WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
course-booking-system
Published
2025-04-14
Title
Course Booking System < 6.1.3 - Reflected Cross-Site Scripting
Slug
course-booking-system
Published
2025-11-07
Title
Course Booking System < 6.1.6 - Missing Authorization to Unauthenticated Booking Data Export
Slug
course-migration-for-learndash
Published
2025-01-03
Title
Course Migration for LearnDash <= 1.0.2 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
course-redirects-for-learndash
Published
2025-10-10
Title
Course Redirects for Learndash Plugin <= 0.4 - Cross-Site Request Forgery
Slug
court-reservation
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
court-reservation
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
court-reservation
Published
2026-02-05
Title
Court Reservation <= 1.10.8 - Reflected Cross-Site Scripting
Slug
court-reservation
Published
2026-02-17
Title
Court Reservation < 1.10.9 - Event Deletion via CSRF
Slug
coven-core
Published
2026-01-23
Title
Coven Core <= 1.3 - Unauthenticated SQL Injection
Slug
covermanager
Published
2025-03-31
Title
CoverManager <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
covid-19-alert
Published
2025-04-24
Title
COVID-19 (Coronavirus) Update Your Customers <= 1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cowidgets-elementor-addons
Published
2024-06-03
Title
Cowidgets – Elementor Addons < 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via heading_tag Parameter
Slug
cowidgets-elementor-addons
Published
2024-06-05
Title
Cowidgets – Elementor Addons < 1.2.0 - Authenticated (Contributor+) Local File Inclusion
Slug
cowidgets-elementor-addons
Published
2024-11-08
Title
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Post Disclosure
Slug
cowidgets-elementor-addons
Published
2024-11-08
Title
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
cowidgets-elementor-addons
Published
2024-11-28
Title
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cozy-addons
Published
2024-09-30
Title
Cozy Blocks < 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2024-10-24
Title
Cozy Blocks < 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2024-10-25
Title
Cozy Blocks < 2.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2025-03-27
Title
Cozy Blocks < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2025-05-07
Title
Cozy Blocks < 2.1.23 - Missing Authorization
Slug
cozy-addons
Published
2025-09-22
Title
Cozy Blocks < 2.1.30 - Unauthenticated Arbitrary Shortcode Execution
Slug
cp-blocks
Published
2022-02-02
Title
CP Blocks < 1.0.15 - Admin+ Stored Cross-Site Scripting
Slug
cp-blocks
Published
2023-10-06
Title
CP Blocks < 1.0.21 - CSRF