WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
clearfy
Published
2025-04-11
Title
Webcraftic Clearfy – WordPress optimization plugin < 2.3.2 - Cross-Site Request Forgery to Clear Cache
Slug
clearfy
Published
2026-01-08
Title
Clearfy < 2.4.1 - Cross-Site Request Forgery to Update Notification Tampering
Slug
clearfy
Published
2026-04-27
Title
Multiple Plugins - Unauthenticated Stored XSS via Minify Library
Slug
clearfy
Published
2026-07-24
Title
Clearfy < 2.4.3 - Admin+ PHP Object Injection via Settings Import
Slug
clearfy
Published
2026-07-27
Title
Clearfy < 2.4.3 - Open Redirect via Cyrlitera 404 Handler
Slug
clearfy
Published
2026-07-27
Title
Clearfy < 2.4.3 - Subscriber+ Sensitive Information Disclosure via Factory Page-Action Dispatcher
Slug
clearout-email-validator
Published
2025-03-27
Title
Clearout Email Validator < 3.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
clearsale-total
Published
2026-06-23
Title
ClearSale Total <= 3.4.2 - Unauthenticated SQL Injection
Slug
cleeng
Published
2014-08-01
Title
cleeng <= 2.3.2 - XSS in ZeroClipboard
Slug
clerkio
Published
2022-11-10
Title
Clerk < 4.0.0 - Authentication Bypass and API Keys Disclosure
Slug
clever-fox
Published
2024-06-06
Title
Clever Fox – One Click Website Importer by Nayra Themes < 25.2.1 - Missing Authorization to arbitrary theme activation via clever-fox-activate-theme
Slug
clever-fox
Published
2024-06-06
Title
Clever Fox < 25.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
clever-mega-menu
Published
2026-07-21
Title
Clever Mega Menu for Visual Composer <= 1.0.1 - Subscriber+ Menu Item Meta Update via save_clever_menu_item
Slug
clevernode-related-content
Published
2024-12-11
Title
CleverNode Related Content < 1.1.6 - Reflected Cross-Site Scripting
Slug
cleverreach-wc
Published
2025-04-04
Title
Official CleverReach Plugin for WooCommerce < 3.4.7 - Settings Update via CSRF
Slug
cleverreach-wp
Published
2025-08-05
Title
CleverReach WP < 1.5.21 - Unauthenticated SQL Injection via title
Slug
cleverreach-wp
Published
2026-01-15
Title
CleverReach® WP < 1.5.22 - Unauthenticated SQL Injection via id
Slug
cleverwise-daily-quotes
Published
2023-08-17
Title
Cleverwise Daily Quotes <= 3.2 - Stored XSS via CSRF
Slug
clicface-trombi
Published
2025-02-28
Title
Clicface Trombi <= 2.08 - Authenticated (Contributor+) Stored Cross-Site Scripting via nom Parameter
Slug
click-datos-lopd
Published
2023-10-16
Title
Protección de Datos RGPD <= 3.1.0 - Reflected XSS
Slug
click-pledge-connect
Published
2025-04-09
Title
Click & Pledge Connect Plugin < 2.24120000-WP6.7.1-WP6.6.1 - Unauthenticated SQL Injection
Slug
click-pledge-connect
Published
2025-07-01
Title
Click & Pledge Connect < 25.07000000-WP6.8.1 - Unauthenticated SQL Injection to Privilege Escalation
Slug
click-pledge-wpjobboard
Published
2025-07-11
Title
WordPress-WPJobBoard < 25.09000000-WP6.8.2-JB5.12.0 - Unauthenticated SQLi
Slug
click-to-call-or-chat-buttons
Published
2023-02-15
Title
Click to Call or Chat Buttons < 1.5.0 - Admin+ Stored XSS
Slug
click-to-chat-for-whatsapp
Published
2022-12-21
Title
Click to Chat < 3.18.1 - Contributor+ Stored XSS