WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
code-snippets
Published
2020-01-29
Title
Code Snippets < 2.14.0 - CSRF to RCE
Slug
code-snippets
Published
2021-12-27
Title
Code Snippets < 2.14.3 - Reflected Cross-Site Scripting
Slug
code-snippets
Published
2022-05-18
Title
Code Snippets < 2.14.4 - Reflected Cross-Site Scripting
Slug
code-snippets
Published
2023-11-06
Title
Code Snippets < 3.6.0 - Arbitrary settings change via CSRF
Slug
code-snippets
Published
2025-11-18
Title
Code Snippets < 3.9.2 - Contributor+ PHP Code Injection via extract() and PHP Filter Chains
Slug
code-snippets
Published
2026-02-05
Title
Code Snippets < 3.9.5 - Cloud Snippet Download/Update Actions via CSRF
Slug
code-snippets-cpt
Published
2025-03-07
Title
Code Snippets CPT <= 2.1.0 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
code-snippets-extended
Published
2022-05-04
Title
Code Snippets Extended <= 1.4.7 - RCE via CSRF
Slug
code-snippets-extended
Published
2022-05-17
Title
Code Snippets Extended <= 1.4.7 - Arbitrary Snippet Deletion/Disabling via CSRF
Slug
code-snippets-extended
Published
2022-05-17
Title
Code Snippets Extended <= 1.4.7 - Stored Cross-Site Scripting via CSRF
Slug
codeablepress-simple-frontend-profile-picture-upload
Published
2025-08-14
Title
CodeablePress <= 1.0.0 - Missing Authorization
Slug
codebard-help-desk
Published
2024-12-19
Title
CodeBard Help Desk < 1.1.2 - Cross-Site Request Forgery
Slug
codebard-help-desk
Published
2025-01-14
Title
CodeBard Help Desk <= 1.1.2 - Reflected Cross-Site Scripting
Slug
codebard-help-desk
Published
2025-02-14
Title
CodeBard Help Desk <= 1.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
codecolorer
Published
2023-06-05
Title
CodeColorer < 0.10.1 – Admin+ Stored Cross-Site Scripting
Slug
codecolorer
Published
2025-12-30
Title
CodeColorer < 0.10.2 - Unauthenticated Stored Cross-Site Scripting
Slug
codeconfig-accessibility
Published
2025-12-05
Title
Accessiy By CodeConfig Accessibility – Easy One-Click Accessibility Toolbar That Truly Matters <= 1.0.2 - Authenticated (Subscriber+) Missing Authorization to Modify Accessibility Settings
Slug
codeconfig-accessibility
Published
2025-12-05
Title
Accessiy By CodeConfig Accessibility < 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page Creation
Slug
codeflavors-vimeo-video-post-lite
Published
2023-04-14
Title
Vimeotheque < 2.2.2 - Reflected XSS
Slug
codeflavors-vimeo-video-post-lite
Published
2025-03-27
Title
Vimeotheque < 2.3.4.3 - Authenticated (Contributor+) SQL Injection
Slug
codeflavors-vimeo-video-post-lite
Published
2025-12-25
Title
Vimeotheque < 2.3.6 - Cross-Site Request Forgery
Slug
codehaveli-bitly-url-shortener
Published
2025-06-05
Title
Bitly URL Shortener < 1.5.0 - Cross-Site Request Forgery
Slug
codelights-shortcodes-and-widgets
Published
2022-12-21
Title
Sidebar Widgets by CodeLights <= 1.4 - Contributor+ Stored XSS
Slug
codelights-shortcodes-and-widgets
Published
2022-12-19
Title
Sidebar Widgets by CodeLights <= 1.4 - Admin+ Stored Cross Site Scripting
Slug
codepen-embed-block
Published
2025-06-19
Title
CodePen Embed Block <= 1.2.0 - Admin+ Stored XSS