WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
content-writer
Published
2025-10-14
Title
Content Writer < 3.6.9 - Unauthenticated Information Exposure via Log File
Slug
content_timeline
Published
2017-09-26
Title
Content Timeline <= 4.4.2 - Multiple Blind SQL Injection
Slug
contentlock
Published
2024-06-21
Title
ContentLock < 1.0.4 - Settings Update via CSRF
Slug
contentlock
Published
2024-06-21
Title
ContentLock < 1.0.4 - Groups/Emails Deletion via CSRF
Slug
contentlock
Published
2024-06-21
Title
ContentLock < 1.0.4 - Email Adding via CSRF
Slug
contentmx-content-publisher
Published
2025-03-31
Title
ContentMX Content Publisher < 1.0.7 - Missing Authorization
Slug
contentmx-content-publisher
Published
2025-10-02
Title
ContentMX Content Publisher < 1.0.7 - Cross-Site Request Forgery
Slug
contentoptin
Published
2025-01-16
Title
ContentOptin Lite – WP Content Upgrade Plugin <= 1.1 - Reflected Cross-Site Scripting
Slug
contentstudio
Published
2023-01-27
Title
ContentStudio < 1.2.6 - Authorisation Bypass
Slug
contentstudio
Published
2023-01-27
Title
ContentStudio < 1.2.6 - Nonce Disclosure
Slug
contentstudio
Published
2023-01-06
Title
ContentStudio < 1.2.6 - Unauthorised Function Calls
Slug
contentstudio
Published
2025-05-07
Title
ContentStudio < 1.3.7 - Missing Authorization
Slug
contentstudio
Published
2025-06-19
Title
ContentStudio < 1.4.0 - Missing Authorization
Slug
contentstudio
Published
2025-12-04
Title
ContentStudio < 1.4.0 - Cross-Site Request Forgery to Settings Update
Slug
contentstudio
Published
2025-12-04
Title
ContentStudio < 1.4.0 - Authenticated (Author+) Arbitrary File Upload
Slug
contest-code-checker
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
contest-code-checker
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
contest-code-checker
Published
2024-11-20
Title
Run Contests, Raffles, and Giveaways with ContestsWP < 2.0.4 - Reflected Cross-Site Scripting
Slug
contest-code-checker
Published
2025-04-15
Title
Run Contests, Raffles, and Giveaways with ContestsWP <= 2.0.6 - Reflected Cross-Site Scripting
Slug
contest-code-checker
Published
2026-02-02
Title
Run Contests, Raffles, and Giveaways with ContestsWP < 2.1.1 - Unauthenticated Information Exposure
Slug
contest-gallery
Published
2019-06-12
Title
Contest Gallery <= 10.4.4 - Cross-Site Request Forgery (CSRF)
Slug
contest-gallery
Published
2021-11-01
Title
Contest Gallery < 13.1.0.7 - Subscriber+ Email Address Disclosure
Slug
contest-gallery
Published
2021-11-01
Title
Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address Disclosure
Slug
contest-gallery
Published
2021-12-20
Title
Contest Gallery < 14.0.0 - Author+ Stored Cross-Site Scripting
Slug
contest-gallery
Published
2022-08-09
Title
Contest Gallery < 17.0.5 - Author+ SQLi