WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
child-theme-wizard
Published
2026-06-26
Title
Child Theme Wizard < 1.5 - Cross-Site Request Forgery
Slug
child-themes
Published
2025-08-21
Title
Child Themes <= 1.0.1 - Reflected Cross-Site Scripting
Slug
child-themes-helper
Published
2025-02-03
Title
Child Themes Helper <= 2.2.7 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
chilexpress-oficial
Published
2023-05-30
Title
Chilexpress Woo Oficial <= 1.2.9 - Reflected XSS
Slug
chillpay-payment-gateway
Published
2025-04-09
Title
ChillPay WooCommerce < 2.6.0 - Stored XSS via CSRF
Slug
choice-payment-gateway-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
choice-payment-gateway-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
choose-user-role-at-registration
Published
2026-09-15
Title
Choose User Role at Registration for WooCommerce < 1.3.3 - Unauthenticated Privilege Escalation via Registration Role Request
Slug
chopslider
Published
2020-05-09
Title
Chopslider <= 3.4 - Unauthenticated Blind SQL Injection
Slug
chordpress
Published
2025-06-19
Title
Lewe ChordPress <= 4.0.1 - Stored XSS via CSRF
Slug
chp-ads-block-detector
Published
2023-06-15
Title
CHP Ads Block Detector < 3.9.8 - Plugin Settings Update via CSRF
Slug
chp-ads-block-detector
Published
2023-06-15
Title
CHP Ads Block Detector < 3.9.8 - Subscriber+ Plugin Settings Update
Slug
chp-ads-block-detector
Published
2023-06-15
Title
CHP Ads Block Detector < 3.9.8 - Subscriber+ Stored Cross-Site Scripting
Slug
christian-science-bible-lesson-subjects
Published
2024-11-08
Title
Christian Science Bible Lesson Subjects < 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
christmas-greetings
Published
2024-03-28
Title
Christmas Greetings <= 1.2.5 - Reflected Cross-Site Scripting
Slug
christmas-panda
Published
2025-03-27
Title
Christmas Panda < 1.1.0 - Cross-Site Request Forgery
Slug
christmasify
Published
2024-08-09
Title
Christmasify! < 1.5.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
chronoforms
Published
2023-03-14
Title
Chronoforms <= 7.0.9 - CSRF
Slug
church-admin
Published
2014-08-01
Title
Church Admin <= 0.4.2 - Cross-Site Scripting (XSS)
Slug
church-admin
Published
2015-05-19
Title
Church Admin < 0.810 - Stored Cross-Site Scripting (XSS)
Slug
church-admin
Published
2017-12-28
Title
Church Admin 0.33.2.1 - Unauthenticated Directory Traversal
Slug
church-admin
Published
2018-02-14
Title
Church Admin < 1.2550 - CSRF
Slug
church-admin
Published
2022-03-07
Title
Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure
Slug
church-admin
Published
2023-06-13
Title
Church Admin < 3.7.30 - Reflected XSS
Slug
church-admin
Published
2023-08-16
Title
Church Admin < 3.7.6 - Reflected XSS