WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-login
Published
2023-12-07
Title
Custom Login < 4.1.1 - Subscriber+ Unauthorised Action
Slug
custom-login-and-signup-widget
Published
2025-07-01
Title
Custom Login And Signup Widget <= 1.0 - Authenticated (Administrator+) Remote Code Execution
Slug
custom-login-and-signup-widget
Published
2025-09-19
Title
Custom Login And Signup Widget <= 1.0 - Cross-Site Request Forgery
Slug
custom-login-page
Published
2025-01-10
Title
A5 Custom Login Page <= 2.8.1 - Reflected XSS
Slug
custom-login-redirect
Published
2021-07-19
Title
Custom Login Redirect <= 1.0.0 - CSRF to Stored XSS
Slug
custom-login-url
Published
2025-09-22
Title
Custom Login URL < 1.0.3 - Missing Authorization
Slug
custom-logo
Published
2026-02-25
Title
Custom Logo <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Logo Path Setting
Slug
custom-map
Published
2017-12-19
Title
Custom Map <= 1.1 - Authenticated Cross-Site Scripting (XSS)
Slug
custom-menu
Published
2025-08-17
Title
Custom Menu <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-metas
Published
2016-04-17
Title
custom-metas plugin <= 1.5.1 - Cross-Site Scripting (XSS)
Slug
custom-more-link-complete
Published
2023-03-30
Title
Custom More Link Complete <= 1.4.1 - Admin+ Stored XSS
Slug
custom-my-account-for-woocommerce
Published
2023-10-25
Title
Custom My Account for Woocommerce <= 2.1 - Stored XSS via CSRF
Slug
custom-new-user-notification
Published
2026-04-15
Title
Custom New User Notification <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'User Mail Subject' Setting
Slug
custom-option-tree
Published
2025-11-09
Title
Traveler Option Tree <= 2.8 - Authenticated (Editor+) Information Exposure
Slug
custom-order-numbers-for-woocommerce
Published
2023-04-14
Title
Custom Order Numbers for WooCommerce < 1.4.1 - CSRF
Slug
custom-order-numbers-for-woocommerce
Published
2025-11-22
Title
Custom Order Numbers for WooCommerce < 1.11.1 - Missing Authorization
Slug
custom-order-statuses-for-woocommerce
Published
2024-02-20
Title
Custom Order Statuses for WooCommerce <= 1.5.2 - Cross-Site Request Forgery
Slug
custom-order-statuses-for-woocommerce
Published
2024-04-15
Title
Custom Order Statuses for WooCommerce <= 1.5.2 - Missing Authorization
Slug
custom-order-statuses-woocommerce
Published
2024-01-30
Title
Custom Order Status for WooCommerce < 2.4.0 - Cross-Site Request Forgery
Slug
custom-page-extensions
Published
2025-01-16
Title
Custom Page Extensions <= 0.6 - Reflected Cross-Site Scripting
Slug
custom-page-templates-by-vegacorp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
custom-page-templates-by-vegacorp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
custom-page-templates-by-vegacorp
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
custom-payment-gateways-woocommerce
Published
2026-06-30
Title
Custom Payment Gateways for WooCommerce < 2.2.0 - Unauthenticated Stored Cross-Site Scripting via 'alg_wc_cpg_input_fields' Parameter
Slug
custom-pc-builder-lite-for-woocommerce
Published
2025-04-29
Title
Custom PC Builder Lite for WooCommerce <= 1.0.1 - Missing Authorization to Unauthenticated Settings Update