WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-simple-booking-calendar
Published
2024-09-12
Title
WP Simple Booking Calendar < 2.0.11 - Reflected Cross-Site Scripting
Slug
wp-simple-booking-calendar
Published
2025-04-16
Title
WP Simple Booking Calendar < 2.0.14 - Missing Authorization
Slug
wp-simple-events
Published
2023-03-17
Title
WP Simple Events <= 1.0 - Admin+ Cross Site Scripting
Slug
wp-simple-firewall
Published
2022-01-19
Title
Shield Security < 13.0.6 - Admin+ Stored Cross-Site Scripting
Slug
wp-simple-firewall
Published
2023-04-25
Title
Shield Security < 17.0.18 - Unauthenticated Stored XSS
Slug
wp-simple-firewall
Published
2023-04-25
Title
Shield Security < 17.0.18 - Subscriber+ Arbitrary Log Entry Creation
Slug
wp-simple-firewall
Published
2024-01-16
Title
Shield Security < 18.5.8 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-simple-firewall
Published
2024-02-05
Title
Shield Security – Smart Bot Blocking & Intrusion Prevention Security < 18.5.10 - Unauthenticated Local File Inclusion
Slug
wp-simple-firewall
Published
2024-06-01
Title
Shield Security – Smart Bot Blocking & Intrusion Prevention Security < 19.1.11 - Cross-Site Request Forgery
Slug
wp-simple-firewall
Published
2024-08-05
Title
Shield Security < 20.0.6 - Reflected XSS
Slug
wp-simple-firewall
Published
2026-01-15
Title
Shield Security < 21.0.10 - Authenticated (Subscriber+) Insecure Direct Object Reference to Disable Google Authenticator
Slug
wp-simple-firewall
Published
2026-02-18
Title
Shield Security: Blocks Bots, Protects Users, and Prevents Security Breaches < 21.0.10 - Missing Authorization to Authenticated (Subscriber+) Email MFA Update
Slug
wp-simple-firewall
Published
2026-02-18
Title
Shield Security < 21.0.10 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter
Slug
wp-simple-firewall
Published
2026-02-18
Title
Shield Security < 21.0.10 - Cross-Site Request Forgery to SQL Injection
Slug
wp-simple-firewall
Published
2026-10-30
Title
Shield Security < 22.3.4 - Unauthenticated Stored Cross-Site Scripting via Request Path (REQUEST_URI) in Traffic Log
Slug
wp-simple-galleries
Published
2023-10-29
Title
WP Simple Galleries <= 1.34 - Contributor+ PHP Object Injection
Slug
wp-simple-html-sitemap
Published
2023-10-18
Title
WP Simple HTML Sitemap < 2.6 - Contributor+ Stored XSS
Slug
wp-simple-html-sitemap
Published
2023-10-25
Title
WP Simple HTML Sitemap < 2.3 - Reflected XSS
Slug
wp-simple-html-sitemap
Published
2023-12-07
Title
WP Simple HTML Sitemap < 2.8 - Missing Authorization
Slug
wp-simple-html-sitemap
Published
2024-04-16
Title
WordPress Simple HTML Sitemap < 2.9 - Reflected Cross-Site Scripting
Slug
wp-simple-html-sitemap
Published
2024-09-24
Title
WordPress Simple HTML Sitemap < 3.2 - Authenticated (Admin+) SQL Injection
Slug
wp-simple-html-sitemap
Published
2025-04-01
Title
WP Simple HTML Sitemap < 3.6 - Missing Authorization
Slug
wp-simple-html-sitemap
Published
2026-02-15
Title
Simple HTML Sitemap < 3.9 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
wp-simple-login-registration-plugin
Published
2014-08-01
Title
Simple Login Registration 1.0.1 - XSS
Slug
wp-simple-maintenance-mode
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting