WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
credit-tracker
Published
2023-11-28
Title
Credit Tracker <= 1.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
credova-financial
Published
2021-09-29
Title
Credova_Financial < 1.4.9 - Sensitive Information Disclosure
Slug
credova-financial
Published
2025-04-10
Title
Credova_Financial < 2.4.9 - Reflected Cross-Site Scripting
Slug
credova-financial
Published
2025-05-07
Title
Credova_Financial < 2.5.1 - Cross-Site Request Forgery
Slug
crelly-slider
Published
2017-06-05
Title
Crelly Slider <= 1.1.1 - Multiple Unspecified Vulnerabilities
Slug
crelly-slider
Published
2019-06-06
Title
Crelly Slider <= 1.3.4 - Arbitrary File Upload
Slug
crelly-slider
Published
2024-04-15
Title
Crelly Slider <= 1.4.5 - Admin+ Stored XSS
Slug
crelly-slider
Published
2024-04-25
Title
Crelly Slider < 1.4.6 - Subscriber+ Insecure Direct Object Reference
Slug
crelly-slider
Published
2025-01-06
Title
Crelly Slider < 1.4.7 - Admin+ Stored XSS
Slug
cresta-addons-for-elementor
Published
2024-11-01
Title
Cresta Addons for Elementor < 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
creta-testimonial-showcase
Published
2025-10-24
Title
Creta Testimonial Showcase < 1.2.4 - Editor+ Local File Inclusion
Slug
crete-core
Published
2026-01-27
Title
Crete Core <= 1.4.3 - Unauthenticated SQL Injection
Slug
cricket-score
Published
2024-12-13
Title
Cricket Live Score < 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
criptopayer-elementor
Published
2025-12-31
Title
Criptopayer for Elementor <= 1.0.1 - Missing Authorization
Slug
crisp
Published
2021-12-16
Title
Crisp Live Chat < 0.32 - CSRF to Stored Cross-Site Scripting
Slug
crisp
Published
2024-03-13
Title
Crisp < 0.45 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
critical-site-intel-stats
Published
2024-12-14
Title
Critical Site Intel <= 1.0 - Unauthenticated SQL Injection
Slug
crm-customer-relationship-management-by-vcita
Published
2023-06-02
Title
CRM and Lead Management by vcita < 2.7.0 - Contributor+ Stored Cross-Site Scripting
Slug
crm-customer-relationship-management-by-vcita
Published
2023-06-02
Title
CRM and Lead Management by vcita < 2.7.1 - Settings Update Via CSRF
Slug
crm-customer-relationship-management-by-vcita
Published
2025-03-12
Title
CRM and Lead Management by vcita < 2.8.0 - Susbcriber+ Widget Toggle
Slug
crm-customer-relationship-management-by-vcita
Published
2025-03-25
Title
CRM and Lead Management by vcita < 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
crm-customer-relationship-management-by-vcita
Published
2025-07-21
Title
CRM and Lead Management by vcita < 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter
Slug
crm-erp-business-solution
Published
2025-06-19
Title
CRM ERP Business Solution <= 1.13 - Missing Authorization
Slug
crm-memberships
Published
2023-04-24
Title
CRM Memberships < 2.5 - Admin+ Stored XSS
Slug
crm-memberships
Published
2025-12-04
Title
CRM Memberships < 2.7 - Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrm_changepassword' AJAX Endpoint