WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cartflows
Published
2024-03-25
Title
Funnel Builder by CartFlows < 2.0.2 - Editor+ Stored XSS
Slug
cartflows
Published
2024-06-18
Title
WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce < 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cartflows
Published
2026-03-27
Title
CartFlows < 2.2.4 - Missing Authorization
Slug
cartflows
Published
2026-01-26
Title
CartFlows – Checkout & Funnel Builder for WooCommerce < 2.2.0 - Authenticated (Administrator+) PHP Object Injection
Slug
cartflows-pro
Published
2023-07-27
Title
CartFlows Pro < 1.11.13 - CSRF
Slug
cartflows-pro
Published
2023-07-16
Title
CartFlows Pro < 1.11.12 - Reflected Cross-Site Scripting
Slug
cartoon-url
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cartpops
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cartpops
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
carts-guru
Published
2019-05-07
Title
Carts Guru < 1.4.6 - Unauthenticated Object Injection
Slug
cas-maestro
Published
2025-03-24
Title
CAS Maestro <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
case-addons
Published
2025-10-14
Title
Case Addons < 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
case-study
Published
2024-11-15
Title
SVG Case Study <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
case-theme-user
Published
2025-07-01
Title
Case Theme User < 1.0.4 - Unauthenticated Local File Inclusion
Slug
case-theme-user
Published
2025-08-22
Title
Case Theme User < 1.0.4 - Authentication Bypass via Social Login
Slug
cashbill-payment-method
Published
2025-09-22
Title
CashBill.pl - Płatności WooCommerce < 3.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cashtomer
Published
2021-07-23
Title
Cashtomer <= 1.0.0 - Authenticated SQL Injection
Slug
catablog
Published
2014-08-01
Title
Catablog < 1.6.3 - Cross Site Scripting
Slug
catablog
Published
2023-11-20
Title
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Deletion
Slug
catablog
Published
2023-11-20
Title
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload
Slug
catalog
Published
2021-10-07
Title
SpiderCatalog <= 1.7.3 - Admin+ SQL Injection
Slug
catalog-mode-pricing-enquiry-forms-promotions
Published
2025-11-17
Title
wModes – Catalog Mode, Product Pricing, Enquiry Forms & Promotions | for WooCommerce < 1.3 - Missing Authorization to Sensitive Information Disclosure
Slug
catalyst-connect-client-portal
Published
2023-06-05
Title
Catalyst Connect Zoho CRM Client Portal < 2.1.0 - Reflected XSS
Slug
catalyst-connect-client-portal
Published
2023-06-27
Title
Catalyst Connect Zoho CRM Client Portal < 2.1.0 - Admin+ Stored XSS
Slug
catch-breadcrumb
Published
2020-04-22
Title
Catch Breadcrumb < 1.5.7 - Unauthenticated Reflected XSS