Skip to content
Plugin-planet vulnerabilities
Newest
-
jeff starr simple download counter
WordPress Simple Download Counter plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46240
6.5 Medium
-
jeff starr theme switcha
WordPress Theme Switcha plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46239
6.5 Medium
-
jeff starr user submitted posts
User Submitted Posts < 20240516 - Admin+ Stored XSS
CVE-2024-5002
4.8 Medium
-
plugin-planet dashboard widgets suite
Dashboard Widgets Suite <= 3.4.3 - Reflected Cross-Site Scripting
CVE-2024-0979
6.1 Medium
-
jeff starr simple ajax chat
Simple Ajax Chat < 20240412 - Admin+ Stored XSS
CVE-2024-2470
5.4 Medium
-
jeff starr simple ajax chat
Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS
CVE-2024-1983
7.1 High
-
jeff starr user submitted posts – enable users to submit posts from the front end, plugin-planet user submitted posts +1 more
WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload
CVE-2023-45603
9.0 Critical
-
jeff starr dashboard widgets suite, plugin-planet dashboard widget suite +1 more
WordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-49743
5.9 Medium
-
plugin-planet theme switcha, specialk theme switcha – easily switch themes for development and testing +1 more
Theme Switcha <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-5614
6.4 Medium
-
plugin-planet simple download counter
The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2023-4838
6.4 Medium
-
plugin-planet user submitted posts, specialk user submitted posts – enable users to submit posts from the front end +1 more
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-4779
6.4 Medium
-
plugin-planet user submitted posts, specialk user submitted posts – enable users to submit posts from the front end +1 more
User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'
CVE-2023-4308
7.2 High
-
plugin-planet user submitted posts, specialk user submitted posts – enable users to submit posts from the front end +1 more
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload
CVE-2019-25138
9.8 Critical
-
jeff starr dashboard widgets suite, plugin-planet dashboard widget suite +1 more
WordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-26517
5.9 Medium
-
jeff starr simple ajax chat (wordpress plugin), plugin-planet simple ajax chat +1 more
WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-27850
5.4 Medium
-
jeff starr simple ajax chat (wordpress plugin), plugin-planet simple ajax chat +1 more
WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability
CVE-2022-27849
5.3 Medium
-
plugin-planet blackhole for bad bots
Blackhole for Bad Bots < 3.3.2 - Arbitrary IP Address Blocking via IP Spoofing
CVE-2022-1165
9.1 Critical
-
plugin-planet simple ajax chat, jeff starr simple ajax chat (wordpress plugin) +1 more
WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
CVE-2022-25610
3.4 Low
-
plugin-planet contact form x, fedoraproject fedora, jeff starr contact form x (wordpress plugin) +2 more
WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability
CVE-2022-25601
4.7 Medium
-
jeff starr prismatic
Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS)
CVE-2021-24409
6.1 Medium
-
jeff starr prismatic
Prismatic < 2.8 - Contributor+ Stored XSS
CVE-2021-24408
5.4 Medium
-
plugin-planet user submitted posts
The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted...
CVE-2016-11001
6.1 Medium