WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
current-template-name
Published
2025-10-05
Title
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
current-template-name
Published
2025-10-14
Title
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Information Exposure
Slug
curtain
Published
2015-03-07
Title
Curtain < 1.0.2 - Unauthenticated Maintenance Mode Switch
Slug
curtain
Published
2022-04-27
Title
Curtain <= 1.0.2 - Admin+ Stored Cross-Site Scripting
Slug
curved-text
Published
2026-01-08
Title
Curved Text <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
custom-404-pro
Published
2019-06-24
Title
Custom 404 Pro < 3.2.9 - Authenticated Reflected XSS
Slug
custom-404-pro
Published
2019-06-24
Title
Custom 404 Pro < 3.2.8 - XSS
Slug
custom-404-pro
Published
2023-01-18
Title
Custom 404 Pro < 3.7.2 - Logs Deletion via CSRF
Slug
custom-404-pro
Published
2023-01-13
Title
Custom 404 Pro < 3.7.1 - Admin+ SQLi
Slug
custom-404-pro
Published
2023-05-02
Title
Custom 404 Pro < 3.7.3 - Reflected Cross-Site Scripting
Slug
custom-404-pro
Published
2023-06-05
Title
Custom 404 Pro < 3.8.1 - Multiple SQL Injection
Slug
custom-404-pro
Published
2023-05-19
Title
Custom 404 Pro < 3.8.2 - Reflected XSS
Slug
custom-404-pro
Published
2023-12-27
Title
Custom 404 Pro < 3.10.1 - Unauthenticated Stored Cross-Site Scripting via logging
Slug
custom-404-pro
Published
2024-08-01
Title
Custom 404 Pro < 3.11.2 - Reflected Cross-Site Scripting
Slug
custom-404-pro
Published
2025-10-10
Title
Custom 404 Pro <= 3.12.0 - Authenticated (Administrator+) SQL Injection via `path` Parameter
Slug
custom-404-pro
Published
2025-05-13
Title
Custom 404 Pro < 3.12.1 - Cross-Site Request Forgery
Slug
custom-add-to-cart-button-for-woocommerce
Published
2024-06-20
Title
Ultimate Custom Add To Cart Button <= 1.222.17 - Missing Authorization
Slug
custom-add-user
Published
2023-02-02
Title
Custom Add User <= 2.0.2 - Reflected Cross-Site Scripting
Slug
custom-admin-login-styler-wpzest
Published
2023-08-16
Title
Custom Admin Login Page | WPZest <= 1.2.0 - Admin+ Stored XSS
Slug
custom-admin-menu
Published
2024-10-31
Title
Custom Admin Menu <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-admin-menu
Published
2025-11-18
Title
Custom Admin Menu <= 1.0.0 - Reflected XSS
Slug
custom-admin-page
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
custom-api-for-wp
Published
2025-07-16
Title
Custom API for WP < 4.2.3 - Unauthenticated SQL Injection
Slug
custom-api-for-wp
Published
2025-07-28
Title
Custom API for WP < 4.2.3 - Subscriber+ Privilege Escalation
Slug
custom-author-base
Published
2024-07-11
Title
Custom Author Base <= 1.1.1 - Settings Update via CSRF