WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
country-flags-for-elementor
Published
2024-10-14
Title
Country Flags for Elementor <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
country-state-city-auto-dropdown
Published
2024-04-15
Title
Country State City Dropdown CF7 < 2.7.2 - Missing Authorization
Slug
country-state-city-auto-dropdown
Published
2024-05-21
Title
Country State City Dropdown CF7 < 2.7.3 - Unauthenticated SQL Injection
Slug
coupon-code-plugin
Published
2014-08-01
Title
coupon-code-plugin <= 2.1 - XSS in ZeroClipboard
Slug
coupon-creator
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
coupon-creator
Published
2020-09-16
Title
Coupon Creator < 3.1.1 - Arbitrary Settings Update via CSRF
Slug
coupon-lite
Published
2025-01-06
Title
Coupon Plugin < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
coupon-lite
Published
2024-12-19
Title
Coupon <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
coupon-referral-program
Published
2024-01-03
Title
Coupon Referral Program < 1.8.5 - Sensitive Information Disclosure
Slug
coupon-referral-program
Published
2024-02-05
Title
Coupon Referral Program < 1.8.4 - Unauthenticated PHP Object Injection
Slug
coupon-reveal-button
Published
2024-04-22
Title
Coupon & Discount Code Reveal Button < 1.2.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
coupon-x-discount-pop-up
Published
2025-01-10
Title
Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups < 1.3.6 - Missing Authorization to Authenticated (Contributor+) PHP Object Injection
Slug
coupon-x-discount-pop-up
Published
2025-01-10
Title
Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups < 1.3.6 - Missing Authorization
Slug
coupon-zen
Published
2023-02-28
Title
Coupon Zen < 1.0.6 - Arbitrary Plugin Activation via CSRF
Slug
couponapi
Published
2025-09-10
Title
Coupon API <= 6.2.12 - Authenticated (Administrator+) SQL Injection via 'log_duration'
Slug
couponer
Published
2014-08-01
Title
Couponer <= 1.2 - SQL Injection
Slug
couponer-elementor
Published
2025-12-31
Title
Couponer for Elementor <= 1.1.7 - Missing Authorization
Slug
coupons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
couponxxl-cpt
Published
2025-07-01
Title
CouponXxL Custom Post Types < 3.1 - Unauthenticated Privilege Escalation
Slug
course-booking-platform
Published
2025-09-05
Title
Course Booking Platform <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
course-booking-system
Published
2025-01-13
Title
Course Booking System < 6.0.7 - Unauthenticated SQL Injection
Slug
course-booking-system
Published
2025-04-04
Title
Course Booking System < 6.1.1 - Missing Authorization
Slug
course-booking-system
Published
2025-04-14
Title
Course Booking System < 6.1.3 - Reflected Cross-Site Scripting
Slug
course-booking-system
Published
2025-11-07
Title
Course Booking System < 6.1.6 - Missing Authorization to Unauthenticated Booking Data Export
Slug
course-migration-for-learndash
Published
2025-01-03
Title
Course Migration for LearnDash <= 1.0.2 - Authenticated (Subscriber+) Server-Side Request Forgery