Plugin icon

Convert Plus

convertplug

Vulnerabilities:

6

Last Updated:

April 2, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-02-11
Title
Popup Plugin For WordPress - ConvertPlus < 3.5.31 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Fixed in
Fixed in 3.5.31
CVSS
8.1 (high)
Published
2024-05-15
Title
ConvertPlus < 3.5.26.1 - Authenticated (Contributor+) PHP Object Injection
Fixed in
Fixed in 3.5.26.1
CVSS
8.8 (high)
Published
2024-05-03
Title
ConvertPlug < 3.5.26 - Authenticated (Contributor+) PHP Object Injection
Fixed in
Fixed in 3.5.26
CVSS
8.8 (high)
Published
2024-05-03
Title
ConvertPlug < 3.5.26 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Fixed in
Fixed in 3.5.26
CVSS
5.4 (medium)
Published
2019-06-07
Title
ConvertPlus <= 3.4.4 - Multiple Issues
Fixed in
Fixed in 3.4.5
CVSS
7.5 (high)
Published
2019-05-29
Title
ConvertPlus <= 3.4.2 - Unauthenticated Arbitrary User Role Creation
Fixed in
Fixed in 3.4.3
CVSS
n/a