WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-crowdfunding
Published
2024-10-25
Title
WP Crowdfunding < 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode
Slug
wp-crowdfunding
Published
2024-12-12
Title
WP Crowdfunding < 2.1.13 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation
Slug
wp-crowdfunding
Published
2024-12-12
Title
WP Crowdfunding < 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-crowdfunding
Published
2025-03-11
Title
WP Crowdfunding < 2.1.15 - Missing Authorization to Authenticated (Subscriber+) Post Content Download
Slug
wp-crowdfunding
Published
2025-04-01
Title
WP Crowdfunding < 2.1.16 - Contributor+ Stored XSS
Slug
wp-crowdfunding
Published
2026-08-10
Title
WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Update Modification via IDOR
Slug
wp-crowdfunding
Published
2026-08-10
Title
WP Crowdfunding < 2.2.1 - Subscriber+ Order Data Disclosure via IDOR
Slug
wp-crowdfunding
Published
2026-08-10
Title
WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Creation via Missing Authorization
Slug
wp-crowdfunding
Published
2026-08-14
Title
WP Crowdfunding < 2.2.1 - Unauthenticated Insecure Direct Object Reference
Slug
wp-crowdfunding
Published
2026-09-08
Title
WP Crowdfunding < 2.2.2 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta
Slug
wp-crowdfunding
Published
2026-09-08
Title
WP Crowdfunding < 2.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter
Slug
wp-crowdfunding
Published
2026-10-28
Title
WP Crowdfunding <= 2.2.2 - Unauthenticated Information Exposure
Slug
wp-crowdfunding
Published
2026-10-13
Title
WP Crowdfunding <= 2.2.2 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-csv
Published
2022-12-15
Title
WP CSV <= 1.8.0.0 - Reflected XSS via CSV Import
Slug
wp-csv-exporter
Published
2022-11-09
Title
WP CSV Exporter < 1.3.7 - Admin+ SQLi
Slug
wp-csv-exporter
Published
2022-11-29
Title
WP CSV Exporter < 1.3.7 - CSV Injection
Slug
wp-csv-to-database
Published
2022-12-15
Title
WP CSV to Database <= 2.6 - CSRF
Slug
wp-cufon
Published
2024-04-15
Title
WP-Cufon <= 1.6.10 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-cumulus
Published
2009-11-25
Title
WP-Cumulus < 1.23 - Vulnerabilities
Slug
wp-cumulus
Published
2011-11-20
Title
WP-Cumulus - Cross Site Scripting Vulnerabily
Slug
wp-cumulus
Published
2009-09-27
Title
WP Cumulus < 1.22 - XSS
Slug
wp-currency-exchange-rates
Published
2024-12-11
Title
WP Currency Exchange Rates < 1.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-curriculo-vitae
Published
2021-03-26
Title
WP-Curricul Vitea Free <= 6.3 - Unauthenticated Arbitrary File Upload to RCE
Slug
wp-custom-admin-interface
Published
2022-12-13
Title
WP Custom Admin Interface < 7.29 - Admin+ PHP Object Injection
Slug
wp-custom-admin-interface
Published
2023-09-29
Title
WP Custom Admin Interface < 7.33 - Missing Authorization to Transients Deletion