WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
chained-quiz
Published
2022-12-02
Title
Chained Quiz < 1.3.2.1 - Multiple Reflected Cross-Site Scripting
Slug
chained-quiz
Published
2023-02-06
Title
Chained Quiz < 1.3.2.6 - Admin+ Stored XSS
Slug
chained-quiz
Published
2024-06-28
Title
Chained Quiz < 1.3.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
chained-quiz
Published
2024-07-09
Title
Chained Quiz < 1.3.2.9 - Missing Authorization
Slug
chained-quiz
Published
2025-01-24
Title
Chained Quiz < 1.3.3 - Authenticated (Admin+) Server-Side Request Forgery
Slug
chained-quiz
Published
2025-09-17
Title
Chained Quiz < 1.3.6 - Unauthenticated Insecure Direct Object Reference via Cookie
Slug
chakra-test
Published
2025-12-23
Title
Chakra test < 1.0.2 - Missing Authorization
Slug
chalet-montagne-com-tools
Published
2025-01-23
Title
Chalet Montagne Com Tools <= 2.7.8 - Reflected XSS
Slug
chamber-dashboard-business-directory
Published
2020-08-31
Title
Chamber Dashboard Business Directory < 3.3.1 - Authenticated Stored Cross-Site Scripting
Slug
chamber-dashboard-business-directory
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
chamber-dashboard-business-directory
Published
2025-01-15
Title
Chamber Dashboard Business Directory < 3.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
chamber-dashboard-business-directory
Published
2025-01-16
Title
Chamber Dashboard Business Directory < 3.3.11 - Missing Authorization
Slug
chamber-dashboard-business-directory
Published
2025-04-04
Title
Chamber Dashboard Business Directory <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
chamber-dashboard-business-directory
Published
2025-11-24
Title
Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information Export
Slug
chameleon
Published
2022-11-17
Title
Chameleon < 1.4.4 - Admin+ Stored XSS
Slug
chameleon-css
Published
2021-10-07
Title
Chameleon CSS <= 1.2 - Subscriber+ SQL Injection
Slug
chameleon-jobs
Published
2024-11-18
Title
Chameleoni Jobs < 2.5.5 - Reflected Cross-Site Scripting
Slug
change-default-login-logo-url-and-title
Published
2024-03-29
Title
Change default login logo,url and title <= 2.0 - Cross-Site Request Forgery
Slug
change-login-logo
Published
2020-08-19
Title
Change WordPress Login Logo < 1.1.5 - Authenticated Stored Cross-Site Scripting
Slug
change-memory-limit
Published
2024-03-04
Title
Change Memory Limit <= 1.0 - Missing Authorization via admin_logic()
Slug
change-prices-with-time-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
change-prices-with-time-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
change-table-prefix
Published
2024-02-20
Title
Change Table Prefix <= 2.0 - Cross-Site Request Forgery via change_prefix_form
Slug
change-uploaded-file-permissions
Published
2022-05-23
Title
Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF
Slug
change-wc-price-title
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius