WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
catch-themes-demo-import
Published
2021-10-21
Title
Catch Themes Demo Import < 1.8 - Admin+ Arbitrary File Upload
Slug
catch-themes-demo-import
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-themes-demo-import
Published
2022-02-07
Title
Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution
Slug
catch-under-construction
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-web-tools
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-web-tools
Published
2022-01-24
Title
Catch Web Tools < 2.7.1 - Subscriber+ Arbitrary Catch IDs Activation/Deactivation
Slug
catchers-helpdesk
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
categories-gallery
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
categories-gallery-woocommerce
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
categorify
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Cross-Site Request Forgery via categorifyAjaxDeleteCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Missing Authorization in categorifyAjaxAddCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Missing Authorization in categorifyAjaxUpdateFolderPosition
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Cross-Site Request Forgery via categorifyAjaxRenameCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Cross-Site Request Forgery via categorifyAjaxUpdateFolderPosition
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Cross-Site Request Forgery via categorifyAjaxAddCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Missing Authorization in categorifyAjaxClearCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Cross-Site Request Forgery via categorifyAjaxClearCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Missing Authorization in categorifyAjaxDeleteCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Missing Authorization in categorifyAjaxRenameCategory
Slug
categorify
Published
2025-09-08
Title
Categorify <= 1.0.7.5 - Missing Authorization
Slug
categorized-gallery
Published
2025-02-18
Title
Categorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection
Slug
category-ajax-filter
Published
2024-11-08
Title
Category Ajax Filter < 2.8.3 - Unauthenticated Local File Inclusion
Slug
category-and-product-woocommerce-tabs
Published
2025-11-17
Title
Category and Product Woocommerce Tabs <= 1.0 - Authenticated (Contributor+) Local File Inclusion
Slug
category-d3-tree
Published
2025-01-16
Title
Category D3 Tree <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting