WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
capability-manager-enhanced
Published
2021-12-08
Title
PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise
Slug
capability-manager-enhanced
Published
2022-01-13
Title
PublishPress Capabilities < 2.3.3 - Reflected Cross-Site Scripting
Slug
capability-manager-enhanced
Published
2022-10-10
Title
PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection
Slug
capability-manager-enhanced
Published
2026-02-20
Title
PublishPress Capabilities < 2.32.0 - Missing Authorization
Slug
capitalize-my-title
Published
2024-11-28
Title
Capitalize My Title <= 0.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
captain-slider
Published
2015-08-29
Title
Captain Slider 1.0.6 - Cross-Site Scripting (XSS)
Slug
captainform
Published
2022-10-29
Title
Forms by CaptainForm <= 2.5.3 - CSRF
Slug
captainform
Published
2023-11-29
Title
Forms by CaptainForm <= 2.5.3 - Reflected Cross-Site Scripting via REQUEST_URI
Slug
captcha
Published
2014-08-01
Title
Captcha 2.12-3.8.1 - Captcha Bypass
Slug
captcha
Published
2015-03-03
Title
Captcha <= 4.0.6 - Captcha Bypass
Slug
captcha
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
captcha
Published
2017-12-19
Title
Captcha 4.3.6–4.4.4 - Backdoored
Slug
captcha-bank
Published
2024-10-03
Title
WordPress Captcha Plugin by Captcha Bank <= 4.0.36 - Reflected Cross-Site Scripting
Slug
captcha-bws
Published
2024-04-05
Title
Captcha by BestWebSoft < 5.2.1 - Captcha Bypass
Slug
captcha-code-authentication
Published
2022-09-01
Title
Captcha Code < 2.8 - Settings Update via CSRF
Slug
captcha-code-authentication
Published
2023-11-24
Title
Captcha Code < 3.0 - Captcha Bypass
Slug
captcha-eu
Published
2025-08-26
Title
Captcha.eu < 1.0.61 - Reflected Cross-Site Scripting
Slug
captcha-eu
Published
2025-08-19
Title
Captcha.eu < 1.0.62 - Unauthenticated Server-Side Request Forgery
Slug
captcha-for-contact-form-7
Published
2023-10-03
Title
Captcha/Honeypot for Contact Form 7 < 1.11.4 - Captcha Bypass
Slug
captcha-them-all
Published
2023-08-16
Title
Captcha Them All < 1.4 - Admin+ Stored XSS
Slug
captchelfie-captcha-by-selfie
Published
2025-01-16
Title
Captchelfie – Captcha by Selfie <= 1.0.7 - Reflected Cross-Site Scripting
Slug
captchinoo-captcha-for-login-form-protection
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via CSRF
Slug
captchinoo-captcha-for-login-form-protection
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via Low Privilege User
Slug
captionpix
Published
2025-07-23
Title
CaptionPix <= 1.8 - Reflected Cross-Site Scripting
Slug
captivatesync-trade
Published
2024-12-02
Title
Captivate Sync < 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode