WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-07-20
Title
RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-28
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.9 - Authentication Bypass
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-31
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.9 - Unauthenticated Stored Cross-Site Scripting
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-24
Title
RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-18
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.8 - Unauthenticated PHP Object Injection
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-31
Title
RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-31
Title
RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-31
Title
RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-09-03
Title
RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation
Slug
custom-related-posts
Published
2025-01-31
Title
Custom Related Posts < 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updates
Slug
custom-related-posts
Published
2025-04-22
Title
Custom Related Posts < 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-related-posts
Published
2025-12-25
Title
Custom Related Posts < 1.8.1 - Unauthenticated Information Exposure
Slug
custom-script-integration
Published
2025-03-24
Title
Custom Script Integration <= 2.1 - Cross-Site Request Forgery
Slug
custom-scroll-bar-designer
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
custom-search-plugin
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
custom-searchable-data-entry-system
Published
2020-03-07
Title
Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Data Modification and Deletion
Slug
custom-settings
Published
2023-02-20
Title
WordPress Custom Settings <= 1.0 - Admin+ Stored XSS
Slug
custom-share-buttons-with-floating-sidebar
Published
2022-05-26
Title
Custom Share Buttons with Floating Sidebar < 4.2 - Admin+ Stored XSS
Slug
custom-shortcode-sidebars
Published
2024-11-23
Title
Custom Shortcode Sidebars <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
custom-sidebars
Published
2015-01-13
Title
Custom Sidebars 2.1.0.1 - XSS
Slug
custom-sidebars
Published
2017-11-07
Title
Custom Sidebars < 3.1.0 - CSRF
Slug
custom-sidebars
Published
2017-06-29
Title
Custom Sidebars < 3.0.8.1 - CSRF
Slug
custom-sidebars-by-proteusthemes
Published
2025-12-04
Title
Custom Sidebars by ProteusThemes < 1.0.4 - Cross-Site Request Forgery
Slug
custom-simple-rss
Published
2019-07-27
Title
Custom Simple RSS <= 2.0.6 - CSRF
Slug
custom-skins-contact-form-7
Published
2024-12-11
Title
Custom Skins Contact Form 7 <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Update and Skin Creation