WPScan
How it works
Pricing
Vulnerabilities
WordPress
Plugins
Themes
Stats
Submit vulnerabilities
For developers
Status
API details
CLI scanner
Contact
Login
Get started
WPScan
How it works
Pricing
Vulnerabilities
WordPress
Plugins
Themes
Stats
Submit vulnerabilities
For developers
Status
API details
CLI scanner
Contact
Login
Get started
WordPress Plugin Vulnerabilities
Cool Timeline
2022-04-12
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Fixed in version 2.4
2020-09-16
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Fixed in version 2.0.3
Fixed in version 2.4Fixed in version 2.4