WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-storymap
Published
2025-09-05
Title
StoryMap <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-strava
Published
2024-11-12
Title
WP-Strava <= 2.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-stripe-checkout
Published
2022-11-22
Title
WP Stripe Checkout < 1.2.2.21 - Contributor+ Stored XSS
Slug
wp-stripe-checkout
Published
2023-12-28
Title
WP Stripe Checkout < 1.2.2.38 - Sensitive Information Exposure via Debug Log
Slug
wp-stripe-checkout
Published
2024-04-16
Title
WP Stripe Checkout < 1.2.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-stripe-donation
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-stripe-donation
Published
2023-02-20
Title
Accept Stripe Donation - AidWP < 3.1.6 - CSRF
Slug
wp-stripe-donation
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-stripe-donation
Published
2024-10-24
Title
WordPress Stripe Donation and Payment Plugin < 3.2.4 - Missing Authorization
Slug
wp-stripe-express
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-stripe-express
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-stripe-global-payments
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-stripe-global-payments
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-structured-data-schema
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-structured-data-schema
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-structured-data-schema
Published
2025-10-02
Title
Schema Plugin For Divi, Gutenberg & Shortcodes <= 4.3.2 - Contributor+ Object Instantiation
Slug
wp-structuring-markup
Published
2023-01-24
Title
Markup <= 4.8.1 - Contributor+ Stored XSS via Shortcode
Slug
wp-subscribe
Published
2022-05-02
Title
WP Subscribe < 1.2.13 - Admin+ Stored Cross-Site Scripting
Slug
wp-subscribe
Published
2026-01-26
Title
Subscribe <= 1.2.16 - Missing Authorization
Slug
wp-subscription-forms
Published
2025-03-27
Title
WP Subscription Forms < 1.2.4 - Authenticated (Contributor+) SQL Injection
Slug
wp-subscription-forms
Published
2025-04-09
Title
WP Subscription Forms < 1.2.5 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-subscription-forms
Published
2025-04-16
Title
WP Subscription Forms < 1.2.4 - Missing Authorization
Slug
wp-subscription-forms-pro
Published
2025-09-26
Title
WP Subscription Forms PRO <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
wp-subtitle
Published
2022-04-25
Title
WP Subtitle < 3.4.1 - Contributor+ Stored Cross-Site Scripting
Slug
wp-subtitle
Published
2025-09-22
Title
WP Subtitle < 3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting