WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-sub-menus
Published
2021-09-08
Title
Custom Menu Plugin <= 1.3.3 - Reflected Cross-Site Scripting
Slug
custom-tables
Published
2014-08-01
Title
Custom Tables 3.4.4 - iframe.php key Parameter XSS
Slug
custom-tabs-for-products-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
custom-taxonomy-category-and-term-fields
Published
2025-04-24
Title
LSD Custom taxonomy and category meta <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
custom-team-manager
Published
2025-09-05
Title
Custom Team Manager <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-text-selection-colors
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
custom-tiktok-video-feed
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
custom-tinymce-shortcode-button
Published
2022-04-19
Title
Custom TinyMCE Shortcode Button <= 1.1 - Reflected Cross-Site Scripting
Slug
custom-top-bar
Published
2025-03-11
Title
Custom top bar <= 2.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
custom-twitter-feeds
Published
2021-07-20
Title
Multiple Plugins from Smash Balloon - Reflected Cross-Site Scripting
Slug
custom-twitter-feeds
Published
2023-05-25
Title
Custom Twitter Feeds (Tweets Widget) < 2.0 - Cross-Site Request Forgery (CSRF)
Slug
custom-twitter-feeds
Published
2023-12-28
Title
Custom Twitter Feeds (Tweets Widget) < 2.2 - Cross-Site Request Forgery
Slug
custom-twitter-feeds
Published
2024-02-06
Title
Custom Twitter Feeds – A Tweets Widget or X Feed Widget < 2.2.2 - Cross-Site Request Forgery to Plugin Options Update
Slug
custom-twitter-feeds
Published
2024-09-17
Title
Custom Twitter Feeds < 2.2.3 - Admin+ Stored XSS
Slug
custom-twitter-feeds
Published
2024-10-21
Title
Custom Twitter Feeds (Tweets Widget) < 2.2.4 - Cross-Site Request Forgery
Slug
custom-twitter-feeds
Published
2025-03-19
Title
Custom Twitter Feeds < 2.3.0 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function
Slug
custom-url-shorter
Published
2024-11-08
Title
Custom URL Shortener <= 0.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-url-to-featured-image
Published
2025-12-31
Title
Add Featured Image Custom Link <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
custom-user-css
Published
2024-01-03
Title
Custom User CSS <= 0.2 - Settings Update via CSRF
Slug
custom-user-guide
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
custom-user-guide
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
custom-users-order
Published
2025-01-16
Title
Custom Users Order <= 4.2 - Reflected Cross-Site Scripting
Slug
custom-welcome-guide
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
custom-welcome-guide
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
custom-widget-classes
Published
2025-01-16
Title
Custom Widget Classes <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting