WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cmp-coming-soon-maintenance
Published
2020-08-04
Title
CMP - Coming Soon & Maintenance < 3.8.2 - Improper Access Controls on AJAX Calls
Slug
cmp-coming-soon-maintenance
Published
2022-01-17
Title
Coming Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update
Slug
cmp-coming-soon-maintenance
Published
2023-03-07
Title
Coming Soon & Maintenance < 4.1.7 - Unauthenticated Post/Page Access in Maintenance Mode
Slug
cmp-coming-soon-maintenance
Published
2023-04-18
Title
CMP – Coming Soon & Maintenance < 4.1.8 - Maintenance Mode Bypass
Slug
cmp-coming-soon-maintenance
Published
2024-03-27
Title
CMP – Coming Soon & Maintenance < 4.1.11 - Authenticated (Admin+) Server-Side Request Forgery
Slug
cmp-coming-soon-maintenance
Published
2025-04-04
Title
CMP – Coming Soon & Maintenance < 4.1.15 - Admin+ Arbitrary File Upload
Slug
cms-blocks
Published
2025-06-27
Title
CMS Blocks <= 1.1 - Missing Authorization
Slug
cms-commander-client
Published
2017-01-25
Title
CMS Commander Client <= 2.21 - Unauthenticated PHP Object Injection
Slug
cms-commander-client
Published
2023-06-19
Title
CMS Commander < 2.288 - Unauthenticated Authorisation Bypass
Slug
cms-pack-cache
Published
2014-08-01
Title
Cms Pack 1.3 - Shell Upload
Slug
cms-press
Published
2023-03-13
Title
CMS Press <= 0.2.3 - Admin+ Stored XSS
Slug
cms-tree-page-view
Published
2014-08-01
Title
CMS Tree Page View 1.2.4 - Page Creation CSRF
Slug
cms-tree-page-view
Published
2014-08-01
Title
CMS Tree Page View 0.8.8 - XSS
Slug
cms-tree-page-view
Published
2015-04-21
Title
CMS Tree Page View 1.2.31 - Multiple Parameter XSS
Slug
cms-tree-page-view
Published
2023-04-20
Title
CMS Tree Page View < 1.6.8 - Reflected XSS
Slug
cmsmasters-content-composer
Published
2024-10-08
Title
CMSMasters Content Composer < 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
cmsmasters-content-composer
Published
2025-07-01
Title
CMSMasters Content Composer < 2.5.7 - Unauthenticated Local File Inclusion
Slug
cmsmasters-content-composer
Published
2026-02-02
Title
CMSMasters Content Composer < 1.4.6 - Authenticated (Contributor+) Local File Inclusion
Slug
cmsmasters-elementor-addon
Published
2024-12-02
Title
CMSMasters Elementor Addon < 1.15.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
cmyee-momentopress
Published
2023-11-06
Title
MomentoPress for Momento360 < 1.0.2 - Contributor+ Stored XSS
Slug
cnvrse
Published
2026-02-11
Title
Cnvrse <= 026.02.10.20 - Unauthenticated Insecure Direct Object Reference
Slug
cnzz51la-for-wordpress
Published
2025-01-16
Title
CNZZ&51LA for WordPress <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
co-authors-plus
Published
2022-06-02
Title
Co-Authors-Plus 3.5/3.5.1 - Guest Authors Email Address Disclosure
Slug
co-marquage-service-public
Published
2024-03-25
Title
Co-marquage service-public.fr < 0.5.73 - Reflected Cross-Site Scripting via search_term
Slug
co-marquage-service-public
Published
2024-03-25
Title
Co-marquage service-public.fr < 0.5.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode