WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
captcha
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
captcha
Published
2017-12-19
Title
Captcha 4.3.6–4.4.4 - Backdoored
Slug
captcha-bank
Published
2024-10-03
Title
WordPress Captcha Plugin by Captcha Bank <= 4.0.36 - Reflected Cross-Site Scripting
Slug
captcha-bws
Published
2024-04-05
Title
Captcha by BestWebSoft < 5.2.1 - Captcha Bypass
Slug
captcha-code-authentication
Published
2022-09-01
Title
Captcha Code < 2.8 - Settings Update via CSRF
Slug
captcha-code-authentication
Published
2023-11-24
Title
Captcha Code < 3.0 - Captcha Bypass
Slug
captcha-eu
Published
2025-08-26
Title
Captcha.eu < 1.0.61 - Reflected Cross-Site Scripting
Slug
captcha-eu
Published
2025-08-19
Title
Captcha.eu < 1.0.62 - Unauthenticated Server-Side Request Forgery
Slug
captcha-for-contact-form-7
Published
2023-10-03
Title
Captcha/Honeypot for Contact Form 7 < 1.11.4 - Captcha Bypass
Slug
captcha-them-all
Published
2023-08-16
Title
Captcha Them All < 1.4 - Admin+ Stored XSS
Slug
captchelfie-captcha-by-selfie
Published
2025-01-16
Title
Captchelfie – Captcha by Selfie <= 1.0.7 - Reflected Cross-Site Scripting
Slug
captchinoo-captcha-for-login-form-protection
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via CSRF
Slug
captchinoo-captcha-for-login-form-protection
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via Low Privilege User
Slug
captionpix
Published
2025-07-23
Title
CaptionPix <= 1.8 - Reflected Cross-Site Scripting
Slug
captivatesync-trade
Published
2024-12-02
Title
Captivate Sync < 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
captivatesync-trade
Published
2025-05-05
Title
Captivate Sync < 3.2.2 - Unauthenticated PHP Object Injection
Slug
captivatesync-trade
Published
2025-12-21
Title
Captivate Sync < 3.3.0 - Authenticated (Administrator+) SQL Injection
Slug
capturly-optimize-your-website
Published
2025-04-21
Title
Capturly < 2.0.2 - Unauthenticated Local File Inclusion
Slug
car
Published
2020-04-05
Title
Car Rental System <= 1.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
car-demon
Published
2014-08-01
Title
Car Demon 1.0.1 - /wp-admin/edit.php Multiple Parameter XSS
Slug
car-demon
Published
2014-08-01
Title
Car Demon 1.0.1 - /wp-admin/post.php Multiple Parameter XSS
Slug
car-demon
Published
2025-01-14
Title
Car Demon <= 1.8.1 - Reflected Cross-Site Scripting
Slug
car-park-booking-system-for-wordpress
Published
2025-04-22
Title
Car Park Booking System for WordPress <= 2.6 - Missing Authorization
Slug
car-rental
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
car-rental
Published
2022-11-09
Title
Car Rental by BestWebSoft <= 1.1.2 - Admin+ Stored XSS