WordPress Spreadsheet

WordPress Spreadsheet has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2008 and 2014; none of them are fixed as of September 2026. Their average CVSS score is 8.6, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 0 high. 2014 was the busiest year with 2 disclosures.

The most common weakness is SQL Injection, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

None of the 3 issues recorded for WordPress Spreadsheet have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2008.

2 independent researchers contributed these findings, most of them (2) reported by Ashiyane Digital Security Team.

Strategic Overview

Avg CVSSHigh

8.6/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all WordPress Spreadsheet vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2014-8363

WordPress Spreadsheet <= 0.62 - SQL Injection

Read the full analysis

Vulnerability Records

3 records


2014-08-06 00:00	WordPress Spreadsheet (wpSS) <= 0.62 - Cross-Site Scripting WordPress Spreadsheet <= 0.62	`CVE-2014-8364`	6.1 Medium	Ashiyane Digital Security Team	No
2014-08-06 00:00	WordPress Spreadsheet <= 0.62 - SQL Injection WordPress Spreadsheet <= 0.62	`CVE-2014-8363`	9.8 Critical	Ashiyane Digital Security Team	No
2008-04-22 00:00	WordPress Spreadsheet <= 0.6 - Unauthenticated SQL Injection WordPress Spreadsheet <= 0.6	`CVE-2008-1982`	9.8 Critical	1ten0.0net1	No

Showing 1–3 of 3 reports