WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
clinked-client-portal
Published
2025-04-10
Title
Clinked Client Portal <= 1.10 - Reflected Cross-Site Scripting
Slug
clio-grow-form
Published
2023-02-20
Title
Clio Grow < 1.0.1 - Admin+ Stored XSS
Slug
clio-grow-form
Published
2024-10-03
Title
Clio Grow < 1.0.3 - Reflected Cross-Site Scripting
Slug
clio-grow-form
Published
2024-10-15
Title
Clio Grow < 1.0.3 - Reflected Cross-Site Scripting
Slug
clipart
Published
2024-12-07
Title
ClipArt <= 0.2 - Reflected XSS
Slug
cliplink
Published
2025-06-19
Title
ClipLink <= 1.1 - Cross-Site Request Forgery
Slug
clipr
Published
2022-03-30
Title
Clipr <= 1.2.3 - Admin+ Stored Cross-Site Scripting
Slug
cliptakes
Published
2025-01-22
Title
Cliptakes < 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cloak-front-end-email
Published
2023-01-11
Title
Cloak Front End Email < 1.9.2 - Contributor+ Stored XSS
Slug
cloak-front-end-email
Published
2025-04-17
Title
Cloak Front End Email < 1.9.6 - Missing Authorization
Slug
clock-in-portal
Published
2023-04-18
Title
Clock In Portal <= 2.2 - Holidays Deletion via CSRF
Slug
clock-in-portal
Published
2023-04-18
Title
Clock In Portal <= 2.2 - Designation Deletion via CSRF
Slug
clock-in-portal
Published
2023-04-18
Title
Clock In Portal <= 2.2 - Staff Deletion via CSRF
Slug
clockify-lite
Published
2025-04-01
Title
Clockinator Lite <= 1.0.7 - Missing Authorization
Slug
clockwork-two-factor-authentication
Published
2017-12-14
Title
Multiple Mediaburst/Clockwork Plugins - Cross-Site Scripting (XSS)
Slug
clotya-core
Published
2023-12-07
Title
Multiple Plugins by KlbTheme - Reflected Cross-Site Scripting
Slug
cloud
Published
2025-01-16
Title
WP Cloud <= 1.4.3 - Unauthenticated Arbitrary File Read
Slug
cloud-manager
Published
2023-04-12
Title
Cloud Manager <= 1.0 - Reflected XSS
Slug
cloud-search
Published
2025-10-16
Title
CloudSearch <= 3.0.0 - Cross-Site Request Forgery
Slug
cloud-sso-single-sign-on
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cloud-sso-single-sign-on
Published
2025-07-16
Title
Cloud SAML SSO - Single Sign On Login < 1.0.19 - Unauthenticated Local File Inclusion
Slug
cloud-sso-single-sign-on
Published
2025-09-05
Title
Cloud SAML SSO < 1.0.20 - Missing Authorization to Unauthenticated Settings Modification via set_organization_settings Action
Slug
cloud-sso-single-sign-on
Published
2025-09-05
Title
Cloud SAML SSO < 1.0.20 - Unauthenticated Identity Provider Deletion
Slug
cloudflare
Published
2016-03-28
Title
CloudFlare <= 1.3.20 - Authenticated Cross-Site Scripting (XSS)
Slug
cloudflare
Published
2017-08-26
Title
Multiple Plugins - Unauthenticated RCE via PHPUnit