WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-cookie
Published
2025-01-07
Title
WP Cookie <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-cookie-consent
Published
2025-04-24
Title
WP Cookie Consent <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-cookie-law-info
Published
2024-07-06
Title
WP Cookie Law Info <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-cookie-user-info
Published
2021-12-27
Title
WP Cookie User Info < 1.0.9 - Admin+ SQL Injection
Slug
wp-cookie-user-info
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-cookiechoise
Published
2021-09-20
Title
WP Cookie Choice <= 1.1.0 - CSRF to Stored Cross-Site Scripting
Slug
wp-cookies-alert
Published
2025-01-16
Title
WP Cookies Alert <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-cookies-enabler
Published
2024-12-11
Title
WP Cookies Enabler <= 1.0.1 - Unauthenticated Local File Inclusion
Slug
wp-copy-media-url
Published
2025-03-31
Title
WP Copy Media URL <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-copyprotect
Published
2015-06-30
Title
WP-CopyProtect < 3.1.0 - CSRF & Stored Cross-Site Scripting (XSS)
Slug
wp-copyprotect
Published
2023-07-19
Title
WP-CopyProtect <= 3.1.0 - Settings Update via CSRF
Slug
wp-copysafe-web
Published
2017-03-09
Title
CopySafe Web Protection <= 2.5 - Cross-Site Request Forgery (CSRF)
Slug
wp-copysafe-web
Published
2023-04-03
Title
CopySafe Web Protection < 3.14 - Unauthenticated Reflected XSS
Slug
wp-copysafe-web
Published
2024-07-05
Title
CopySafe Web Protection < 3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-copysafe-web
Published
2024-07-19
Title
CopySafe Web Protection < 4.0 - Reflected Cross-Site Scripting
Slug
wp-copysafe-web
Published
2025-09-26
Title
CopySafe Web Protection <= 5.1 - Missing Authorization
Slug
wp-cors
Published
2023-04-28
Title
WP-CORS < 0.2.2 - Admin+ Stored XSS
Slug
wp-count-down-timer
Published
2025-11-10
Title
WP Count Down Timer <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-counter-up
Published
2024-05-07
Title
Counter Up – Animated Number Counter & Milestone Showcase < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-counter-up
Published
2024-11-26
Title
Counter Up – Animated Number Counter & Milestone Showcase < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-coupons-and-deals
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-coupons-and-deals
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-coupons-and-deals
Published
2025-12-11
Title
Coupons and Deals < 3.2.5 - Missing Authorization
Slug
wp-course-manager
Published
2024-11-01
Title
WP Course Manager <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-courses
Published
2020-09-28
Title
WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure