WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cargus
Published
2026-01-17
Title
Cargus <= 1.5.8 - Unauthenticated Information Exposure
Slug
carousel
Published
2025-09-05
Title
Carousel Ultimate <= 1.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
carousel
Published
2025-09-22
Title
Carousel Ultimate <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
carousel-anything
Published
2024-03-28
Title
Carousel Anything For WPBakery Page Builder <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
carousel-ck
Published
2022-05-18
Title
Carousel CK <= 1.1.0 - Admin+ Stored Cross-Site Scripting
Slug
carousel-horizontal-posts-content-slider
Published
2025-12-30
Title
Carousel Horizontal Posts Content Slider <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
carousel-of-post-images
Published
2025-04-24
Title
Carousel-of-post-images <= 1.07 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
carousel-slider
Published
2023-09-05
Title
Carousel Slider < 2.2.3 - Missing Authorization
Slug
carousel-slider
Published
2024-03-25
Title
Carousel Slider < 2.2.7 - Editor+ Stored XSS
Slug
carousel-slider
Published
2024-04-12
Title
Carousel Slider < 2.2.10 - Editor+ Stored XSS
Slug
carousel-slider
Published
2024-04-30
Title
Carousel Slider < 2.2.11 - Editor+ Stored XSS
Slug
carousel-slider
Published
2024-08-23
Title
Carousel Slider < 2.2.14 - Editor+ Stored XSS
Slug
carousel-slider
Published
2024-08-30
Title
Carousel Slider < 2.2.4 - Cross-Site Request Forgery
Slug
carousel-slider
Published
2024-08-30
Title
Carousel Slider < 2.0.0 - Cross-Site Request Forgery
Slug
carousel-slider
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Slug
carousels-slider-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
carrrot
Published
2023-09-06
Title
Carrot <= 1.1.0 - Admin+ Stored XSS
Slug
cars-seller-auto-classifieds-script
Published
2021-04-26
Title
Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection
Slug
cart-lift
Published
2023-05-04
Title
Cart Lift < 3.1.6 - Reflected XSS
Slug
cart-rest-api-for-woocommerce
Published
2023-11-07
Title
CoCart – Headless ecommerce < 3.12.0 - Missing Authorization
Slug
cart-tracking-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cart-tracking-for-woocommerce
Published
2025-03-27
Title
Cart tracking for WooCommerce < 1.0.17 - Authenticated (Administrator+) SQL Injection
Slug
cart-tracking-for-woocommerce
Published
2025-05-07
Title
Cart tracking for WooCommerce < 1.0.18 - Authenticated (Administrator+) SQL Injection
Slug
cart-weight-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cart-weight-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting