WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-comment-notifications
Published
2025-02-03
Title
Custom Comment Notifications <= 1.0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
custom-contact-forms
Published
2014-08-01
Title
Custom Contact Forms < 5.1.0.3 - Authenticated Cross Site Scripting
Slug
custom-contact-forms
Published
2014-09-17
Title
Custom Contact Forms < 5.1.0.4 - Unauthenticated Database Import/Export
Slug
custom-content-scrollbar
Published
2025-03-31
Title
Custom Content Scrollbar <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-content-shortcode
Published
2022-02-02
Title
Custom Content Shortcode < 4.0.2 - Authenticated Stored Cross-Site Scripting
Slug
custom-content-shortcode
Published
2022-02-02
Title
Custom Content Shortcode < 4.0.2 - Authenticated Arbitrary File Access / LFI
Slug
custom-content-shortcode
Published
2022-02-02
Title
Custom Content Shortcode < 4.0.1 - Unauthorised Arbitrary Post Metadata Access
Slug
custom-content-shortcode
Published
2023-02-22
Title
Custom Content Shortcode <= 4.0.2 - Contributor+ Stored XSS
Slug
custom-content-shortcode
Published
2023-02-22
Title
Custom Content Shortcode <= 4.0.2 - Contributor+ LFI
Slug
custom-content-type-manager
Published
2012-06-11
Title
Custom Content Type Manager < 0.9.8.9 - Remote File Upload
Slug
custom-content-type-manager
Published
2015-05-21
Title
Custom Content Type Manager <= 0.9.8.5 - Remote Code Execution
Slug
custom-content-type-manager
Published
2016-03-07
Title
Custom Content Type Manager >= 0.9.8.8 - Multiple Vulnerabilities
Slug
custom-css
Published
2024-11-22
Title
Custom CSS, JS & PHP < 2.4.0 - Reflected Cross-Site Scripting
Slug
custom-css
Published
2025-04-16
Title
Custom CSS, JS & PHP < 2.4.2 - Cross-Site Request Forgery to Remote Code Exectuiron
Slug
custom-css-editor
Published
2025-10-08
Title
Custom CSS <= 1.4.0 - Missing Authorization
Slug
custom-css-js
Published
2017-07-24
Title
Simple Custom CSS and JS <= 3.3 - Authenticated Cross-Site Scripting (XSS)
Slug
custom-css-js-php
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Slug
custom-css-js-php
Published
2021-06-08
Title
Custom CSS, JS & PHP <= 2.0.7 - Arbitrary Settings Update via CSRF
Slug
custom-css-pro
Published
2019-06-24
Title
Custom CSS Pro <= 1.0.3 - CSRF & XSS
Slug
custom-dash
Published
2024-06-05
Title
Custom Dash <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
custom-dashboard-page
Published
2025-03-11
Title
Custom Dashboard Page <= 1.0 - Cross-Site Request Forgery
Slug
custom-dashboard-widgets
Published
2024-01-16
Title
Custom Dashboard Widgets <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via cdw_DashboardWidgets
Slug
custom-database-applications-by-caspio
Published
2025-03-31
Title
Custom Database Applications by Caspio <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-database-tables
Published
2025-01-07
Title
Custom DataBase Tables <= 2.1.34 - Reflected Cross-Site Scripting
Slug
custom-email-options
Published
2022-04-11
Title
Wbcom Designs Plugins - Subscriber+ Arbitrary Plugin Installation, Activation and Deactivation