WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
copy-or-move-comments
Published
2023-10-11
Title
Copy Or Move Comments <= 5.0.4 - Reflected XSS
Slug
copy-or-move-comments
Published
2023-10-03
Title
Copy Or Move Comments <= 5.0.4 - Authenticated (Subscriber+) SQL Injection
Slug
copy-the-code
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
copy-the-code
Published
2023-09-22
Title
Copy Anything to Clipboard < 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
copy-the-code
Published
2024-11-13
Title
Copy Anything to Clipboard < 4.0.4 - Contributor+ Stored XSS
Slug
copy-the-code
Published
2026-10-26
Title
Copy Anything to Clipboard < 5.5.5 - Contributor+ Stored XSS via 'success-text' Shortcode Attribute
Slug
copymatic
Published
2024-05-14
Title
Copymatic – AI Content Writer & Generator < 1.7 - Unauthenticated Arbitrary File Upload
Slug
copymatic
Published
2024-06-06
Title
Copymatic – AI Content Writer & Generator < 2.0 - Missing Authorization
Slug
copymatic
Published
2025-07-17
Title
Copymatic – AI Content Writer & Generator <= 2.1 - Cross-Site Request Forgery to Settings Update
Slug
copypress-rest-api
Published
2025-09-29
Title
Copypress Rest API 1.1 - 1.2 - Unauthenticated Remote Code Execution
Slug
copyright-licensing-tools
Published
2014-08-01
Title
iCopyright(R) Article Tools <= 1.1.4 - SQL Injection
Slug
copyright-safeguard-footer-notice
Published
2025-01-16
Title
Copyright Safeguard Footer Notice <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
copyrightpro
Published
2023-09-29
Title
CopyRightPro <= 2.1 - Settings Update via CSRF
Slug
copyscape-premium
Published
2024-09-30
Title
Copyscape Premium < 1.4.0 - Stored XSS via CSRF
Slug
copyscape-premium
Published
2026-01-10
Title
Copyscape Premium < 1.4.2 - Cross-Site Request Forgery
Slug
core-control
Published
2022-05-23
Title
Core Control <= 1.2.1 - Arbitrary Settings Update via CSRF
Slug
core-web-vitals-pagespeed-booster
Published
2025-12-31
Title
Core Web Vitals & PageSpeed Booster <= 1.0.27 - Missing Authorization
Slug
core-web-vitals-pagespeed-booster
Published
2026-09-23
Title
Core Web Vitals & PageSpeed Booster < 1.0.32 - Unauthenticated Stored Cross-Site Scripting
Slug
coreactivity
Published
2024-01-26
Title
coreActivity < 1.8.1 - Unauthenticated Stored XSS
Slug
coreactivity
Published
2024-03-27
Title
coreActivity < 2.1 - Unauthenticated IP Spoofing
Slug
coreactivity
Published
2025-04-07
Title
coreActivity: Activity Logging for WordPress < 2.7.1 - Authenticated (Subscriber+) SQL Injection
Slug
coreactivity
Published
2026-05-12
Title
coreActivity: Activity Logging for WordPress < 3.1 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta Field
Slug
corner-ad
Published
2017-02-16
Title
Corner Ad < 1.0.8 - Admin+ Stored XSS
Slug
corner-ad
Published
2022-09-09
Title
Corner Ad < 1.0.57 - Ads Deletion via CSRF
Slug
cornerstone
Published
2024-04-16
Title
Cornerstone < 0.8.1 - Reflected Cross-Site Scripting via PHP_SELF