WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
clickwhale
Published
2025-01-06
Title
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages < 2.4.2 - Authenticated (Contributor+) SQL Injection
Slug
clickwhale
Published
2025-01-28
Title
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages < 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
clickwhale
Published
2025-02-13
Title
ClickWhale < 2.4.4 - Cross-Site Request Forgery
Slug
clickwhale
Published
2025-05-07
Title
ClickWhale < 2.4.7 - Missing Authorization
Slug
clickwhale
Published
2025-09-19
Title
ClickWhale < 2.5.1 - Authenticated (Admin+) SQL injection
Slug
clicky
Published
2016-07-29
Title
Clicky by Yoast <= 1.5 - Minor Security Improvements
Slug
clictracker
Published
2022-11-25
Title
WP Clictracker <= 1.0.5 - Admin+ Stored XSS
Slug
cliengo
Published
2024-07-08
Title
Cliengo - Chatbot < 3.0.3 - Missing Authorization to Authorized (Subscriber+) Chatbot Settings Update
Slug
cliengo
Published
2024-07-08
Title
Cliengo - Chatbot < 3.0.3 - Missing Authorization to Unauthenticated Chatbot Settings Update
Slug
cliengo
Published
2024-07-09
Title
Cliengo – Chatbot <= 3.0.1 - Cross-Site Request Forgery
Slug
cliengo
Published
2026-02-09
Title
Cliengo – Chatbot <= 3.0.4 - Missing Authorization
Slug
client-dash
Published
2023-11-29
Title
Client Dash <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
client-dash
Published
2024-04-25
Title
Client Dash <= 2.2.1 - Missing Authorization
Slug
client-documentation
Published
2025-02-13
Title
Simple Documentation <= 1.2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
client-portal-suitedash-login
Published
2023-09-03
Title
Client Portal : SuiteDash Direct Login < 1.8.0 - Admin+ Stored XSS
Slug
client-power-tools
Published
2024-10-21
Title
Client Power Tools Portal < 1.9.1 - Reflected Cross-Site Scripting
Slug
client-showcase
Published
2025-04-01
Title
Client Showcase <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
clients
Published
2024-12-06
Title
Clients <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
clients
Published
2025-04-02
Title
Clients <= 1.1.4 - Missing Authorization
Slug
clikstats
Published
2025-12-03
Title
Clik stats <= 0.8 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
clinicalwp-core
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
clinicalwp-core
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
clinicalwp-core
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
clink
Published
2025-03-24
Title
Clink <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
clinked-client-portal
Published
2025-01-29
Title
Clinked Client Portal < 1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting