WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-custom-pages
Published
2014-08-01
Title
WP Custom Pages 0.5.0.1 - LFI
Slug
wp-custom-post-rss-feed
Published
2025-02-03
Title
WP Custom Post RSS Feed <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-custom-post-template
Published
2023-09-05
Title
WP Custom Post Template <= 1.0 - Settings Update via CSRF
Slug
wp-custom-taxonomy-image
Published
2024-10-21
Title
Category and Taxonomy Image <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-custom-taxonomy-meta
Published
2024-10-21
Title
Category and Taxonomy Meta Fields <= 1.0.0 - Cross-Site Request Forgery to Taxonomy Meta Add/Delete
Slug
wp-custom-taxonomy-meta
Published
2024-10-21
Title
Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-custom-taxonomy-meta
Published
2024-10-21
Title
Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-custom-widget-area
Published
2023-10-03
Title
WP Custom Widget area <= 1.2.5 - Missing Authorization
Slug
wp-custom-widget-area
Published
2023-12-21
Title
WP Custom Widget Area <= 1.2.5 - Subscriber+ Menus Creation/Deletion/Update
Slug
wp-customer-reviews
Published
2016-04-05
Title
WP Customer Reviews < 3.0.9 - CSRF & XSS
Slug
wp-customer-reviews
Published
2020-08-20
Title
WP Customer Reviews < 3.4.3 - Multiple Unauthenticated and Low Priv Authenticated Stored XSS
Slug
wp-customer-reviews
Published
2021-05-04
Title
WP Customer Reviews < 3.5.6 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wp-customer-reviews
Published
2023-09-13
Title
WP Customer Reviews < 3.6.7 - Admin+ Stored XSS
Slug
wp-customer-reviews
Published
2023-10-31
Title
WP Customer Reviews < 3.6.7 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
wp-customer-reviews
Published
2024-03-25
Title
WP Customer Reviews < 3.7.1 - Malicious Redirect via HTTP-EQUIV Injection
Slug
wp-customer-reviews
Published
2026-02-18
Title
WP Customer Reviews < 3.7.6 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter
Slug
wp-customize-login-page
Published
2025-04-24
Title
WP Customize Login Page <= 1.6.5 - Missing Authorization
Slug
wp-customize-login-page
Published
2025-04-24
Title
WP Customize Login Page <= 1.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-cycle-playlist
Published
2014-08-01
Title
WP Cycle Playlist - Multiple Vulnerabilities
Slug
wp-cycle-text-announcement
Published
2025-10-02
Title
Wp cycle text announcement <= 8.1 - Authenticated (Contributor+) SQL Injection
Slug
wp-cyr-cho
Published
2025-04-25
Title
wp-cyr-cho <= 0.1 - Cross-Site Request Forgery
Slug
wp-d3
Published
2016-11-21
Title
Wp-D3 <= 2.4 - Cross-Site Request Forgery (CSRF)
Slug
wp-d3
Published
2023-04-17
Title
Wp-D3 <= 2.4.1 - Contributor+ Stored XSS
Slug
wp-dark-mode
Published
2023-01-30
Title
WP Dark Mode < 4.0.0 - Contributor+ Stored XSS in Shortcode
Slug
wp-dark-mode
Published
2023-03-06
Title
WP Dark Mode < 4.0.8 - Subscriber+ Local File Inclusion