WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
case-theme-user
Published
2025-07-01
Title
Case Theme User < 1.0.4 - Unauthenticated Local File Inclusion
Slug
case-theme-user
Published
2025-08-22
Title
Case Theme User < 1.0.4 - Authentication Bypass via Social Login
Slug
cashbill-payment-method
Published
2025-09-22
Title
CashBill.pl - Płatności WooCommerce < 3.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cashtomer
Published
2021-07-23
Title
Cashtomer <= 1.0.0 - Authenticated SQL Injection
Slug
catablog
Published
2014-08-01
Title
Catablog < 1.6.3 - Cross Site Scripting
Slug
catablog
Published
2023-11-20
Title
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Deletion
Slug
catablog
Published
2023-11-20
Title
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload
Slug
catalog
Published
2021-10-07
Title
SpiderCatalog <= 1.7.3 - Admin+ SQL Injection
Slug
catalog-mode-pricing-enquiry-forms-promotions
Published
2025-11-17
Title
wModes – Catalog Mode, Product Pricing, Enquiry Forms & Promotions | for WooCommerce < 1.3 - Missing Authorization to Sensitive Information Disclosure
Slug
catalyst-connect-client-portal
Published
2023-06-05
Title
Catalyst Connect Zoho CRM Client Portal < 2.1.0 - Reflected XSS
Slug
catalyst-connect-client-portal
Published
2023-06-27
Title
Catalyst Connect Zoho CRM Client Portal < 2.1.0 - Admin+ Stored XSS
Slug
catch-breadcrumb
Published
2020-04-22
Title
Catch Breadcrumb < 1.5.7 - Unauthenticated Reflected XSS
Slug
catch-breadcrumb
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-dark-mode
Published
2025-04-04
Title
Catch Dark Mode < 2.1 - Contributor+ Local File Inclusion
Slug
catch-dark-mode
Published
2025-09-16
Title
Catch Dark Mode < 2.0.1 - Authenticated (Contributor+) Local File Inclusion
Slug
catch-duplicate-switcher
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-duplicate-switcher
Published
2025-01-16
Title
Catch Duplicate Switcher <= 2.0 - Reflected Cross-Site Scripting
Slug
catch-gallery
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-ids
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-import-export
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-infinite-scroll
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-instagram-feed-gallery-widget
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-popup
Published
2024-12-11
Title
Catch Popup <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
catch-scroll-progress-bar
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-sticky-menu
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change