Skip to contentSmub vulnerabilities
Products
- Easy Digital Downloads – Ecommerce Payments And Subscriptions Made Easy17
- Photo Gallery, Sliders, Proofing And Themes – Nextgen Gallery11
- Athemes Addons For Elementor8
- Charitable – Donation Plugin For Wordpress – Fundraising With Recurring Donations & More8
- All In One Seo – Powerful Seo Plugin To Boost Seo Rankings & Increase Traffic7
- Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More7
- Wpforms – Easy Form Builder For Wordpress – Contact Forms, Payment Forms, Surveys, & More6
- Custom Twitter Feeds – A Tweets Widget Or X Feed Widget5
- Sydney Toolbox5
- Exactmetrics – Google Analytics Dashboard For Wordpress (website Stats Plugin)4
- Wpforms – Ai Form Builder For Wordpress – Contact Forms, Payment Forms, Survey Form, Quiz & More4
- Wp Mail Logging4
- Feeds For Youtube (youtube Video, Channel, And Gallery Plugin)3
- Smash Balloon Social Photo Feed – Easy Social Feeds Plugin3
- Smash Balloon Social Post Feed – Simple Social Feeds For Wordpress3
- Userfeedback – Create Interactive Feedback Form, User Surveys, And Polls In Seconds3
- All In One Seo – Best Wordpress Seo Plugin – Easily Improve Seo Rankings & Increase Traffic2
- Contact Form & Smtp Plugin For Wordpress By Pirateforms2
- Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More2
- Easy Wp Smtp – Wordpress Smtp And Email Logs: Gmail, Office 365, Outlook, Custom Smtp, And More2
- Wordpress Gallery Plugin – Nextgen Gallery2
Newest
- smub wpforms – easy form builder for wordpress – contact forms, payment forms, surveys, & more, wordpress contact form drag and drop form builder +1 moreContact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price ManipulationCVE-2024-36495.3 Medium
- aioseo all in one seo, smub all in one seo – powerful seo plugin to boost seo rankings & increase traffic +1 moreAll in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-35546.4 Medium
- athemes sydney toolboxSydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable GalleryCVE-2024-32086.4 Medium
- imagely nextgen gallery, smub photo gallery, sliders, proofing and themes – nextgen gallery +1 moreWordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information DisclosureCVE-2024-3097EPSS 38.0%5.3 Medium
- awesomemotive easy digital downloads, smub easy digital downloads – ecommerce payments and subscriptions made easy +1 moreEasy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information ExposureCVE-2024-23025.3 Medium
- athemes sydney toolboxSydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _idCVE-2024-29366.4 Medium
- rafflepress, smub giveaways and contests by rafflepress – get more website traffic, email subscribers, and social followers +1 moreGiveaways and Contests by RafflePress <= 1.12.5 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-19357.2 High
- monsterinsights userfeedback, smub userfeedback – create interactive feedback form, user surveys, and polls in seconds +1 moreUser Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.0.13 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-09035.4 Medium
- smashballoon custom twitter feeds, smub custom twitter feeds – a tweets widget or x feed widget +1 moreCustom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options UpdateCVE-2024-0379Public exploit4.3 Medium
- athemes sydney toolboxSydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-14476.4 Medium
- awesomemotive easy digital downloads, smub easy digital downloads – ecommerce payments and subscriptions made easy +1 moreEasy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing optionsCVE-2024-06595.5 Medium
- awesomemotive easy digital downloads, easy digital downloads – sell digital files (ecommerce store & payments made easy), smub easy digital downloads – sell digital files (ecommerce store & payments made easy) +2 moreWordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)CVE-2023-516846.5 Medium
- enviragallery envira gallery, smub envira gallery – image photo gallery, albums, video gallery, slideshows & more +1 moreEnvira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_imagesCVE-2023-67424.3 Medium
- smash balloon custom twitter feeds – a tweets widget or x feed widget, smashballoon custom twitter feeds +1 moreWordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-521364.3 Medium
- imagely nextgen gallery, wordpress gallery plugin – nextgen gallery +1 moreWordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-483284.3 Medium
- seedprod rafflepress, smub giveaways and contests by rafflepress – get more website traffic, email subscribers, and social followers +1 moreGiveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-50496.4 Medium
- smashballoon feeds for youtube, smub feeds for youtube (youtube video, channel, and gallery plugin) +1 moreFeeds for YouTube <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-48416.4 Medium
- wpcharitable charitable, smub charitable – donation plugin for wordpress – fundraising with recurring donations & more +1 moreDonation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege EscalationCVE-2023-44049.8 Critical
- awesomemotive wp mail loggingWP Mail Logging <= 1.11.1 - Unauthenticated Stored Cross-Site Scripting via EmailCVE-2023-30817.2 High
- wpforms contact form, smub contact form & smtp plugin for wordpress by pirateforms +1 moreContact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injectionCVE-2019-251457.2 High
- wp-ecommerce easy wp smtp, smub easy wp smtp – wordpress smtp and email logs: gmail, office 365, outlook, custom smtp, and more +1 moreEasy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options UpdateCVE-2019-251419.8 Critical
- imagely nextgen gallery, wordpress gallery plugin – nextgen gallery +1 moreWordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-384684.3 Medium
- aioseo all in one seo, smub all in one seo – powerful seo plugin to boost seo rankings & increase traffic +1 moreAll in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2023-05866.4 Medium
- aioseo all in one seo, smub all in one seo – powerful seo plugin to boost seo rankings & increase traffic +1 moreAll in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-05854.4 Medium
- enviragallery envira gallery, smub gallery plugin for wordpress – envira photo gallery +1 moreEnvira Gallery Lite < 1.8.4.7 - Reflected Cross-Site ScriptingCVE-2022-21906.1 Medium
- aioseo all in one seo, smub all in one seo – best wordpress seo plugin – easily improve seo rankings & increase traffic +1 moreAll In One SEO < 4.1.5.3 - Authenticated SQL InjectionCVE-2021-250376.5 Medium
- aioseo all in one seo, smub all in one seo – best wordpress seo plugin – easily improve seo rankings & increase traffic +1 moreAll In One SEO < 4.1.5.3 - Authenticated Privilege EscalationCVE-2021-250368.8 High