WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contribuinte-checkout
Published
2025-05-07
Title
Contribuinte Checkout < 2.0.04 - Stored XSS via CSRF
Slug
control-block-patterns
Published
2024-03-04
Title
Build & Control Block Patterns – Boost up Gutenberg Editor <= 1.3.5.4 - Missing Authorization
Slug
control-horas
Published
2024-11-21
Title
Control horas <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
control-listings
Published
2025-04-22
Title
Control Listings < 1.0.5 - Reflected Cross-Site Scripting
Slug
controlled-admin-access
Published
2021-03-30
Title
Controlled Admin Access < 1.5.6 - Improper Access Control to Privilege Escalation
Slug
controlled-admin-access
Published
2021-03-23
Title
Controlled Admin Access < 1.5.2 - Improper Access Control & Privilege Escalation
Slug
contus-hd-flv-player
Published
2011-08-17
Title
Contus HD FLV Player <= 1.3 - SQL Injection
Slug
contus-hd-flv-player
Published
2014-08-01
Title
Contus HD FLV Player 1.7 - Arbitrary File Upload
Slug
contus-video-comments
Published
2016-06-22
Title
Contus Video Comments - Unauthenticated Remote JPG File Upload
Slug
contus-video-gallery
Published
2014-08-01
Title
Contus Video Gallery 2.0 & 1.6 - SQL Injection
Slug
contus-video-gallery
Published
2014-09-23
Title
Contus Video Gallery 2.3.1.0.1 - SQL Injection
Slug
contus-video-gallery
Published
2015-02-11
Title
Wordpress Video Gallery <= 2.7 - SQL Injection
Slug
contus-video-gallery
Published
2015-04-02
Title
WordPress Video Gallery <= 2.8 - Multiple Cross-Site Request Forgery (CSRF)
Slug
contus-video-gallery
Published
2015-04-13
Title
WordPress Video Gallery <= 2.8 - SQL Injection
Slug
contus-video-gallery
Published
2015-04-05
Title
WordPress Video Gallery <= 2.8 - Unprotected Mail Page
Slug
contus-video-galleryversion-10
Published
2012-06-12
Title
Contus Video Gallery 1.3 - Arbitrary File Upload
Slug
conversador
Published
2014-05-28
Title
Conversador <= 2.61 - Cross-Site Scripting (XSS)
Slug
conversation-watson
Published
2020-01-21
Title
Chatbot with IBM Watson < 0.8.21 - DOM Cross-Site Scripting (XSS)
Slug
conversational-forms
Published
2023-01-20
Title
Conversational Forms for ChatBot < 1.17 - Admin+ Stored XSS
Slug
conversational-forms
Published
2024-04-22
Title
Conversational Forms for ChatBot < 1.2.0 - Unauthenticated Arbitrary File Download
Slug
conversational-forms
Published
2024-05-03
Title
Conversational Forms for ChatBot < 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
conversational-forms
Published
2025-01-07
Title
Conversational Forms for ChatBot < 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
conversion-de-moneda
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
conversion-helper
Published
2024-11-04
Title
Conversion Helper <= 1.12 - Reflected Cross-Site Scripting
Slug
conversionninja
Published
2014-08-01
Title
Conversion Ninja - /lp/index.php id Parameter XSS