WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-coder
Published
2023-02-17
Title
WP Coder < 2.5.4 - Admin+ SQLi
Slug
wp-coder
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
wp-coder
Published
2024-03-18
Title
WP Coder < 3.5.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-coder
Published
2025-01-31
Title
WP Coder – Code Snippets + HTML, CSS, JS and PHP Injection < 3.6.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-colorbox
Published
2020-08-17
Title
Colorbox Lightbox < 1.1.5 - Contributor+ Stored Cross-Site Scripting
Slug
wp-colorbox
Published
2025-08-20
Title
Colorbox Lightbox < 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-colorful-tag-cloud
Published
2025-03-24
Title
WP Colorful Tag Cloud <= 2.0.1 - Reflected Cross-Site Scripting
Slug
wp-coming-soon-booster
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-comment-designer-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-comment-fields
Published
2022-07-14
Title
WP Comments Fields < 4.1 - Admin+ Stored Cross-Site Scripting
Slug
wp-comment-fields
Published
2024-02-26
Title
Comments Extra Fields For Post,Pages and CPT < 5.1 - Cross-Site Request Forgery
Slug
wp-comment-fields
Published
2024-02-26
Title
Comments Extra Fields For Post,Pages and CPT < 5.1 - Missing Authorization
Slug
wp-comment-remix
Published
2008-10-14
Title
WP Comment Remix < 1.4.4 - SQL Injection
Slug
wp-commentnavi
Published
2023-01-17
Title
WP-CommentNavi < 1.12.2 - Admin+ Stored XSS
Slug
wp-company-info
Published
2025-11-20
Title
WP Company Info <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-compare-tables
Published
2025-03-11
Title
WP Compare Tables <= 1.0.5 - Cross-Site Request Forgery
Slug
wp-compiler
Published
2025-09-22
Title
WP Compiler <= 1.0.0 - Cross-Site Request Forgery
Slug
wp-compress-image-optimizer
Published
2024-01-03
Title
WP Compress < 6.10.34 - Unauthenticated Arbitrary File Read
Slug
wp-compress-image-optimizer
Published
2024-03-21
Title
WP Compress – Image Optimizer < 6.11.11 - Missing Authorization to Unauthenticated CDN Modification
Slug
wp-compress-image-optimizer
Published
2024-04-11
Title
WP Compress – Image Optimizer [All-In-One] < 6.11.01 - Cross-Site Request Forgery
Slug
wp-compress-image-optimizer
Published
2024-05-13
Title
WP Compress – Image Optimizer [All-In-One] < 6.20.02 - Open Redirect via css
Slug
wp-compress-image-optimizer
Published
2024-05-13
Title
WP Compress – Image Optimizer [All-In-One] < 6.20.02 - Missing Authorization
Slug
wp-compress-image-optimizer
Published
2024-09-30
Title
WP Compress – Image Optimizer [All-In-One] < 6.21.01 - Reflected Cross-Site Scripting
Slug
wp-compress-image-optimizer
Published
2025-01-03
Title
WP Compress – Instant Performance & Speed Optimization < 6.30.04 - Reflected Cross-Site Scripting via custom_server Parameter
Slug
wp-compress-image-optimizer
Published
2025-03-24
Title
WP Compress < 6.30.16 - Unauthenticated Server-Side Request Forgery via init Function