WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
click-to-chat-for-whatsapp
Published
2022-12-21
Title
Click to Chat < 3.18.1 - Contributor+ Stored XSS
Slug
click-to-chat-for-whatsapp
Published
2024-04-17
Title
Click to Chat – HoliThemes < 4.0 - Contributor+ LFI
Slug
click-to-chat-for-whatsapp
Published
2025-06-13
Title
Click to Chat < 4.23 - Contributor+ Stored XSS via data-no_number Parameter
Slug
click-to-copy-grab-box
Published
2014-08-01
Title
click-to-copy-grab-box <= 0.1.1 - XSS in ZeroClipboard
Slug
click-to-top
Published
2020-08-19
Title
Click to Top < 1.2.8 - Authenticated Stored Cross-Site Scripting
Slug
click-to-tweet
Published
2023-10-02
Title
Click To Tweet <= 2.0.14 - Reflected XSS
Slug
click-to-tweet
Published
2023-09-05
Title
Click To Tweet <= 2.0.14 - Missing Authorization
Slug
click-to-tweet
Published
2024-01-30
Title
Click To Tweet <= 2.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
click-tweet
Published
2025-09-26
Title
Click & Tweet <= 0.8.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
clickbank-ads-clickbank-widget
Published
2015-05-06
Title
ClickBank Affiliate Ads < 1.35 - CSRF to Stored Cross-Site Scripting
Slug
clickbank-ads-clickbank-widget
Published
2015-05-06
Title
ClickBank Affiliate Ads < 1.35 - Admin+ Stored Cross-Site Scripting
Slug
clickbank-niche-storefronts
Published
2025-08-21
Title
Clickbank WordPress Plugin (Niche Storefront) <= 1.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
clickbank-storefront
Published
2024-12-05
Title
Clickbank WordPress Plugin (Storefront) <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
clickcease-click-fraud-protection
Published
2024-04-26
Title
ClickCease Click Fraud Protection < 3.2.8 - Cross-Site Request Forgery
Slug
clickcease-click-fraud-protection
Published
2024-05-06
Title
ClickCease Click Fraud Protection < 3.2.5 - Improper Authorization to sensitive information exposure via get_settings
Slug
clickdesigns
Published
2025-01-06
Title
ClickDesigns < 2.0.0 - Missing Authorization to API Key Modification or Removal
Slug
clickdesk-live-support-chat
Published
2014-08-01
Title
Click Desk Live Support Chat - Cross Site Scripting
Slug
clickdesk-live-support-chat-plugin
Published
2014-08-01
Title
ClickDesk <= 4.3 - Live Chat Widget Multiple Field XSS
Slug
clickervolt
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
clickfunnels
Published
2023-04-26
Title
ClickFunnels <= 3.1.1 - Contributor+ Stored XSS via Shortcode
Slug
clickfunnels
Published
2023-03-06
Title
clickfunnels <= 3.1.1 - Settings Update via CSRF
Slug
clicksend-contactform7
Published
2025-09-30
Title
SMS Contact Form 7 Notifications by ClickSend <= 1.4.0 - Missing Authorization
Slug
clicksend-lead-capture-form
Published
2024-12-06
Title
SMS for Lead Capture Forms <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
Slug
clicksold-wordpress-plugin
Published
2024-07-09
Title
Wordpress Clicksold IDX Plugin <= 1.90 - Admin+ XSS
Slug
clickwhale
Published
2025-01-10
Title
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages < 2.4.2 - Reflected Cross-Site Scripting