WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
customer-chat-facebook
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
customer-reviews-collector-for-woocommerce
Published
2023-11-22
Title
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Slug
customer-reviews-collector-for-woocommerce
Published
2025-11-26
Title
Customer Reviews Collector for WooCommerce < 4.7 - Reflected Cross-Site Scripting
Slug
customer-reviews-woocommerce
Published
2022-09-22
Title
Customer Reviews for WooCommerce < 5.3.6 - Unauthenticated Sensitive Information Disclosure
Slug
customer-reviews-woocommerce
Published
2022-09-22
Title
Customer Reviews for WooCommerce < 5.3.6 - Cross-Site Request Forgery
Slug
customer-reviews-woocommerce
Published
2022-09-22
Title
Customer Reviews for WooCommerce < 5.3.6 - Broken Access Control
Slug
customer-reviews-woocommerce
Published
2023-01-23
Title
Customer Reviews for WooCommerce < 5.16.0 - Contributor+ LFI
Slug
customer-reviews-woocommerce
Published
2023-01-24
Title
Customer Reviews for WooCommerce < 5.17.0 - Contributor+ Stored XSS
Slug
customer-reviews-woocommerce
Published
2023-10-06
Title
Customer Reviews for WooCommerce < 5.36.1 - Missing Authorization in Reviews Exporter
Slug
customer-reviews-woocommerce
Published
2023-10-04
Title
Customer Reviews for WooCommerce < 5.36.1 - Missing Authorization
Slug
customer-reviews-woocommerce
Published
2024-01-09
Title
Customer Reviews for WooCommerce < 5.38.10 - Author+ Arbitrary File Upload
Slug
customer-reviews-woocommerce
Published
2023-11-19
Title
Customer Reviews for WooCommerce < 5.38.2 - Cross-Site Request Forgery via manual review reminders
Slug
customer-reviews-woocommerce
Published
2023-11-19
Title
Customer Reviews for WooCommerce < 5.38.2 - Missing Authorization via manual review reminders
Slug
customer-reviews-woocommerce
Published
2024-02-06
Title
Customer Reviews for WooCommerce < 5.39.0 - Improper Authorization via submit_review
Slug
customer-reviews-woocommerce
Published
2024-04-15
Title
Customer Reviews for WooCommerce < 5.47.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search
Slug
customer-reviews-woocommerce
Published
2024-04-15
Title
Customer Reviews for WooCommerce < 5.47.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Slug
customer-reviews-woocommerce
Published
2024-04-18
Title
Customer Reviews for WooCommerce < 5.48.0 - Reflected Cross-Site Scripting via 's'
Slug
customer-reviews-woocommerce
Published
2024-11-15
Title
Customer Reviews for WooCommerce < 5.62.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation
Slug
customer-reviews-woocommerce
Published
2025-07-30
Title
Customer Reviews for WooCommerce < 5.81.0 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter
Slug
customer-reviews-woocommerce
Published
2026-01-06
Title
Customer Reviews for WooCommerce < 5.94.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter
Slug
customer-reviews-woocommerce
Published
2026-02-12
Title
Customer Reviews for WooCommerce < 5.98.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter
Slug
customify-sites
Published
2024-04-25
Title
Customify Site Library <= 0.0.9 - Unauthenticated Remote Code Execution
Slug
customily-v2
Published
2024-04-09
Title
Customily Product Personalizer <= 1.23.3 - Unauthenticated Stored Cross-Site Scripting
Slug
customizable-captcha-and-contact-us-form
Published
2025-01-16
Title
Customizable Captcha and Contact Us <= 1.0.2 - Reflected Cross-Site Scripting
Slug
customize-login
Published
2021-08-04
Title
WP Customize Login <= 1.1 - Authenticated Stored Cross-Site Scripting (XSS)