WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
codebard-help-desk
Published
2025-02-14
Title
CodeBard Help Desk <= 1.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
codecolorer
Published
2023-06-05
Title
CodeColorer < 0.10.1 – Admin+ Stored Cross-Site Scripting
Slug
codecolorer
Published
2025-12-30
Title
CodeColorer < 0.10.2 - Unauthenticated Stored Cross-Site Scripting
Slug
codecolorer
Published
2026-04-15
Title
CodeColorer < 0.10.2 - Unauthenticated Stored Cross-Site Scripting via 'class' attribute in 'cc' Comment Shortcode
Slug
codeconfig-accessibility
Published
2025-12-05
Title
Accessiy By CodeConfig Accessibility – Easy One-Click Accessibility Toolbar That Truly Matters <= 1.0.2 - Authenticated (Subscriber+) Missing Authorization to Modify Accessibility Settings
Slug
codeconfig-accessibility
Published
2025-12-05
Title
Accessiy By CodeConfig Accessibility < 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page Creation
Slug
codeflavors-vimeo-video-post-lite
Published
2023-04-14
Title
Vimeotheque < 2.2.2 - Reflected XSS
Slug
codeflavors-vimeo-video-post-lite
Published
2025-03-27
Title
Vimeotheque < 2.3.4.3 - Authenticated (Contributor+) SQL Injection
Slug
codeflavors-vimeo-video-post-lite
Published
2025-12-25
Title
Vimeotheque < 2.3.6 - Cross-Site Request Forgery
Slug
codehaveli-bitly-url-shortener
Published
2025-06-05
Title
Bitly URL Shortener < 1.5.0 - Cross-Site Request Forgery
Slug
codelights-shortcodes-and-widgets
Published
2022-12-21
Title
Sidebar Widgets by CodeLights <= 1.4 - Contributor+ Stored XSS
Slug
codelights-shortcodes-and-widgets
Published
2022-12-19
Title
Sidebar Widgets by CodeLights <= 1.4 - Admin+ Stored Cross Site Scripting
Slug
codemonkeys-hipaa-forms
Published
2026-03-23
Title
CM HIPAA Forms < 3.2.0 - Unauthenticated Authorization Bypass
Slug
codepen-embed-block
Published
2025-06-19
Title
CodePen Embed Block <= 1.2.0 - Admin+ Stored XSS
Slug
codepen-embedded-pen-shortcode
Published
2024-07-10
Title
CodePen Embedded Pens Shortcode < 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
codepen-embedded-pen-shortcode
Published
2024-10-24
Title
CodePen Embedded Pens Shortcode < 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
codepile
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
codepile
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
codepress-admin-columns
Published
2021-05-31
Title
Admin Columns Free < 4.3 & Pro < 5.5.1 - Admin+ Stored XSS in Label
Slug
codepress-admin-columns
Published
2021-05-31
Title
Admin Columns Free (< 4.3.2) & Pro (< 5.5.2) - Authenticated Stored Cross-Site Scripting (XSS) in Custom Field
Slug
coder-elementor
Published
2025-12-10
Title
Coder for Elementor <= 1.0.13 - Missing Authorization
Slug
codescar-radio-widget
Published
2025-04-09
Title
Codescar Radio Widget <= 0.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
codesnips
Published
2024-11-08
Title
codeSnips <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
codestyling-localization
Published
2014-08-01
Title
Code Styling Localization < 1.99.20 - Cross Site Scripting
Slug
codestyling-localization
Published
2015-06-03
Title
Codestyling Localization <= 1.99.30 - Multiple CSRF