WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
category-page-icons
Published
2014-09-29
Title
Category Page Icons <= 0.9.1 - Arbitrary File Upload/Deletion via Path Traversal
Slug
category-post-list-widget
Published
2023-11-07
Title
Category Post List Widget <= 2.0 - Settings Update to Stored XSS via CSRF
Slug
category-post-shortcode
Published
2024-12-17
Title
Category Post Shortcode <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
category-post-slider
Published
2024-12-19
Title
Category Post Slider <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
category-posts
Published
2024-07-19
Title
Category Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSS
Slug
category-posts
Published
2024-12-17
Title
Category Posts Widget < 4.9.18 - Admin+ Stored XSS
Slug
category-posts
Published
2025-04-03
Title
Category Posts Widget < 4.9.20 - Admin+ Stored XSS
Slug
category-seo-meta-tags
Published
2023-10-17
Title
Category SEO Meta Tags <= 2.5 - Admin+ Stored XSS
Slug
category-seo-meta-tags
Published
2023-10-25
Title
Category SEO Meta Tags <= 2.5 - Cross-Site Request Forgery via csmt_admin_options
Slug
category-specific-rss-feed-menu
Published
2019-07-18
Title
Category Specific RSS feed Subscription <= 2.0 - Cross-Site Request Forgery (CSRF)
Slug
category-specific-rss-feed-menu
Published
2023-01-20
Title
Category Specific RSS feed Subscription < 2.2 - Settings Update via CSRF
Slug
category-specific-rss-feed-menu
Published
2023-04-19
Title
Category Specific RSS feed Subscription < 2.3 - Admin+ Stored XSS
Slug
category-widget
Published
2025-05-02
Title
Category Widget <= 2.0.2 - Reflected Cross-Site Scripting
Slug
category-wise-search
Published
2014-08-01
Title
Wise Search Widget 1.1 - s Parameter Reflected XSS
Slug
categorycustomfields
Published
2025-01-16
Title
Category Custom Fields <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
catfolders
Published
2025-09-10
Title
CatFolders – Tame Your WordPress Media Library by Category < 2.5.3 - Authenticated (Author+) SQL Injection via CSV Import
Slug
catfolders
Published
2025-11-30
Title
CatFolders < 2.5.4 - Missing Authorization
Slug
catholic-liturgical-calendar
Published
2014-08-01
Title
Catholic Liturgical Calendar Widget 0.0.1 - Title Field Stored XSS
Slug
cats-job-listings
Published
2025-02-17
Title
CATS Job Listings <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
causes
Published
2025-01-16
Title
Causes – Donation Plugin <= 1.0.01 - Reflected Cross-Site Scripting
Slug
caxton
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
caxton
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
caxton
Published
2024-07-10
Title
Caxton – Create Pro page layouts in Gutenberg <= 1.30.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cazamba
Published
2025-03-24
Title
Cazamba <= 1.2 - Reflected Cross-Site Scripting
Slug
cb-logo-slider
Published
2024-11-07
Title
Logo Slider < 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting