WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
clock-in-portal
Published
2023-04-18
Title
Clock In Portal <= 2.2 - Designation Deletion via CSRF
Slug
clock-in-portal
Published
2023-04-18
Title
Clock In Portal <= 2.2 - Staff Deletion via CSRF
Slug
clockify-lite
Published
2025-04-01
Title
Clockinator Lite <= 1.0.7 - Missing Authorization
Slug
clockwork-two-factor-authentication
Published
2017-12-14
Title
Multiple Mediaburst/Clockwork Plugins - Cross-Site Scripting (XSS)
Slug
clotya-core
Published
2023-12-07
Title
Multiple Plugins by KlbTheme - Reflected Cross-Site Scripting
Slug
cloud
Published
2025-01-16
Title
WP Cloud <= 1.4.3 - Unauthenticated Arbitrary File Read
Slug
cloud-manager
Published
2023-04-12
Title
Cloud Manager <= 1.0 - Reflected XSS
Slug
cloud-search
Published
2025-10-16
Title
CloudSearch <= 3.0.0 - Cross-Site Request Forgery
Slug
cloud-sso-single-sign-on
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cloud-sso-single-sign-on
Published
2025-07-16
Title
Cloud SAML SSO - Single Sign On Login < 1.0.19 - Unauthenticated Local File Inclusion
Slug
cloud-sso-single-sign-on
Published
2025-09-05
Title
Cloud SAML SSO < 1.0.20 - Missing Authorization to Unauthenticated Settings Modification via set_organization_settings Action
Slug
cloud-sso-single-sign-on
Published
2025-09-05
Title
Cloud SAML SSO < 1.0.20 - Unauthenticated Identity Provider Deletion
Slug
cloudflare
Published
2016-03-28
Title
CloudFlare <= 1.3.20 - Authenticated Cross-Site Scripting (XSS)
Slug
cloudflare
Published
2017-08-26
Title
Multiple Plugins - Unauthenticated RCE via PHPUnit
Slug
cloudflare
Published
2024-01-04
Title
Cloudflare < 4.12.3 - Missing Authorization via initProxy
Slug
cloudflare-cache-purge
Published
2025-01-03
Title
CloudFlare(R) Cache Purge <= 1.2 - Reflected Cross-Site Scripting
Slug
cloudinary-image-management-and-manipulation-in-the-cloud-cdn
Published
2026-01-22
Title
Cloudinary <= 3.3.0 - Missing Authorization
Slug
cloudnet-sync
Published
2023-10-25
Title
Download CloudNet360 <= 3.2.0 - Reflected Cross-Site Scripting
Slug
cloudsafe365-for-wp
Published
2014-08-01
Title
Cloudsafe365 - Multiple Vulnerabilities
Slug
cloudsecure-wp-security
Published
2026-05-28
Title
CloudSecure WP Security < 1.4.8 - Two-Factor Authentication Bypass
Slug
clover-online-orders
Published
2023-10-22
Title
Smart Online Order for Clover < 1.5.5 - Reflected XSS
Slug
clover-online-orders
Published
2024-03-16
Title
Smart Online Order for Clover < 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
clover-online-orders
Published
2024-04-05
Title
Smart Online Order for Clover < 1.5.5 - Cross-Site Request Forgery
Slug
clover-online-orders
Published
2024-08-20
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Update
Slug
clover-online-orders
Published
2024-08-20
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization to Plugin Deactivation and Data Deletion