WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wordpress-seo-premium
Published
2019-07-09
Title
Yoast SEO 1.2.0-11.5 - Admin+ Stored XSS
Slug
wordpress-seo-premium
Published
2025-10-02
Title
Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wordpress-seo-premium
Published
2026-05-26
Title
Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE
Slug
wordpress-signature
Published
2025-01-31
Title
WordPress Signature <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wordpress-simple-paypal-shopping-cart
Published
2014-08-01
Title
Simple Paypal Shopping Cart <= 3.5 - Cross-Site Request Forgery (CSRF)
Slug
wordpress-simple-paypal-shopping-cart
Published
2022-12-27
Title
WordPress Simple Shopping Cart < 4.6.2 - Contributor+ Stored XSS via Shortcode
Slug
wordpress-simple-paypal-shopping-cart
Published
2023-03-16
Title
WP Simple Shopping Cart 4.6.3 - Unauthenticated PII Disclosure
Slug
wordpress-simple-paypal-shopping-cart
Published
2024-01-26
Title
WordPress Simple Shopping Cart < 4.7.2 - Authenticated(Administrator+) Stored Cross-Site Scripting
Slug
wordpress-simple-paypal-shopping-cart
Published
2024-12-23
Title
WordPress Simple Shopping Cart < 5.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wordpress-simple-paypal-shopping-cart
Published
2025-04-22
Title
WordPress Simple PayPal Shopping Cart < 5.1.3 - Unauthenticated Information Exposure via file_url Parameter
Slug
wordpress-simple-paypal-shopping-cart
Published
2025-04-22
Title
WordPress Simple PayPal Shopping Cart < 5.1.3 - Unauthenticated Product Price Manipulation
Slug
wordpress-simple-paypal-shopping-cart
Published
2025-04-30
Title
WordPress Simple PayPal Shopping Cart < 5.1.4 - Insecure Direct Object Reference
Slug
wordpress-simple-paypal-shopping-cart
Published
2025-04-30
Title
WordPress Simple PayPal Shopping Cart < 5.1.4 - Insecure Direct Object Reference via 'quantity'
Slug
wordpress-simple-paypal-shopping-cart
Published
2025-04-30
Title
WordPress Simple PayPal Shopping Cart < 5.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wordpress-simple-paypal-shopping-cart
Published
2026-04-03
Title
Simple Shopping Cart < 5.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsc_display_product' Shortcode
Slug
wordpress-simple-paypal-shopping-cart
Published
2026-06-02
Title
Simple Shopping Cart < 5.3.0 - Unauthenticated Insecure Direct Object Reference
Slug
wordpress-simple-shout-box
Published
2014-08-01
Title
wordpress-simple-shout-box - SQL Injection
Slug
wordpress-social-login
Published
2014-04-25
Title
Wordpress Social Login < 2.1.5 - XSS
Slug
wordpress-social-login
Published
2023-05-31
Title
WordPress Social Login <= 3.0.4 - Reflected XSS
Slug
wordpress-social-login
Published
2023-05-31
Title
WordPress Social Login <= 3.0.4 - Admin+ Stored XSS
Slug
wordpress-social-login
Published
2023-09-05
Title
WordPress Social Login <= 3.0.4 - Contributor+ Stored XSS
Slug
wordpress-social-ring
Published
2014-08-01
Title
Social Ring 1.0 - share.php url Parameter Reflected XSS
Slug
wordpress-sql-backup
Published
2025-03-24
Title
WordPress SQL Backup <= 3.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wordpress-tabs-slides
Published
2023-01-19
Title
WP Tabs Slides <= 2.0.3 - CSRF
Slug
wordpress-theme-demo-bar
Published
2025-03-20
Title
Theme Demo Bar <= 1.6.3 - Reflected Cross-Site Scripting