WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-field-template
Published
2024-08-29
Title
Custom Field Template < 2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-field-template
Published
2025-12-08
Title
Custom Field Template < 2.7.7 - Authenticated (Subscriber+) Information Exposure
Slug
custom-field-template
Published
2025-12-24
Title
Custom Field Template < 2.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-field-template
Published
2026-06-29
Title
Custom Field Template < 2.8 - Authenticated (Contributor+) SQL Injection
Slug
custom-fields-account-registration-for-woocommerce
Published
2025-03-27
Title
Custom Fields Account Registration For Woocommerce < 1.2 - Cross-Site Request Forgery
Slug
custom-fields-account-registration-for-woocommerce
Published
2025-11-10
Title
Custom Fields Account Registration For Woocommerce < 1.3 - Authenticated (Author+) Privilege Escalation
Slug
custom-fields-account-registration-for-woocommerce
Published
2026-07-06
Title
Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege Escalation
Slug
custom-fields-search
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
custom-fields-shortcode
Published
2024-02-27
Title
Custom fields shortcode <= 0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Slug
custom-font-uploader
Published
2022-04-11
Title
Wbcom Designs Plugins - Subscriber+ Arbitrary Plugin Installation, Activation and Deactivation
Slug
custom-font-uploader
Published
2024-06-05
Title
Wbcom Designs - Custom Font Uploader < 2.4.0 - Missing Authorization to Font Deletion
Slug
custom-fonts
Published
2024-05-23
Title
Custom Fonts – Host Your Fonts Locally < 2.1.5 - Author+ Stored XSS
Slug
custom-fonts
Published
2026-01-19
Title
Custom Fonts – Host Your Fonts Locally < 2.1.17 - Missing Authorization to Unauthenticated Font Deletion
Slug
custom-frames
Published
2025-12-12
Title
Custom Frames <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Parameter
Slug
custom-functions
Published
2025-04-24
Title
Custom Functions Plugin <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
custom-global-variables
Published
2021-01-11
Title
Custom Global Variables < 1.1.1 - Stored Cross-Site Scripting (XSS)
Slug
custom-header-images
Published
2023-10-25
Title
Custom Header Images <= 1.2.1 - Cross-Site Request Forgery
Slug
custom-html-bodyhead
Published
2025-08-25
Title
WordPress HTML <= 0.51 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-icons-for-elementor
Published
2024-10-21
Title
Custom Icons for Elementor < 0.3.4 - Authenticated (Admin+) Arbitrary File Upload
Slug
custom-iframe
Published
2025-09-22
Title
Custom iFrame for Elementor < 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-landing-pages-leadmagic
Published
2022-01-18
Title
User Registration, Login & Landing Pages <= 1.2.7 - Admin+ Stored Cross-Site Scripting
Slug
custom-layouts
Published
2024-08-16
Title
Custom Layouts – Post + Product grids made easy < 1.4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-layouts
Published
2025-12-05
Title
Custom Layouts – Post + Product grids made easy < 1.5.0 - Missing Authorization
Slug
custom-links-in-elementor-image-carousel
Published
2026-07-23
Title
Custom links in Elementor Image Carousel <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
custom-list-table-example
Published
2025-01-16
Title
Custom List Table Example <= 1.4.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting