WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
consensus-embed
Published
2026-03-06
Title
Consensus Embed <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'src' Shortcode Attribute
Slug
constant-contact-api
Published
2025-09-01
Title
Constant Contact for WordPress <= 4.1.1 - Unauthenticated PHP Object Injection
Slug
constant-contact-forms
Published
2020-09-06
Title
Constant Contact Forms < 1.8.8 - Multiple Authenticated Stored XSS
Slug
constant-contact-forms
Published
2024-01-03
Title
Constant Contact Forms < 2.4.3 - Information Disclosure via Log Files
Slug
constant-contact-forms-by-mailmunch
Published
2023-10-16
Title
Constant Contact Forms by MailMunch < 2.0.11 - Arbitrary Settings Update via CSRF
Slug
constant-contact-forms-by-mailmunch
Published
2024-01-10
Title
Constant Contact Forms by MailMunch < 2.1.0 - Contributor+ Stored XSS
Slug
constant-contact-forms-by-mailmunch
Published
2024-11-12
Title
Constant Contact Forms by MailMunch < 2.1.3 - Reflected Cross-Site Scripting
Slug
constant-contact-woocommerce
Published
2025-12-05
Title
Constant Contact + WooCommerce < 2.4.2 - Missing Authorization
Slug
consulting-elementor-widgets
Published
2024-06-20
Title
Consulting Elementor Widgets < 1.3.1 - Authenticated (Contributor+) SQL Injection
Slug
consulting-elementor-widgets
Published
2024-06-20
Title
Consulting Elementor Widgets < 1.3.1 - Authenticated (Contributor+) Local File Inclusion
Slug
consulting-elementor-widgets
Published
2024-06-20
Title
Consulting Elementor Widgets < 1.3.1 - Unauthenticated Local File Inclusion
Slug
consulting-elementor-widgets
Published
2024-06-20
Title
Consulting Elementor Widgets < 1.3.1 - Authenticated (Contributor+) Remote Code Execution
Slug
consulting-elementor-widgets
Published
2025-10-27
Title
Consulting Elementor Widgets < 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
consulting-elementor-widgets
Published
2025-10-27
Title
Consulting Elementor Widgets < 1.4.3 - Authenticated (Contributor+) Local File Inclusion
Slug
contact-bank
Published
2014-04-29
Title
Contact Bank 2.0.19 - Multiple Unspecified Issues
Slug
contact-bank
Published
2014-11-20
Title
Contact Bank Standard Edition <= 2.0.69 - Cross-Site Scripting (XSS)
Slug
contact-bank
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
contact-bank
Published
2015-08-13
Title
Contact Bank <= 2.0.225 - Authenticated Cross-Site Scripting (XSS)
Slug
contact-bank
Published
2016-08-01
Title
Contact Bank < 2.1.23 - Cross-Site Scripting (XSS)
Slug
contact-bank
Published
2022-09-29
Title
Contact Bank <= 3.0.30 - Admin+ Stored Cross-Site Scripting
Slug
contact-form-7
Published
2014-08-01
Title
Contact Form 7 <= 3.7.1 - CAPTCHA Bypass
Slug
contact-form-7
Published
2014-08-01
Title
Contact Form 7 <= 3.5.2 - File Upload Remote Code Execution
Slug
contact-form-7
Published
2018-09-04
Title
Contact Form 7 <= 5.0.3 - register_post_type() Privilege Escalation
Slug
contact-form-7
Published
2020-12-17
Title
Contact Form 7 < 5.3.2 - Unrestricted File Upload
Slug
contact-form-7
Published
2023-11-30
Title
Contact Form 7 < 5.8.4 - Authenticated (Editor+) Arbitrary File Upload