WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cp-multi-view-calendar
Published
2022-08-19
Title
Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Deletion
Slug
cp-multi-view-calendar
Published
2022-08-16
Title
Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSS
Slug
cp-multi-view-calendar
Published
2025-09-22
Title
CP Multi View Event Calendar < 1.4.37 - Missing Authorization
Slug
cp-multi-view-calendar
Published
2026-03-17
Title
CP Multi View Events Calendar < 1.4.40 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
cp-polls
Published
2016-03-02
Title
CP Polls <= 1.0.8 - Multiple CSRF Vulnerabilities
Slug
cp-polls
Published
2016-03-02
Title
CP Polls <= 1.0.8 - Multiple XSS Vulnerabilities
Slug
cp-polls
Published
2015-05-20
Title
CP Polls < 1.0.5 - XSS
Slug
cp-polls
Published
2014-11-20
Title
CP Polls < 1.0.1 - XSS
Slug
cp-polls
Published
2024-02-05
Title
CP Polls < 1.0.72 - Unauthenticated Poll Limit Bypass
Slug
cp-polls
Published
2024-02-05
Title
CP Polls < 1.0.72 - Unauthenticated Content Injection
Slug
cp-polls
Published
2024-09-01
Title
Polls CP <= 1.0.75 - Admin+ Stored XSS via Custom Styles
Slug
cp-polls
Published
2024-09-01
Title
Polls CP <= 1.0.75 - Admin+ Stored Cross-Site Scripting
Slug
cp-polls
Published
2024-09-24
Title
CP Polls < 1.0.75 - Reflected Cross-Site Scripting
Slug
cp-polls
Published
2025-06-19
Title
CP Polls < 1.0.82 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cp-polls
Published
2026-06-15
Title
Polls CP < 1.0.9 - Cross-Site Request Forgery
Slug
cp-polls
Published
2026-06-15
Title
Polls CP < 1.0.9 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
cp-reservation-calendar
Published
2015-09-15
Title
CP Reservation Calendar <= 1.1.6 - Unauthenticated SQL Injection
Slug
cp-simple-newsletter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cp-simple-newsletter
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
cpa-offerwall
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cpi-wp-migration
Published
2025-11-10
Title
WP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated Arbitrary File Upload
Slug
cpl
Published
2014-08-01
Title
Copperleaf Photolog - SQL injection
Slug
cpo-companion
Published
2023-01-06
Title
CPO Companion < 1.1.0 - Contributor+ Stored XSS via Shortcode
Slug
cpo-companion
Published
2023-01-05
Title
CPO Companion < 1.1.0 - Admin+ Stored XSS
Slug
cpo-companion
Published
2024-04-29
Title
CPO Companion <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting