WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
customizer-export-import
Published
2023-04-17
Title
Customizer Export/Import < 0.9.6 - Admin+ PHP Object Injection
Slug
customizer-export-import
Published
2024-09-06
Title
Customizer Export/Import < 0.9.7.1 - Authenticated (Admin+) Arbitrary File Upload via Customization Settings Import
Slug
customizer-login-page
Published
2025-11-08
Title
Login Page Customizer – Customizer Login Page, Admin Page, Custom Design < 2.1.2 - Missing Authorization
Slug
cute-news-ticker
Published
2025-12-05
Title
Cute News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute
Slug
cwd-3d-image-gallery
Published
2024-10-21
Title
CWD 3D Image Gallery <= 1.0 - Reflected Cross-Site Scripting
Slug
cwd-stealth-links
Published
2025-02-03
Title
CWD – Stealth Links <= 1.3 - Unauthenticated SQL Injection
Slug
cwicly
Published
2024-02-14
Title
Cwicly < 1.4.0.3 - Authenticated (Contributor+) Remote Code Execution
Slug
cww-companion
Published
2024-03-12
Title
CWW Companion < 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cww-companion
Published
2025-12-15
Title
CWW Companion < 1.3.3 - Cross-Site Request Forgery
Slug
cxc-sawa
Published
2025-03-19
Title
Management-screen-droptiles <= 1.0 - Reflected Cross-Site Scripting
Slug
cyan-backup
Published
2024-11-11
Title
CYAN Backup < 2.5.4 - Authenticated (Admin+) Arbitrary File Download
Slug
cyan-backup
Published
2024-10-08
Title
CYAN Backup < 2.5.3 - Admin+ Stored XSS via General Settings
Slug
cyan-backup
Published
2024-10-08
Title
CYAN Backup < 2.5.3 - Admin+ Stored XSS via Remote Storage Settings
Slug
cyan-backup
Published
2025-11-07
Title
CYAN Backup < 2.5.5 - Authenticated (Admin+) Arbitrary File Deletion
Slug
cyber-new-slider
Published
2025-01-16
Title
Cyber Slider <= 1.1 - Reflected Cross-Site Scripting
Slug
cybersoldier
Published
2021-11-23
Title
Cybersoldier < 1.7.0 - Admin+ Stored Cross-Site Scripting
Slug
cyberus-key
Published
2023-03-20
Title
Cyberus Key < 1.1 - Admin+ Stored XSS
Slug
cyklodev-wp-notify
Published
2022-11-07
Title
Cyklodev WP Notify < 1.3.0 - Admin+ Stored XSS
Slug
cyr3lat
Published
2023-04-13
Title
Cyr to Lat < 3.7 - Editor+ SQL Injection
Slug
cyrlitera
Published
2025-06-27
Title
Cyrlitera < 1.3.1 - Cross-Site Request Forgery
Slug
cysteme-finder
Published
2016-08-24
Title
CYSTEME Finder <= 1.3 - Unauthenticated LFI and Unauthenticated File Upload
Slug
cz-loan-management
Published
2024-07-09
Title
CZ Loan Management <= 1.1 - Unauthenticated SQLi
Slug
czater
Published
2025-04-09
Title
Czater.pl – live chat i telefon <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting