WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-championship
Published
2022-06-16
Title
WP Championship < 9.3 - Multiple CSRF
Slug
wp-change-email-sender
Published
2024-03-25
Title
WP Change Email Sender < 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-change-status-notifier
Published
2026-01-06
Title
WP Status Notifier <= 1.0 - Cross-Site Request Forgery to Settings Update
Slug
wp-chart-generator
Published
2025-08-11
Title
Wp chart generator <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpchart Shortcode
Slug
wp-charts
Published
2023-09-19
Title
WordPress Charts < 0.7.0 - Contributor+ Stored XSS
Slug
wp-chatbot
Published
2026-03-20
Title
WP-Chatbot for Messenger <= 4.9 - Missing Authorization to Unauthenticated Chatbot Configuration Takeover
Slug
wp-chgfontsize
Published
2022-05-23
Title
WP-chgFontSize <= 1.8 - Arbitrary Settings Update via CSRF to Stored XSS
Slug
wp-child-theme-generator
Published
2023-11-20
Title
WP Child Theme Generator < 1.1.3 - Admin+ Arbitrary File Upload
Slug
wp-child-theme-generator
Published
2024-06-20
Title
WP Child Theme Generator < 1.1.2 - Missing Authorization to Unauthenticated Child Theme Creation/Activation
Slug
wp-chinese-conversion
Published
2023-05-10
Title
WP Chinese Conversion <= 1.1.16 - Reflected XSS
Slug
wp-chrono
Published
2025-04-01
Title
WP Chrono <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-church-center
Published
2025-02-02
Title
WP Church Center <= 1.3.3 - Reflected Cross-Site Scripting
Slug
wp-church-donation
Published
2025-03-24
Title
WP Church Donation <= 1.7 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-church-donation
Published
2025-03-31
Title
WP Church Donation <= 1.7 - Cross-Site Request Forgery
Slug
wp-circliful
Published
2026-04-14
Title
WP Circliful <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
wp-cirrus
Published
2023-07-04
Title
WP-Cirrus <= 0.6.11 - Admin+ Stored Cross-Site Scripting
Slug
wp-clanwars
Published
2026-01-23
Title
WP-ClanWars <= 2.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Slug
wp-clap
Published
2025-01-16
Title
WP-Clap <= 1.5 - Reflected Cross-Site Scripting
Slug
wp-clean-up
Published
2023-03-03
Title
WP Clean Up <= 1.2.3 - Cross-Site Request Forgery (CSRF)
Slug
wp-cleanfix
Published
2014-08-01
Title
wp-cleanfix - Remote Comm& Execution, CSRF & XSS
Slug
wp-cleanfix
Published
2023-11-28
Title
WP Cleanfix < 5.7.0 - Subscriber+ Post/Comment/Post Meta Content Replacement
Slug
wp-cleanup-and-basic-functions
Published
2024-10-04
Title
WP Cleanup and Basic Functions <= 2.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
wp-click-info
Published
2025-02-20
Title
WP Click Info <= 2.7.4 - Reflected XSS
Slug
wp-click-track
Published
2025-07-14
Title
WP-Click-Tracker <= 0.7.3 - Reflected Cross-Site Scripting
Slug
wp-client-logo-carousel
Published
2023-02-14
Title
Client Logo Carousel <= 3.0.0 - Contributor+ Stored XSS