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
ultimate-social-media-plus
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ultimate-social-media-plus
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
ultimate-social-media-plus
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
ultimate-social-media-plus
Published
2024-04-29
Title
Social Share Icons & Social Share Buttons < 3.6.3 - Missing Authorization to Notice Dismissal
Slug
ultimate-social-media-plus
Published
2026-10-06
Title
Social Share Icons & Social Share Buttons < 3.7.6 - Unauthenticated Stored Cross-Site Scripting
Slug
ultimate-spin-wheel
Published
2026-10-13
Title
Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin Result
Slug
ultimate-store-kit
Published
2024-04-08
Title
Ultimate Store Kit Elementor Addons < 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-store-kit
Published
2024-05-07
Title
Ultimate Store Kit Elementor Addons < 2.0.4 - Unauthenticated PHP Object Injection
Slug
ultimate-store-kit
Published
2024-08-20
Title
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider < 2.0.0 - Unauthenticated PHP Object Injection
Slug
ultimate-store-kit
Published
2024-08-16
Title
Ultimate Store Kit Elementor Addons < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-store-kit
Published
2024-08-27
Title
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider < 2.0.4 - Unauthenticated PHP Object Injection
Slug
ultimate-store-kit
Published
2024-09-30
Title
Ultimate Store Kit Elementor Addons < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-store-kit
Published
2024-12-19
Title
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider < 2.3.1 - Missing Authorization
Slug
ultimate-store-kit
Published
2025-04-04
Title
Ultimate Store Kit Elementor Addons < 2.6.0 - Contributor+ Stored XSS