WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
computer-repair-shop
Published
2024-12-18
Title
Computer Repair Shop < 3.8120 - Authenticated (Customer+) Privilege Esclation via Account Takeover
Slug
computer-repair-shop
Published
2025-04-04
Title
CRM WordPress Plugin – RepairBuddy < 3.8214 - Missing Authorization
Slug
computer-repair-shop
Published
2026-01-16
Title
RepairBuddy < 4.1121 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders
Slug
conditional-extra-fees-for-woocommerce
Published
2023-06-26
Title
Conditional extra fees for WooCommerce < 1.0.97 - Admin+ Stored XSS
Slug
conditional-logic-for-woo-product-add-ons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
conditional-marketing-mailer
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via CSRF
Slug
conditional-marketing-mailer
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via Low Privilege User
Slug
conditional-menus
Published
2023-05-24
Title
Conditional Menus < 1.2.1 - Reflected XSS
Slug
conditional-payment-methods-for-woocommerce
Published
2022-12-24
Title
Conditional Payment Methods for WooCommerce <= 1.0 - Admin+ SQLi
Slug
conditional-payments
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
conditional-payments-for-woocommerce
Published
2023-02-14
Title
Conditional Payments for WooCommerce < 2.3.2 - Plugin RuleSets Activation/Deactivation via CSRF
Slug
conditional-payments-for-woocommerce
Published
2025-04-16
Title
Conditional Payments for WooCommerce < 3.3.1 - Cross-Site Request Forgery
Slug
conditional-shipping-for-woocommerce
Published
2023-01-27
Title
Conditional Shipping for WooCommerce < 2.3.2 - Ruleset Toggle via CSRF
Slug
conditional-shipping-for-woocommerce
Published
2025-04-16
Title
Conditional Shipping for WooCommerce < 3.4.1 - Cross-Site Request Forgery
Slug
coneblog-widgets
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
coneblog-widgets
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
coneblog-widgets
Published
2024-07-09
Title
ConeBlog – WordPress Blog Widgets < 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
conference-scheduler
Published
2022-03-04
Title
Conference Scheduler < 2.4.3 - Reflected Cross-Site Scripting
Slug
conference-scheduler
Published
2025-06-23
Title
Conference Scheduler < 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Slug
confetti-fall-animation
Published
2024-09-23
Title
Confetti Fall Animation <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via confetti-fall-animation Shortcode
Slug
confetti-fall-animation
Published
2024-09-30
Title
Confetti Fall Animation <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
configurable-tag-cloud-widget
Published
2023-03-30
Title
Configurable Tag Cloud < 5.3 - Cross-Site Request Forgery
Slug
configure-conference-room
Published
2024-11-08
Title
WP Virtual Room Configurator <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
configure-login-timeout
Published
2024-05-06
Title
Configure Login Timeout <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
configure-smtp
Published
2024-02-26
Title
Configure SMTP <= 3.1 - Reflected Cross-Site Scripting