Sheet2Site
Sheet2Site has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Sheet2Site has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Trương Hữu Phúc (truonghuuphuc). Sheet2Site is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.2.26.
CVE-2025-31762Sheet2Site <= 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Sheet2Site
Author
andreyazimov
Sheet2Site – Embed your Google Sheet into your WordPress website. We now bring the power of Sheet2Site to your existing website with Sheet2Site WordPress Plugin. Make any webpage dynamic, by adding your Sheet2Site page and manage it from Google Spreadsheets. Whether it’s a time table, product inventory, job listings, or anything else you can think of. Manage it with ease through Google Spreadsheet powered by Sheet2Site. 🖼 Templates: – Job Board – Affiliate – E-commerce – Table View – Events – Cities – Map View 🎁 Features: – Detailed pages (ex yourwebsite.com/page) – Filters and Multi Filters – Search – Amazon Affiliate ID – Mailchimp Integration – Multiple call to actions – Google Analytics – Google Form / Typeform Integration – Links tracking – Chat – Meta title and description – Custom HTML/Javascript ⭐️ Pro features: – Remove Sheet2Site branding and add your – Connect custom domain 🎬 Showcase (made with Sheet2Site): – View Showcase ❤️ Testimonials: – View Testimonials 💬 Have a question or a feedback? – Contact Support
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C