WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
customer-reviews-woocommerce
Published
2023-10-04
Title
Customer Reviews for WooCommerce < 5.36.1 - Missing Authorization
Slug
customer-reviews-woocommerce
Published
2024-01-09
Title
Customer Reviews for WooCommerce < 5.38.10 - Author+ Arbitrary File Upload
Slug
customer-reviews-woocommerce
Published
2023-11-19
Title
Customer Reviews for WooCommerce < 5.38.2 - Cross-Site Request Forgery via manual review reminders
Slug
customer-reviews-woocommerce
Published
2023-11-19
Title
Customer Reviews for WooCommerce < 5.38.2 - Missing Authorization via manual review reminders
Slug
customer-reviews-woocommerce
Published
2024-02-06
Title
Customer Reviews for WooCommerce < 5.39.0 - Improper Authorization via submit_review
Slug
customer-reviews-woocommerce
Published
2024-04-15
Title
Customer Reviews for WooCommerce < 5.47.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search
Slug
customer-reviews-woocommerce
Published
2024-04-15
Title
Customer Reviews for WooCommerce < 5.47.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Slug
customer-reviews-woocommerce
Published
2024-04-18
Title
Customer Reviews for WooCommerce < 5.48.0 - Reflected Cross-Site Scripting via 's'
Slug
customer-reviews-woocommerce
Published
2024-11-15
Title
Customer Reviews for WooCommerce < 5.62.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation
Slug
customer-reviews-woocommerce
Published
2025-07-30
Title
Customer Reviews for WooCommerce < 5.81.0 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter
Slug
customer-reviews-woocommerce
Published
2026-01-06
Title
Customer Reviews for WooCommerce < 5.94.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter
Slug
customer-reviews-woocommerce
Published
2026-02-12
Title
Customer Reviews for WooCommerce < 5.98.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter
Slug
customify-sites
Published
2024-04-25
Title
Customify Site Library <= 0.0.9 - Unauthenticated Remote Code Execution
Slug
customily-v2
Published
2024-04-09
Title
Customily Product Personalizer <= 1.23.3 - Unauthenticated Stored Cross-Site Scripting
Slug
customizable-captcha-and-contact-us-form
Published
2025-01-16
Title
Customizable Captcha and Contact Us <= 1.0.2 - Reflected Cross-Site Scripting
Slug
customize-login
Published
2021-08-04
Title
WP Customize Login <= 1.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
customize-login-image
Published
2021-12-02
Title
Customize Login Image < 3.5.3 - Admin+ Stored Cross-Site Scripting
Slug
customize-login-page
Published
2025-04-09
Title
Customize Login Page <= 1.1 - Cross-Site Request Forgery
Slug
customize-my-account-for-woocommerce
Published
2023-12-26
Title
Customize My Account for WooCommerce < 1.8.4 - Cross-Site Request Forgery via restore_my_account_tabs
Slug
customize-my-account-for-woocommerce
Published
2024-11-09
Title
SysBasics Customize My Account for WooCommerce < 2.7.30 - Reflected Cross-Site Scripting via tab Parameter
Slug
customize-my-account-for-woocommerce
Published
2024-12-21
Title
SysBasics Customize My Account for WooCommerce < 2.9.0 - Reflected Cross-Site Scripting
Slug
customize-wpadmin
Published
2025-02-03
Title
Custom Links On Admin Dashboard Toolbar <= 3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
customized-login
Published
2025-04-17
Title
Login Manager – Design Login Page, View Login Activity, Limit Login Attempts <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom URL
Slug
customizely
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
customizely
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting