WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-seopress
Published
2024-05-23
Title
SEOPress < 7.6 - Contributor+ Stored XSS
Slug
wp-seopress
Published
2024-06-03
Title
SEOPress < 7.8 - Contributor+ Open Redirect
Slug
wp-seopress
Published
2024-06-03
Title
SEOPress < 7.8 - Contributor+ Stored XSS
Slug
wp-seopress
Published
2024-06-18
Title
SEOPress < 7.9 - Unauthenticated Object Injection
Slug
wp-seopress
Published
2024-06-19
Title
SEOPress – On-site SEO < 7.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Social Image URL
Slug
wp-seopress
Published
2024-10-01
Title
SEOPress – On-site SEO < 8.2 - Reflected Cross-Site Scripting
Slug
wp-seopress
Published
2024-10-24
Title
SEOPress < 8.2 - Missing Authorization
Slug
wp-seopress
Published
2024-10-24
Title
SEOPress < 8.2 - Missing Authorization
Slug
wp-seopress
Published
2024-10-24
Title
SEOPress < 8.2 - Missing Authorization
Slug
wp-server-stats
Published
2022-08-22
Title
WP Server Health Stats < 1.7.0 - Admin+ Stored Cross-Site Scripting
Slug
wp-server-stats
Published
2024-04-05
Title
WP Server Health Stats < 1.7.4 - Cross-Site Request Forgery
Slug
wp-server-stats
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
wp-service-payment-form-with-authorizenet
Published
2024-12-11
Title
WP Service Payment Form With Authorize.net <= 2.6.3 - Reflected Cross-Site Scripting
Slug
wp-service-payment-form-with-authorizenet
Published
2025-01-16
Title
WP Service Payment Form With Authorize.net <= 2.6.0 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
wp-ses
Published
2021-06-29
Title
WP Offload SES Lite < 1.4.5 - Stored Cross-Site Scripting (XSS)
Slug
wp-setup-wizard
Published
2024-02-14
Title
WP Setup Wizard < 1.0.8.2 - Authenticated (Subscriber+) Full Database Download
Slug
wp-sexylightbox
Published
2025-04-09
Title
WP SexyLightBox <= 0.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-shamsi
Published
2022-09-05
Title
WP Shamsi < 4.2.0 - Subscriber+ Settings Update
Slug
wp-shamsi
Published
2022-11-28
Title
WP Shamsi < 4.1.1 - Unauthenticated Arbitrary Plugin Deactivation
Slug
wp-shamsi
Published
2023-02-28
Title
WP Shamsi <= 4.3.3 - Subscriber+ Attachment Deletion
Slug
wp-shapes
Published
2024-12-19
Title
WP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
wp-share-buttons-analytics-by-getsocial
Published
2023-11-29
Title
Social Share Buttons & Analytics Plugin < 4.4 - Admin+ Stored XSS
Slug
wp-share-buttons-analytics-by-getsocial
Published
2025-04-04
Title
Social Share Buttons & Analytics Plugin – GetSocial.io <= 4.5 - Missing Authorization
Slug
wp-sheet-editor-bulk-spreadsheet-editor-for-posts-and-pages
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-sheet-editor-bulk-spreadsheet-editor-for-posts-and-pages
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting