WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
clickdesk-live-support-chat-plugin
Published
2014-08-01
Title
ClickDesk <= 4.3 - Live Chat Widget Multiple Field XSS
Slug
clickervolt
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
clickfunnels
Published
2023-04-26
Title
ClickFunnels <= 3.1.1 - Contributor+ Stored XSS via Shortcode
Slug
clickfunnels
Published
2023-03-06
Title
clickfunnels <= 3.1.1 - Settings Update via CSRF
Slug
clicksend-contactform7
Published
2025-09-30
Title
SMS Contact Form 7 Notifications by ClickSend <= 1.4.0 - Missing Authorization
Slug
clicksend-lead-capture-form
Published
2024-12-06
Title
SMS for Lead Capture Forms <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
Slug
clicksold-wordpress-plugin
Published
2024-07-09
Title
Wordpress Clicksold IDX Plugin <= 1.90 - Admin+ XSS
Slug
clickwhale
Published
2025-01-10
Title
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages < 2.4.2 - Reflected Cross-Site Scripting
Slug
clickwhale
Published
2025-01-06
Title
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages < 2.4.2 - Authenticated (Contributor+) SQL Injection
Slug
clickwhale
Published
2025-01-28
Title
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages < 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
clickwhale
Published
2025-02-13
Title
ClickWhale < 2.4.4 - Cross-Site Request Forgery
Slug
clickwhale
Published
2025-05-07
Title
ClickWhale < 2.4.7 - Missing Authorization
Slug
clickwhale
Published
2025-09-19
Title
ClickWhale < 2.5.1 - Authenticated (Admin+) SQL injection
Slug
clicky
Published
2016-07-29
Title
Clicky by Yoast <= 1.5 - Minor Security Improvements
Slug
clictracker
Published
2022-11-25
Title
WP Clictracker <= 1.0.5 - Admin+ Stored XSS
Slug
cliengo
Published
2024-07-08
Title
Cliengo - Chatbot < 3.0.3 - Missing Authorization to Authorized (Subscriber+) Chatbot Settings Update
Slug
cliengo
Published
2024-07-08
Title
Cliengo - Chatbot < 3.0.3 - Missing Authorization to Unauthenticated Chatbot Settings Update
Slug
cliengo
Published
2024-07-09
Title
Cliengo – Chatbot <= 3.0.1 - Cross-Site Request Forgery
Slug
cliengo
Published
2026-02-09
Title
Cliengo – Chatbot < 3.0.5 - Missing Authorization
Slug
client-dash
Published
2023-11-29
Title
Client Dash <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
client-dash
Published
2024-04-25
Title
Client Dash <= 2.2.1 - Missing Authorization
Slug
client-documentation
Published
2025-02-13
Title
Simple Documentation <= 1.2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
client-portal
Published
2026-01-16
Title
Client Portal – Private user pages and login < 1.2.2 - Missing Authorization
Slug
client-portal-suitedash-login
Published
2023-09-03
Title
Client Portal : SuiteDash Direct Login < 1.8.0 - Admin+ Stored XSS
Slug
client-power-tools
Published
2024-10-21
Title
Client Power Tools Portal < 1.9.1 - Reflected Cross-Site Scripting