WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
category-featured-images-extended
Published
2025-09-22
Title
Category Featured Images Extended <= 1.52 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
category-grid-view-gallery
Published
2014-08-01
Title
Category Grid View Gallery 0.1.1 - Shell Upload
Slug
category-grid-view-gallery
Published
2014-08-01
Title
Category Grid View Gallery 2.3.1 - CatGridPost.php ID Parameter XSS
Slug
category-icon
Published
2024-10-11
Title
Category Icon < 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
category-icon
Published
2025-04-03
Title
Category Icon < 1.0.2 - Author+ Arbitrary File Download
Slug
category-icon
Published
2025-06-03
Title
Category Icon < 1.0.2 - Author+ XML External Entity Injection
Slug
category-icon
Published
2025-12-25
Title
Category Icon < 1.0.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
category-image
Published
2026-02-10
Title
Category Image <= 2.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'tag-image' Parameter
Slug
category-list-portfolio-page
Published
2014-08-01
Title
Category List Portfolio Page 0.9 - Shell Upload
Slug
category-page-icons
Published
2014-09-29
Title
Category Page Icons <= 0.9.1 - Arbitrary File Upload/Deletion via Path Traversal
Slug
category-post-list-widget
Published
2023-11-07
Title
Category Post List Widget <= 2.0 - Settings Update to Stored XSS via CSRF
Slug
category-post-shortcode
Published
2024-12-17
Title
Category Post Shortcode <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
category-post-slider
Published
2024-12-19
Title
Category Post Slider <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
category-posts
Published
2024-07-19
Title
Category Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSS
Slug
category-posts
Published
2024-12-17
Title
Category Posts Widget < 4.9.18 - Admin+ Stored XSS
Slug
category-posts
Published
2025-04-03
Title
Category Posts Widget < 4.9.20 - Admin+ Stored XSS
Slug
category-seo-meta-tags
Published
2023-10-17
Title
Category SEO Meta Tags <= 2.5 - Admin+ Stored XSS
Slug
category-seo-meta-tags
Published
2023-10-25
Title
Category SEO Meta Tags <= 2.5 - Cross-Site Request Forgery via csmt_admin_options
Slug
category-specific-rss-feed-menu
Published
2019-07-18
Title
Category Specific RSS feed Subscription <= 2.0 - Cross-Site Request Forgery (CSRF)
Slug
category-specific-rss-feed-menu
Published
2023-01-20
Title
Category Specific RSS feed Subscription < 2.2 - Settings Update via CSRF
Slug
category-specific-rss-feed-menu
Published
2023-04-19
Title
Category Specific RSS feed Subscription < 2.3 - Admin+ Stored XSS
Slug
category-widget
Published
2025-05-02
Title
Category Widget <= 2.0.2 - Reflected Cross-Site Scripting
Slug
category-wise-search
Published
2014-08-01
Title
Wise Search Widget 1.1 - s Parameter Reflected XSS
Slug
categorycustomfields
Published
2025-01-16
Title
Category Custom Fields <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
catfolders
Published
2025-09-10
Title
CatFolders – Tame Your WordPress Media Library by Category < 2.5.3 - Authenticated (Author+) SQL Injection via CSV Import