WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-contact-form-7-spam-blocker
Published
2026-03-12
Title
Spam Protect for Contact Form 7 < 1.2.10 - Editor+ Remote Code Execution
Slug
wp-contact-form-7-spam-blocker
Published
2026-03-20
Title
Spam Protect for Contact Form 7 < 1.2.10 - Authenticated (Editor+) Arbitrary File Deletion
Slug
wp-contact-form-iii
Published
2025-03-21
Title
WP Contact Form III <= 1.6.2d - Reflected Cross-Site Scripting
Slug
wp-contact-form7-email-spam-blocker
Published
2025-01-24
Title
WP Contact Form7 Email Spam Blocker <= 1.0.0 - Reflected Cross-Site Scripting
Slug
wp-contact-slider
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-contact-slider
Published
2022-06-13
Title
WP Contact Slider < 2.4.7 - Editor+ Stored Cross-Site Scripting
Slug
wp-contact-slider
Published
2022-10-10
Title
WP Contact Slider < 2.4.8 - Admin+ Stored Cross-Site Scripting
Slug
wp-contact-slider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-contacts-manager
Published
2022-05-02
Title
WP Contacts Manager <= 2.2.4 - Unauthenticated SQLi
Slug
wp-content-copy-protector
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via CSRF
Slug
wp-content-copy-protector
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via Low Privilege User
Slug
wp-content-copy-protector
Published
2022-02-16
Title
WP Content Copy Protection & No Right Click < 3.4.5 - Settings Update via CSRF
Slug
wp-content-copy-protector
Published
2023-07-04
Title
WP Content Copy Protection & No Right Click < 3.5.6 - Admin+ Stored XSS
Slug
wp-content-copy-protector
Published
2024-10-15
Title
WP Content Copy Protection & No Right Click < 3.6.1 - Cross-Site Request Forgery
Slug
wp-content-filter
Published
2023-03-20
Title
WP Content Filter – Censor All Offensive Content From Your Site < 3.1.0 - Admin+ Stored Cross Site Scripting
Slug
wp-content-permission
Published
2026-02-03
Title
WP Content Permission <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ohmem-message' Parameter
Slug
wp-content-pilot
Published
2023-10-03
Title
WP Content Pilot – Autoblogging & Affiliate Marketing Plugin < 1.3.4 - Authenticated (Contributor+) Content Injection
Slug
wp-content-pilot
Published
2025-11-08
Title
Content Pilot < 2.1.8 - Missing Authorization
Slug
wp-content-protection
Published
2025-09-22
Title
WP Content Protection <= 1.3 - Cross-Site Request Forgery
Slug
wp-content-security-policy
Published
2025-05-14
Title
WP Content Security Plugin <= 2.3 - Unauthenticated Stored Cross-Site Scripting via CSP-Report Fields
Slug
wp-contest
Published
2024-11-08
Title
WP Contest <= 1.0.0 - Authenticated (Contributor+) SQL Injection
Slug
wp-contest
Published
2025-01-16
Title
WP Contest <= 1.0.0 - Reflected Cross-Site Scripting
Slug
wp-cookie
Published
2025-01-07
Title
WP Cookie <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-cookie-allow
Published
2026-05-04
Title
WeePie Cookie Allow < 3.4.12 - Unauthenticated SQL Injection via 'consent' Parameter
Slug
wp-cookie-consent
Published
2025-04-24
Title
WP Cookie Consent <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting