WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
correosoficial
Published
2023-01-31
Title
Correos Oficial < 1.3.0.3 - Unauthenticated Arbitrary File Download
Slug
coru-lfmember
Published
2022-04-27
Title
Coru LFMember <= 1.0.2 - Arbitrary Game Deletion/Activation via CSRF
Slug
coru-lfmember
Published
2022-04-26
Title
Coru LFMember <= 1.0.2 - Stored Cross-Site Scripting via CSRF
Slug
coschedule-by-todaymade
Published
2023-04-13
Title
CoSchedule < 3.3.9 - CSRF
Slug
coschedule-by-todaymade
Published
2025-09-26
Title
CoSchedule < 3.4.0 - Unauthenticated Sensitive Information Exposure
Slug
coschedule-by-todaymade
Published
2025-11-04
Title
CoSchedule < 3.4.1 - Missing Authorization
Slug
coschool
Published
2024-12-11
Title
CoSchool LMS <= 1.4.3 - Missing Authorization to Privilege Escalation
Slug
coschool
Published
2025-07-07
Title
CoSchool LMS <= 1.4.3 - Unauthenticated PHP Object Injection
Slug
coschool
Published
2025-07-14
Title
CoSchool LMS <= 1.4.3 - Authenticated (Subscriber+) SQL Injection
Slug
cosign-sso
Published
2025-12-04
Title
CoSign Single Signon <= 0.3.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
cosmetsy-core
Published
2023-12-07
Title
Multiple Plugins by KlbTheme - Reflected Cross-Site Scripting
Slug
cosmic-blocks
Published
2025-02-18
Title
Cosmic Blocks (40+) Content Editor Blocks Collection <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cosmosfarm-share-buttons
Published
2024-11-28
Title
소셜 공유 버튼 By 코스모스팜 <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cost-calculator
Published
2026-02-25
Title
EM Cost Calculator <= 2.3.1 - Unauthenticated Stored Cross-Site Scripting via 'customer_name'
Slug
cost-calculator-builder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cost-calculator-builder
Published
2024-07-01
Title
Cost Calculator Builder < 3.2.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cost-calculator-builder
Published
2024-07-01
Title
Cost Calculator Builder < 3.2.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation
Slug
cost-calculator-builder
Published
2024-08-07
Title
Cost Calculator Builder < 3.2.16 - Unauthenticated SQL Injection
Slug
cost-calculator-builder
Published
2024-09-09
Title
Cost Calculator Builder < 3.2.29 - Admin+ SQL Injection
Slug
cost-calculator-builder
Published
2024-11-27
Title
Cost Calculator Builder < 3.2.43 - Settings update via CSRF
Slug
cost-calculator-builder
Published
2025-03-29
Title
Cost Calculator Builder < 3.2.66 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cost-calculator-builder
Published
2025-04-10
Title
Cost Calculator Builder < 3.2.68 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter
Slug
cost-calculator-builder
Published
2025-04-16
Title
Cost Calculator Builder < 3.2.68 - Unauthenticated SQL Injection
Slug
cost-calculator-builder
Published
2025-05-19
Title
Cost Calculator Builder < 3.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cost-calculator-builder
Published
2025-10-03
Title
Cost Calculator Builder < 3.5.33 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions