WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-copy-media-url
Published
2025-03-31
Title
WP Copy Media URL <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-copyprotect
Published
2015-06-30
Title
WP-CopyProtect < 3.1.0 - CSRF & Stored Cross-Site Scripting (XSS)
Slug
wp-copyprotect
Published
2023-07-19
Title
WP-CopyProtect <= 3.1.0 - Settings Update via CSRF
Slug
wp-copysafe-web
Published
2017-03-09
Title
CopySafe Web Protection <= 2.5 - Cross-Site Request Forgery (CSRF)
Slug
wp-copysafe-web
Published
2023-04-03
Title
CopySafe Web Protection < 3.14 - Unauthenticated Reflected XSS
Slug
wp-copysafe-web
Published
2024-07-05
Title
CopySafe Web Protection < 3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-copysafe-web
Published
2024-07-19
Title
CopySafe Web Protection < 4.0 - Reflected Cross-Site Scripting
Slug
wp-copysafe-web
Published
2025-09-26
Title
CopySafe Web Protection < 5.2 - Missing Authorization
Slug
wp-cors
Published
2023-04-28
Title
WP-CORS < 0.2.2 - Admin+ Stored XSS
Slug
wp-cors
Published
2026-01-28
Title
WP-CORS <= 0.2.2 - Missing Authorization
Slug
wp-count-down-timer
Published
2025-11-10
Title
WP Count Down Timer <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-counter-up
Published
2024-05-07
Title
Counter Up – Animated Number Counter & Milestone Showcase < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-counter-up
Published
2024-11-26
Title
Counter Up – Animated Number Counter & Milestone Showcase < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-coupons-and-deals
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-coupons-and-deals
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-coupons-and-deals
Published
2025-12-11
Title
Coupons and Deals < 3.2.5 - Missing Authorization
Slug
wp-coupons-and-deals
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
wp-course-manager
Published
2024-11-01
Title
WP Course Manager <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-courses
Published
2020-09-28
Title
WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure
Slug
wp-courses
Published
2021-08-16
Title
WP Courses LMS < 2.0.44 - Reflected Cross-Site Scripting
Slug
wp-courses
Published
2021-08-16
Title
WP Courses LMS < 2.0.44 - Authenticated Stored XSS via Video Embed Code
Slug
wp-courses
Published
2023-11-14
Title
WP Courses LMS < 3.2.4 - Missing Authorization
Slug
wp-courses
Published
2023-11-14
Title
WP Courses LMS < 3.2.4 - Cross-Site Request Forgery
Slug
wp-courses
Published
2023-11-14
Title
WP Courses LMS < 3.2.4 - Subscriber+ Arbitrary Options Update
Slug
wp-courses
Published
2024-12-11
Title
WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses < 3.2.22 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Update