WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-courses
Published
2021-08-16
Title
WP Courses LMS < 2.0.44 - Reflected Cross-Site Scripting
Slug
wp-courses
Published
2021-08-16
Title
WP Courses LMS < 2.0.44 - Authenticated Stored XSS via Video Embed Code
Slug
wp-courses
Published
2023-11-14
Title
WP Courses LMS < 3.2.4 - Missing Authorization
Slug
wp-courses
Published
2023-11-14
Title
WP Courses LMS < 3.2.4 - Cross-Site Request Forgery
Slug
wp-courses
Published
2023-11-14
Title
WP Courses LMS < 3.2.4 - Subscriber+ Arbitrary Options Update
Slug
wp-courses
Published
2024-12-11
Title
WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses < 3.2.22 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Update
Slug
wp-crm
Published
2022-05-18
Title
WP-CRM <= 1.2.1 - CSV Injection
Slug
wp-crm-system
Published
2024-03-28
Title
WP-CRM System < 3.2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-crm-system
Published
2024-12-14
Title
WP-CRM System < 3.4.0 - Unauthenticated Duplicate Contact Settings Update
Slug
wp-crm-system
Published
2025-05-07
Title
WP-CRM System <= 3.4.2 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-crm-system
Published
2025-06-05
Title
WP-CRM System < 3.4.3 - Missing Authorization
Slug
wp-crm-system
Published
2025-12-08
Title
WP-CRM System <= 3.4.5 - Missing Authorization
Slug
wp-cron-dashboard
Published
2014-08-01
Title
WP Cron DashBoard <= 1.1.5 - Reflected Cross-Site Scripting (XSS)
Slug
wp-cron-status-checker
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-cron-status-checker
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-crontrol
Published
2015-08-21
Title
WP Crontrol < 1.3 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
wp-crontrol
Published
2024-03-24
Title
WP Crontrol < 1.16.2 - Remote Code Execution
Slug
wp-crontrol
Published
2025-08-21
Title
WP Crontrol - 1.17.0 - 1.19.1 - Authenticated (Administrator+) Blind Server-Side Request Forgery
Slug
wp-crowdfunding
Published
2023-11-07
Title
WP Crowdfunding < 2.1.7 - Reflected XSS
Slug
wp-crowdfunding
Published
2023-09-05
Title
WP Crowdfunding < 2.1.5 - Missing Authorization via settings_reset
Slug
wp-crowdfunding
Published
2023-09-08
Title
WP Crowdfunding < 2.1.6 - Cross-Site Request Forgery
Slug
wp-crowdfunding
Published
2023-11-28
Title
WP Crowdfunding < 2.1.8 - Admin+ Stored XSS
Slug
wp-crowdfunding
Published
2023-12-13
Title
WP Crowdfunding < 2.1.9 - Reflected XSS
Slug
wp-crowdfunding
Published
2023-12-22
Title
WP Crowdfunding < 2.1.10 - Admin+ Stored XSS
Slug
wp-crowdfunding
Published
2023-12-22
Title
WP Crowdfunding < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting