WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cryptocurrency-price-ticker-widget
Published
2024-03-13
Title
Cryptocurrency Widgets – Price Ticker & Coins List < 2.6.9 - Missing Authorization
Slug
cryptocurrency-price-ticker-widget
Published
2024-08-16
Title
Cryptocurrency Widgets – Price Ticker & Coins List < 2.8.1 - Reflected Cross-Site Scripting
Slug
cryptocurrency-price-widget
Published
2024-12-11
Title
Cryptocurrency Price Widget < 1.2.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
cryptocurrency-prices
Published
2023-06-26
Title
Cryptocurrency All-in-One <= 3.0.19 - Contributor+ Stored XSS
Slug
cryptocurrency-pricing-list
Published
2022-09-14
Title
Cryptocurrency Pricing list and Ticker <= 1.5 - Reflected Cross-Site Scripting
Slug
cryptocurrency-prijsvergelijking-widget
Published
2026-05-26
Title
Cryptocurrency Prijsvergelijking Widget <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute
Slug
cryptocurrency-product-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cryptocurrency-product-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cryptocurrency-widgets-for-elementor
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
cryptocurrency-widgets-for-elementor
Published
2024-11-27
Title
Cryptocurrency Widgets For Elementor < 1.6.5 - Unauthenticated Local File Inclusion
Slug
cryptocurrency-widgets-pack
Published
2022-12-09
Title
Cryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLi
Slug
cryptocurrency-widgets-pack
Published
2025-03-31
Title
Cryptocurrency Widgets Pack <= 2.0.1 - Missing Authorization
Slug
cryptx
Published
2025-12-04
Title
CryptX < 4.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cs-element-bucket
Published
2024-12-02
Title
Advanced Element Bucket Addons for Elementor <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cs-framework
Published
2025-03-06
Title
CS Framework < 7.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
cs-framework
Published
2025-03-06
Title
CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read
Slug
cslider
Published
2024-10-14
Title
cSlider <= 2.4.2 - Cross-Site Request Forgery
Slug
csprite
Published
2023-12-04
Title
CSprite <= 1.1 - Cross-Site Request Forgery
Slug
css-addons
Published
2025-01-16
Title
Custom CSS Addons <= 1.9.1 - Reflected Cross-Site Scripting
Slug
css-for-elementor
Published
2025-01-03
Title
ElementsCSS Addons for Elementor <= 1.0.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
css-for-elementor
Published
2025-04-01
Title
ElementsCSS Addons for Elementor <= 1.0.8.7 - Unauthenticated Server-Side Request Forgery
Slug
css-hero
Published
2019-12-02
Title
CSS Hero < 4.07 - Authenticated Reflected XSS
Slug
css-javascript-toolbox
Published
2018-12-08
Title
CSS & JavaScript Toolbox <= 8.4.1 - Database backup Disclosure
Slug
css-javascript-toolbox
Published
2023-12-19
Title
CSS & JavaScript Toolbox < 11.9 - Contributor+ Stored XSS
Slug
css-javascript-toolbox
Published
2025-07-22
Title
CSS & JavaScript Toolbox < 12.0.3 - Authenticated (Subscriber+) Local File Inclusion