WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
coneblog-widgets
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
coneblog-widgets
Published
2024-07-09
Title
ConeBlog – WordPress Blog Widgets < 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
conekta-payment-gateway
Published
2026-06-08
Title
Conekta Payment Gateway < 6.0.1 - Unauthenticated Information Exposure
Slug
conekta-payment-gateway
Published
2026-08-20
Title
Conekta Payment Gateway < 6.2.2 - Unauthenticated Order Payment Completion via Webhook Forgery
Slug
conference-scheduler
Published
2022-03-04
Title
Conference Scheduler < 2.4.3 - Reflected Cross-Site Scripting
Slug
conference-scheduler
Published
2025-06-23
Title
Conference Scheduler < 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Slug
confetti-fall-animation
Published
2024-09-23
Title
Confetti Fall Animation <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via confetti-fall-animation Shortcode
Slug
confetti-fall-animation
Published
2024-09-30
Title
Confetti Fall Animation <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
configurable-tag-cloud-widget
Published
2023-03-30
Title
Configurable Tag Cloud < 5.3 - Cross-Site Request Forgery
Slug
configure-conference-room
Published
2024-11-08
Title
WP Virtual Room Configurator <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
configure-login-timeout
Published
2024-05-06
Title
Configure Login Timeout <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
configure-smtp
Published
2024-02-26
Title
Configure SMTP <= 3.1 - Reflected Cross-Site Scripting
Slug
confirm-user-registration
Published
2025-04-24
Title
Confirm User Registration <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
conformer-elementor
Published
2025-12-31
Title
Conformer for Elementor < 1.0.8 - Missing Authorization
Slug
connatix-video-embed
Published
2024-12-13
Title
Connatix Video Embed <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
connect-contact-form-7-to-constant-contact-v3
Published
2024-12-11
Title
Connect Contact Form 7 to Constant Contact < 1.5 - Reflected Cross-Site Scripting
Slug
connect-daily-web-calendar
Published
2022-12-20
Title
WordPress Events Calendar Plugin < 1.4.5 - Multiple Reflected XSS
Slug
connect-daily-web-calendar
Published
2025-04-09
Title
WordPress Events Calendar Plugin – connectDaily < 1.5.5 - Stored XSS via CSRF
Slug
connect-daily-web-calendar
Published
2025-09-05
Title
WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
connected-sermons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
connected-sermons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
connections
Published
2014-08-01
Title
Connections Business Directory <= 0.7.9.3 - Pagination URL H&ling XSS
Slug
connections
Published
2014-08-01
Title
Connections <= 0.7.1.5 - Unspecified Security
Slug
connections
Published
2016-02-02
Title
Connections <= 8.5.8 - Reflected Cross-Site Scripting (XSS)
Slug
connections
Published
2021-09-28
Title
Connections Business Directory < 10.4.3 - Admin+ Stored Cross-Site Scripting