WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-product-type-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
custom-query-shortcode
Published
2025-08-24
Title
Custom Query Shortcode < 0.5.0 - Authenticated (Contributor+) Path Traversal via lens Parameter
Slug
custom-registration-and-login-forms-with-new-recaptcha
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
custom-registration-and-login-forms-with-new-recaptcha
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
custom-registration-form-builder-with-submission-manager
Published
2017-10-02
Title
RegistrationMagic-Custom Registration Forms <= 3.7.9.2 - Unauthenticated PHP Object Injection
Slug
custom-registration-form-builder-with-submission-manager
Published
2017-12-10
Title
RegistrationMagic - Custom Registration Forms < 3.8.0.9 - Authenticated SQL Injection
Slug
custom-registration-form-builder-with-submission-manager
Published
2017-12-10
Title
RegistrationMagic - Custom Registration Forms < 3.8.0.9 - Authenticated Reflected XSS
Slug
custom-registration-form-builder-with-submission-manager
Published
2020-01-30
Title
Registration Magic < 4.6.0.3 - Multiple Cross-Site Scripting (XSS)
Slug
custom-registration-form-builder-with-submission-manager
Published
2020-01-30
Title
Registration Magic < 4.6.0.3 - Authenticated SQL Injection via Form_id
Slug
custom-registration-form-builder-with-submission-manager
Published
2020-03-05
Title
RegistrationMagic – Custom Registration Forms and User Login < 4.6.0.4 - Multiple Critical Issues
Slug
custom-registration-form-builder-with-submission-manager
Published
2021-12-08
Title
RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection
Slug
custom-registration-form-builder-with-submission-manager
Published
2021-12-08
Title
Registration Magic < 5.0.1.8 - Authentication Bypass
Slug
custom-registration-form-builder-with-submission-manager
Published
2021-12-27
Title
Registration Magic < 5.0.1.9 - Reflected Cross-Site Scripting
Slug
custom-registration-form-builder-with-submission-manager
Published
2021-12-28
Title
Registration Magic < 5.0.1.9 - Reflected Cross-Site Scripting
Slug
custom-registration-form-builder-with-submission-manager
Published
2022-02-07
Title
RegistrationMagic < 5.0.2.2 - Admin+ SQL Injection
Slug
custom-registration-form-builder-with-submission-manager
Published
2023-02-17
Title
RegistrationMagic < 5.1.9.3 - Form Deletion via CSRF
Slug
custom-registration-form-builder-with-submission-manager
Published
2023-05-15
Title
RegistrationMagic < 5.2.1.1 - Unauthenticated Authentication Bypass
Slug
custom-registration-form-builder-with-submission-manager
Published
2023-05-12
Title
RegistrationMagic < 5.2.1.0 - Admin+ Arbitrary Password Update via IDOR
Slug
custom-registration-form-builder-with-submission-manager
Published
2023-10-07
Title
RegistrationMagic < 5.2.4.2 - Reflected Cross-Site Scripting via section_id
Slug
custom-registration-form-builder-with-submission-manager
Published
2023-11-27
Title
RegistrationMagic < 5.2.3.0 - Cross-Site Request Forgery
Slug
custom-registration-form-builder-with-submission-manager
Published
2023-12-05
Title
RegistrationMagic < 5.2.3.1 - Missing Authorization
Slug
custom-registration-form-builder-with-submission-manager
Published
2023-12-27
Title
RegistrationMagic < 5.2.5.1 - Form Submission Limit Bypass
Slug
custom-registration-form-builder-with-submission-manager
Published
2023-12-27
Title
RegistrationMagic < 5.2.5.1 - IP Spoofing
Slug
custom-registration-form-builder-with-submission-manager
Published
2023-12-21
Title
RegistrationMagic Plugin < 5.2.4.6 - Authenticated(Administrator+) SQL Injection
Slug
custom-registration-form-builder-with-submission-manager
Published
2024-03-14
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 5.3.1.0 - Authenticated (Subscriber+) Privilege Escalation