WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
curatorio
Published
2024-10-09
Title
Curator.io < 1.9.2 - Contributor+ Stored XSS
Slug
curatorio
Published
2025-12-31
Title
Curator.io < 1.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
curly-core
Published
2026-03-16
Title
Curly Core < 2.2.2 - Unauthenticated Local File Inclusion
Slug
currency-converter-calculator
Published
2023-11-28
Title
Currency Converter Calculator < 1.3.2 - Contributor+ Stored XSS
Slug
currency-converter-widget
Published
2023-12-19
Title
Currency Converter Widget < 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
currency-converter-widget-pro
Published
2024-12-11
Title
Currency Converter Widget ⚡ PRO < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
currency-per-product-for-woocommerce
Published
2024-04-10
Title
Currency per Product for WooCommerce < 1.7.0 - Cross-Site Request Forgery to Notice Dismissal
Slug
currency-switcher
Published
2021-07-06
Title
WPCS < 1.1.7 - Arbitrary Plugin's Settings Change via CSRF
Slug
currency-switcher
Published
2023-05-12
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0 - Contributor+ Stored Cross-Site Scripting
Slug
currency-switcher
Published
2023-05-12
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0 - Subscriber+ Missing Authorization Checks
Slug
currency-switcher
Published
2023-12-27
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
currency-switcher
Published
2024-03-28
Title
WPCS < 1.2.0.2 - Cross-Site Request Forgery
Slug
currency-switcher
Published
2024-07-10
Title
WPCS < 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
currency-switcher
Published
2025-03-10
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0.5 - Unauthenticated Arbitrary Shortcode Execution
Slug
currency-switcher
Published
2026-05-25
Title
WPCS – WordPress Currency Switcher Professional < 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Slug
currency-switcher-for-woocommerce
Published
2025-03-27
Title
Currency Switcher for WooCommerce < 0.0.8 - Cross-Site Request Forgery
Slug
currency-switcher-woocommerce
Published
2019-10-31
Title
Currency Switcher for Woocommerce < 2.11.2 - Security Restrictions Bypass
Slug
currency-switcher-woocommerce
Published
2025-02-28
Title
Currency Switcher for WooCommerce < 2.16.3 - Reflected Cross-Site Scripting
Slug
current-age
Published
2025-09-22
Title
Current Age Plugin < 1.7 - Cross-Site Request Forgery
Slug
current-book
Published
2021-07-14
Title
Current Book <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
current-menu-item-for-custom-post-types
Published
2023-10-26
Title
Current Menu Item for Custom Post Types < 1.6 - Cross-Site Request Forgery
Slug
current-template-name
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
current-template-name
Published
2025-10-05
Title
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
current-template-name
Published
2025-10-14
Title
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Information Exposure
Slug
curtain
Published
2015-03-07
Title
Curtain < 1.0.2 - Unauthenticated Maintenance Mode Switch