WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-sendgrid-smtp
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
wp-sendsms
Published
2014-08-01
Title
WP-SendSMS - Setting Manipulation Cross-Site Request Forgery (CSRF)
Slug
wp-sendsms
Published
2014-08-01
Title
WP-SendSMS - Multiple Cross-Site Scripting (XSS)
Slug
wp-sentry
Published
2022-05-31
Title
WP Sentry <= 1.0 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
wp-seo-keyword-optimizer
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-seo-keyword-optimizer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-seo-keyword-optimizer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-seo-redirect-301
Published
2021-10-11
Title
WP SEO Redirect 301 < 2.3.2 - Redirect Deletion via CSRF
Slug
wp-seo-search
Published
2025-12-20
Title
SEO Search < 1.2 - Cross-Site Request Forgery
Slug
wp-seo-spy-google
Published
2014-08-01
Title
wp-seo-spy-google - ofc_upload_image.php Arbitrary File Upload
Slug
wp-seo-structured-data-schema
Published
2025-05-07
Title
WP SEO Structured Data Schema < 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Settings
Slug
wp-seo-tags
Published
2021-08-13
Title
WP SEO Tags <= 2.2.7 - Reflected Cross-Site Scripting
Slug
wp-seo-tdk
Published
2021-07-20
Title
WP SEO TDK <= 2.1.2 - Unauthenticated Setting Update to Stored XSS
Slug
wp-seopress
Published
2021-08-16
Title
SEOPress 5.0.0 – 5.0.3 - Authenticated Stored Cross-Site Scripting
Slug
wp-seopress
Published
2023-04-10
Title
SEOPress < 6.5.0.3 - Admin+ PHP Object Injection
Slug
wp-seopress
Published
2023-12-26
Title
WP SEO Press < 7.3 - Admin+ Stored XSS
Slug
wp-seopress
Published
2024-03-22
Title
SEOPress – On-site SEO < 7.6 - Author+ Stored Cross-Site Scripting
Slug
wp-seopress
Published
2024-05-03
Title
SEOPress < 7.7 - Information Exposure
Slug
wp-seopress
Published
2024-05-23
Title
SEOPress < 7.6 - Contributor+ Stored XSS
Slug
wp-seopress
Published
2024-06-03
Title
SEOPress < 7.8 - Contributor+ Open Redirect
Slug
wp-seopress
Published
2024-06-03
Title
SEOPress < 7.8 - Contributor+ Stored XSS
Slug
wp-seopress
Published
2024-06-18
Title
SEOPress < 7.9 - Unauthenticated Object Injection
Slug
wp-seopress
Published
2024-06-19
Title
SEOPress – On-site SEO < 7.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Social Image URL
Slug
wp-seopress
Published
2024-10-01
Title
SEOPress – On-site SEO < 8.2 - Reflected Cross-Site Scripting
Slug
wp-seopress
Published
2024-10-24
Title
SEOPress < 8.2 - Missing Authorization