WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
copypress-rest-api
Published
2025-09-29
Title
Copypress Rest API 1.1 - 1.2 - Unauthenticated Remote Code Execution
Slug
copyright-licensing-tools
Published
2014-08-01
Title
iCopyright(R) Article Tools <= 1.1.4 - SQL Injection
Slug
copyright-safeguard-footer-notice
Published
2025-01-16
Title
Copyright Safeguard Footer Notice <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
copyrightpro
Published
2023-09-29
Title
CopyRightPro <= 2.1 - Settings Update via CSRF
Slug
copyscape-premium
Published
2024-09-30
Title
Copyscape Premium < 1.4.0 - Stored XSS via CSRF
Slug
copyscape-premium
Published
2026-01-10
Title
Copyscape Premium < 1.4.2 - Cross-Site Request Forgery
Slug
core-control
Published
2022-05-23
Title
Core Control <= 1.2.1 - Arbitrary Settings Update via CSRF
Slug
core-web-vitals-pagespeed-booster
Published
2025-12-31
Title
Core Web Vitals & PageSpeed Booster <= 1.0.27 - Missing Authorization
Slug
coreactivity
Published
2024-01-26
Title
coreActivity < 1.8.1 - Unauthenticated Stored XSS
Slug
coreactivity
Published
2024-03-27
Title
coreActivity < 2.1 - Unauthenticated IP Spoofing
Slug
coreactivity
Published
2025-04-07
Title
coreActivity: Activity Logging for WordPress < 2.7.1 - Authenticated (Subscriber+) SQL Injection
Slug
coreactivity
Published
2026-05-12
Title
coreActivity: Activity Logging for WordPress < 3.1 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta Field
Slug
corner-ad
Published
2017-02-16
Title
Corner Ad < 1.0.8 - Admin+ Stored XSS
Slug
corner-ad
Published
2022-09-09
Title
Corner Ad < 1.0.57 - Ads Deletion via CSRF
Slug
cornerstone
Published
2024-04-16
Title
Cornerstone < 0.8.1 - Reflected Cross-Site Scripting via PHP_SELF
Slug
cornerstone
Published
2024-04-26
Title
Cornerstone < 0.8.1 - Reflected Cross-Site Scripting
Slug
cornerstone
Published
2025-10-06
Title
Cornerstone <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cornerstone
Published
2026-06-03
Title
Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta Disclosure
Slug
cornerstone
Published
2026-06-03
Title
Themeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash Disclosure
Slug
corona-virus-covid-19-banner
Published
2022-10-24
Title
Corona Virus (COVID-19) Banner & Live Data < 1.8.0 - CSRF
Slug
corona-virus-covid-19-banner
Published
2024-05-06
Title
Corona Virus (COVID-19) Banner & Live Data <= 1.8.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
coronavirus-covid-19-notice-message
Published
2025-02-18
Title
Coronavirus (COVID-19) Notice Message <= 1.1.2 - Admin+ Stored XSS
Slug
coronavirus-data-widgets
Published
2025-01-16
Title
Coronavirus (COVID-19) Outbreak Data Widgets <= 1.1.1 - Reflected Cross-Site Scripting
Slug
correct-prices
Published
2026-05-19
Title
Correct Prices <= 1.0 - Reflected Cross-Site Scripting via PHP_SELF Parameter
Slug
correos-express
Published
2021-11-29
Title
CorreosExpress <= 2.6.0 - Sensitive Information Disclosure