WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-service-payment-form-with-authorizenet
Published
2024-12-11
Title
WP Service Payment Form With Authorize.net <= 2.6.3 - Reflected Cross-Site Scripting
Slug
wp-service-payment-form-with-authorizenet
Published
2025-01-16
Title
WP Service Payment Form With Authorize.net <= 2.6.0 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
wp-ses
Published
2021-06-29
Title
WP Offload SES Lite < 1.4.5 - Stored Cross-Site Scripting (XSS)
Slug
wp-setup-wizard
Published
2024-02-14
Title
WP Setup Wizard < 1.0.8.2 - Authenticated (Subscriber+) Full Database Download
Slug
wp-sexylightbox
Published
2025-04-09
Title
WP SexyLightBox <= 0.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-shamsi
Published
2022-09-05
Title
WP Shamsi < 4.2.0 - Subscriber+ Settings Update
Slug
wp-shamsi
Published
2022-11-28
Title
WP Shamsi < 4.1.1 - Unauthenticated Arbitrary Plugin Deactivation
Slug
wp-shamsi
Published
2023-02-28
Title
WP Shamsi <= 4.3.3 - Subscriber+ Attachment Deletion
Slug
wp-shapes
Published
2024-12-19
Title
WP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
wp-share-buttons-analytics-by-getsocial
Published
2023-11-29
Title
Social Share Buttons & Analytics Plugin < 4.4 - Admin+ Stored XSS
Slug
wp-share-buttons-analytics-by-getsocial
Published
2025-04-04
Title
Social Share Buttons & Analytics Plugin – GetSocial.io <= 4.5 - Missing Authorization
Slug
wp-sheet-editor-bulk-spreadsheet-editor-for-posts-and-pages
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-sheet-editor-bulk-spreadsheet-editor-for-posts-and-pages
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-sheet-editor-edd-downloads
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-sheet-editor-edd-downloads
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-shieldon
Published
2021-01-18
Title
WP Shieldon < 1.6.4 - Unauthenticated Cross-Site Scripting (XSS)
Slug
wp-shop-original
Published
2015-09-17
Title
WP Shop <= 3.4.3.18 - Cross-Site Scripting (XSS) & CSRF
Slug
wp-shop-original
Published
2015-07-08
Title
WP Shop <= 3.4.3.15 - Unauthenticated Blind SQL Injection
Slug
wp-shop-original
Published
2022-08-31
Title
WP Shop Original <= 3.9.6 - Unauthenticated Settings Update
Slug
wp-shopify
Published
2025-06-05
Title
WP Shopify < 1.6.0 - Contributor+ Local File Inclusion
Slug
wp-shopify
Published
2025-07-24
Title
WP Shopify < 1.5.4 - Reflected XSS
Slug
wp-shopping-cart
Published
2014-08-01
Title
e-Commerce <= 3.4 - Arbitrary File Upload Exploit
Slug
wp-shortcm
Published
2025-09-05
Title
short.io <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-shortcode
Published
2023-03-16
Title
WP Shortcode by MyThemeShop < 1.4.17 - CSRF
Slug
wp-shoutbox-live-chat
Published
2023-04-03
Title
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated Stored XSS