WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
crm-customer-relationship-management-by-vcita
Published
2023-06-02
Title
CRM and Lead Management by vcita < 2.7.0 - Contributor+ Stored Cross-Site Scripting
Slug
crm-customer-relationship-management-by-vcita
Published
2023-06-02
Title
CRM and Lead Management by vcita < 2.7.1 - Settings Update Via CSRF
Slug
crm-customer-relationship-management-by-vcita
Published
2025-03-12
Title
CRM and Lead Management by vcita < 2.8.0 - Susbcriber+ Widget Toggle
Slug
crm-customer-relationship-management-by-vcita
Published
2025-03-25
Title
CRM and Lead Management by vcita < 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
crm-customer-relationship-management-by-vcita
Published
2025-07-21
Title
CRM and Lead Management by vcita < 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter
Slug
crm-erp-business-solution
Published
2025-06-19
Title
CRM ERP Business Solution <= 1.13 - Missing Authorization
Slug
crm-memberships
Published
2023-04-24
Title
CRM Memberships < 2.5 - Admin+ Stored XSS
Slug
crm-memberships
Published
2025-12-04
Title
CRM Memberships < 2.7 - Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrm_changepassword' AJAX Endpoint
Slug
crm-memberships
Published
2025-12-04
Title
CRM Memberships <= 2.5 - Missing Authorization to Unauthenticated 'ntzcrm_add_new_tag' AJAX Action
Slug
crm-perks-forms
Published
2022-09-30
Title
CRM Perks Forms < 1.1.1 - Reflected XSS
Slug
crm-perks-forms
Published
2023-05-30
Title
CRM Perks Forms < 1.1.2 - Admin+ Stored Cross-Site Scripting
Slug
crm-perks-forms
Published
2023-12-27
Title
CRM Perks Forms < 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
crm-perks-forms
Published
2024-03-28
Title
CRM Perks Forms < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
crm-perks-forms
Published
2024-03-28
Title
CRM Perks Forms < 1.1.5 - Unauthenticated SQL Injection
Slug
crm-perks-forms
Published
2024-03-28
Title
CRM Perks Forms < 1.1.5 - Authenticated (Contributor+) SQL Injection
Slug
crm-perks-forms
Published
2024-07-01
Title
CRM Perks Forms < 1.1.6 - Missing Authorization to Unauthenticated Form Submission
Slug
crm-perks-forms
Published
2024-08-05
Title
CRM Perks Forms < 1.1.4 - Authenticated (Administrator+) Arbitrary File Upload
Slug
crm2go
Published
2024-11-08
Title
CRM 2go <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
croma-music
Published
2025-01-06
Title
Croma Music < 3.6.1 - Authenticated (Subscriber+) Arbitrary Options Update in ironMusic_ajax
Slug
cron-logger
Published
2025-06-27
Title
Cron Logger <= 1.3.0 - Missing Authorization
Slug
crony
Published
2015-10-27
Title
Crony Cronjob Manager < 0.4.7 - Cross-Site Scripting (XSS) & CSRF
Slug
crony
Published
2024-04-11
Title
Crony Cronjob Manager <= 0.5.0 - Cross-Site Request Forgery
Slug
croprefine
Published
2025-07-23
Title
CropRefine <= 1.2.1 - Reflected Cross-Site Scripting
Slug
cross-linker
Published
2022-05-30
Title
Cross-Linker <= 3.0.1.9 - Arbitrary Cross-Link Creation via CSRF
Slug
cross-rss
Published
2014-08-01
Title
Cross RSS 1.7 - proxy.php rss Parameter Local File Inclusion