WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
change-wc-price-title
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
change-wp-admin-login
Published
2022-05-09
Title
Change wp-admin Login < 1.1.0 - Unauthenticated Arbitrary Settings Update
Slug
change-wp-admin-login
Published
2023-07-27
Title
Change WP Admin < 1.1.4 - Secret Login Page Disclosure
Slug
change-wp-admin-login
Published
2025-10-09
Title
All In One Login 2.0.8 - IP Sooofing to Protection Mechanism Bypass
Slug
change-wp-page-permalinks
Published
2026-01-08
Title
WP Page Permalink Extension <= 1.5.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Rewrite Rules Flush
Slug
change-wp-url
Published
2026-01-27
Title
Change WP URL <= 1.0 - Cross-Site Request Forgery to Settings Update
Slug
changyan
Published
2024-12-14
Title
畅言评论系统 <= 2.0.5 - Missing Authorization
Slug
chapa-payment-gateway-for-woocommerce
Published
2026-02-03
Title
Chapa Payment Gateway Plugin for WooCommerce <= 1.0.3 - Unauthenticated Sensitive Information Exposure
Slug
chaport
Published
2025-06-05
Title
Chaport < 1.1.7 - Admin+ Stored XSS
Slug
charitable
Published
2018-05-16
Title
Charitable <= 1.5.13 - Unauthorised Access
Slug
charitable
Published
2021-07-21
Title
Charitable – Donation Plugin < 1.6.51 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
charitable
Published
2021-07-21
Title
Charitable - Donation Plugin < 1.6.51 - Unauthenticated Stored Cross-Site Scripting
Slug
charitable
Published
2023-04-19
Title
Charitable < 1.7.0.11 - Reflected XSS
Slug
charitable
Published
2023-08-22
Title
Donation Forms by Charitable < 1.7.0.13 - Unauthenticated Privilege Escalation
Slug
charitable
Published
2023-10-11
Title
Charitable < 1.7.0.14 - Authenticated(Contributor+) Stored Cross-Site Scripting
Slug
charitable
Published
2024-07-04
Title
Charitable < 1.8.1.8 - Missing Authorization to Unauthorized Donation
Slug
charitable
Published
2024-07-04
Title
Charitable < 1.8.1.8 - Missing Authorization via ajax_license_check()
Slug
charitable
Published
2024-09-23
Title
Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress < 1.8.1.15 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation
Slug
charitable
Published
2024-11-08
Title
Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More < 1.8.3.1 - Reflected Cross-Site Scripting
Slug
charitable
Published
2025-03-26
Title
Charitable < 1.8.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
charitable
Published
2025-05-07
Title
Charitable < 1.8.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
charitable
Published
2025-06-25
Title
Charitable < 1.8.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings
Slug
charitable
Published
2025-10-24
Title
Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More < 1.8.8.5 - Authenticated (Subscriber+) SQL Injection
Slug
charity-addon-for-elementor
Published
2024-09-24
Title
Charity Addon for Elementor < 1.3.2 - Contributor+ Stored XSS
Slug
charity-addon-for-elementor
Published
2024-11-08
Title
Charity Addon for Elementor < 1.3.3 - Contributor+ Stored XSS