WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
chamber-dashboard-business-directory
Published
2025-01-15
Title
Chamber Dashboard Business Directory < 3.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
chamber-dashboard-business-directory
Published
2025-01-16
Title
Chamber Dashboard Business Directory < 3.3.11 - Missing Authorization
Slug
chamber-dashboard-business-directory
Published
2025-04-04
Title
Chamber Dashboard Business Directory <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
chamber-dashboard-business-directory
Published
2025-11-24
Title
Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information Export
Slug
chameleon
Published
2022-11-17
Title
Chameleon < 1.4.4 - Admin+ Stored XSS
Slug
chameleon-css
Published
2021-10-07
Title
Chameleon CSS <= 1.2 - Subscriber+ SQL Injection
Slug
chameleon-jobs
Published
2024-11-18
Title
Chameleoni Jobs < 2.5.5 - Reflected Cross-Site Scripting
Slug
change-default-login-logo-url-and-title
Published
2024-03-29
Title
Change default login logo,url and title <= 2.0 - Cross-Site Request Forgery
Slug
change-login-logo
Published
2020-08-19
Title
Change WordPress Login Logo < 1.1.5 - Authenticated Stored Cross-Site Scripting
Slug
change-memory-limit
Published
2024-03-04
Title
Change Memory Limit <= 1.0 - Missing Authorization via admin_logic()
Slug
change-prices-with-time-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
change-prices-with-time-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
change-table-prefix
Published
2024-02-20
Title
Change Table Prefix <= 2.0 - Cross-Site Request Forgery via change_prefix_form
Slug
change-uploaded-file-permissions
Published
2022-05-23
Title
Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF
Slug
change-wc-price-title
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
change-wc-price-title
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
change-wp-admin-login
Published
2022-05-09
Title
Change wp-admin Login < 1.1.0 - Unauthenticated Arbitrary Settings Update
Slug
change-wp-admin-login
Published
2023-07-27
Title
Change WP Admin < 1.1.4 - Secret Login Page Disclosure
Slug
change-wp-admin-login
Published
2025-10-09
Title
All In One Login 2.0.8 - IP Sooofing to Protection Mechanism Bypass
Slug
change-wp-page-permalinks
Published
2026-01-08
Title
WP Page Permalink Extension <= 1.5.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Rewrite Rules Flush
Slug
change-wp-url
Published
2026-01-27
Title
Change WP URL <= 1.0 - Cross-Site Request Forgery to Settings Update
Slug
changyan
Published
2024-12-14
Title
畅言评论系统 <= 2.0.5 - Missing Authorization
Slug
chapa-payment-gateway-for-woocommerce
Published
2026-02-03
Title
Chapa Payment Gateway Plugin for WooCommerce <= 1.0.3 - Unauthenticated Sensitive Information Exposure
Slug
chaport
Published
2025-06-05
Title
Chaport < 1.1.7 - Admin+ Stored XSS
Slug
charitable
Published
2018-05-16
Title
Charitable <= 1.5.13 - Unauthorised Access