WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
comment-rating
Published
2014-08-01
Title
Comment Rating 2.9.32 - Security Bypass Weakness & SQL Injection
Slug
comment-rating
Published
2014-08-01
Title
Comment Rating 2.9.23 - Multiple Vulnerabilities
Slug
comment-reply-email
Published
2023-10-18
Title
Comment Reply Email < 1.0.4 - Admin+ Stored XSS
Slug
comment-reply-email
Published
2024-07-05
Title
Comment Reply Email < 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
comment-reply-notification
Published
2023-04-04
Title
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery
Slug
comment-spam-wiper
Published
2026-03-20
Title
Comment SPAM Wiper <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'API Key' Setting
Slug
comment-validation-reloaded
Published
2025-04-09
Title
Comment Validation Reloaded <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
commentator
Published
2016-01-13
Title
Commentator <= 2.5.2 - Reflected Cross-Site Scripting (XSS)
Slug
commenting-feature
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
commenting-feature
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
commentluv
Published
2014-08-01
Title
CommentLuv 2.92.3 - Cross Site Scripting
Slug
commentluv
Published
2023-11-28
Title
CommentLuv <= 4 - Unauthenticated SSRF
Slug
comments-capcha-box
Published
2025-08-19
Title
Comments Capcha Box <= 1.1 - Reflected Cross-Site Scripting
Slug
comments-disable-accesspress
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
comments-from-facebook
Published
2022-04-04
Title
Social comments by WpDevArt < 2.5.0 - Admin+ Stored Cross-Site Scripting
Slug
comments-import-export-woocommerce
Published
2018-06-21
Title
WordPress Comments Import & Export <= 2.0.4 - CSV Injection
Slug
comments-import-export-woocommerce
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
comments-import-export-woocommerce
Published
2024-04-05
Title
WordPress Comments Import & Export < 2.3.6 - Cross-Site Request Forgery
Slug
comments-import-export-woocommerce
Published
2024-10-10
Title
WordPress Comments Import & Export < 2.3.9 - Authenticated (Author+) Arbitrary File Read via Directory Traversal
Slug
comments-import-export-woocommerce
Published
2025-06-02
Title
WordPress Comments Import & Export < 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
comments-import-export-woocommerce
Published
2026-03-20
Title
Comments Import & Export < 2.5.0 - Missing Authorization
Slug
comments-like-dislike
Published
2021-06-07
Title
Comments Like Dislike < 1.1.4 - Add Like/Dislike Bypass
Slug
comments-like-dislike
Published
2023-08-16
Title
Comments Like Dislike < 1.2.0 - Subscriber+ Settings Reset
Slug
comments-not-replied-to
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
comments-not-replied-to
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting