WordPress Plugin Vulnerabilities

0-9 - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z
Name Added Title
the-holiday-calendar 2015-08-10 The Holiday Calendar <= 1.11.2 - Cross-Site Scripting (XSS)
tallykit 2015-05-14 Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scri...
surveys 2017-05-26 Surveys 1.01.8 - Authenticated SQL Injection
supportflow 2016-06-29 SupportFlow <= 0.6 - Stored Cross-Site Scripting (XSS)
subscribe-to-comments 2015-07-15 Subscribe to Comments <= 2.1.2 - Authenticated Local File...
stageshow 2015-07-05 StageShow <= 5.0.8 - Open Redirect
sql-shortcode 2017-09-20 SQL Shortcode <= 1.1 - Authenticated SQL Execution
spiffy-calendar 2017-06-12 Spiffy Calendar <= 3.2.0 - Reflected Cross-Site Scripting...
sola-support-tickets 2016-02-14 Sola Support Ticket <= 3.12 - XSS & Configuration Change
smokesignal 2017-09-19 SmokeSignal <= 1.2.6 - Authenticated Stored XSS
sitebuilder-dynamic-components 2017-05-21 SiteBuilder Dynamic Components <= 1.0 - Unauthenticated P...
simple-student-result 2017-09-28 Student Result or Employee Database <= 1.6.3 - Auth Bypass
simple-slideshow-manager 2017-06-01 Simple Slideshow Manager <= 2.3 – Multiple Vulnerabilities
simple-image-manipulator 2015-08-03 simple-image-manipulator <= 1.0 - Remote File Download
simple-events-calendar 2017-11-12 Simple Events Calendar <= 1.3.5 - Authenticated SQL Injec...
simpel-reserveren 2016-04-19 Simpel Reserveren 3 <= 3.5.2 - Unauthenticated Reflected ...
shibboleth 2017-09-12 Shibboleth <= 1.7 - Cross-Site Scripting (XSS)
seo-rank-reporter 2015-11-24 SEO Rank Reporter <= 2.2.2 - Authenticated Reflected Cros...
sender 2017-04-13 Multiple BestWebSoft Plugins - Authenticated Reflected GE...
se-html5-album-audio-player 2015-06-08 SE HTML5 Album Audio Player <= 1.1.0 - Local File Include
safe-editor 2016-05-17 safe-editor <= 1.1 - Unauthenticated CSS/JS-injection
s3bubble-amazon-s3-audio-st... 2015-07-09 S3Bubble Amazon S3 Video And Audio Streaming With Analyti...
s2member-secure-file-browser 2015-05-14 Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scri...
row-seats 2017-05-21 Row Seats Core <= 2.66 - Unauthenticated PHP Object Injec...
roomcloud 2015-05-09 Roomcloud v1.1(rev @1115307) - Cross-Site Scripting (XSS)
rockhoist-badges 2017-03-06 rockhoist-badges 1.2.2 - Authenticated Stored Cross-Site ...
rocket-responsive-gallery 2015-08-24 WordPress Gallery Plugin 1.0 - Authenticated Stored Cross...
rk-responsive-contact-form 2017-08-16 rk-responsive-contact-form 1.0 - Authenticated Blind SQL ...
responsive-category-slider 2015-05-14 Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scri...
relevant 2016-01-06 Relevant Related Posts <= 1.0.7 - Cross Site Scripting
relevant 2017-04-13 Multiple BestWebSoft Plugins - Authenticated Reflected GE...