WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
customcomment
Published
2025-08-17
Title
Custom Comment <= 2.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
customcomment
Published
2025-08-20
Title
Custom Comment <= 2.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
customer-area
Published
2017-11-22
Title
Customer Area < 7.4.3 - XSS
Slug
customer-area
Published
2023-01-17
Title
WP Customer Area < 8.1.4 - Unauthorised Actions via CSRF
Slug
customer-area
Published
2024-01-10
Title
WP Customer Area < 8.2.1 - Subscriber+ Account Address Leak
Slug
customer-area
Published
2024-01-10
Title
WP Customer Area < 8.2.1 - Subscriber+ Account Address Update
Slug
customer-area
Published
2024-01-23
Title
WP Customer Area < 8.2.3 - Reflected Cross-Site Scripting
Slug
customer-area
Published
2025-01-06
Title
WP Customer Area < 8.2.5 - Bulk Delete via CSRF
Slug
customer-area
Published
2025-01-06
Title
WP Customer Area < 8.2.5 - Event Log Deletion via CSRF
Slug
customer-area
Published
2025-06-19
Title
WP Customer Area <= 8.3.6 - Missing Authorization
Slug
customer-area
Published
2025-07-21
Title
Customer Area < 8.3.4 - Unauthenticated Local File Inclusion
Slug
customer-area
Published
2026-04-17
Title
WP Customer Area < 8.3.5 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file
Slug
customer-area
Published
2026-05-01
Title
WP Customer Area < 8.3.5 - Authenticated (Custom+) Path Traversal
Slug
customer-area
Published
2026-07-13
Title
WP Customer Area < 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute
Slug
customer-chat-facebook
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
customer-chat-facebook
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
customer-chat-facebook
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
customer-reviews-collector-for-woocommerce
Published
2023-11-22
Title
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Slug
customer-reviews-collector-for-woocommerce
Published
2025-11-26
Title
Customer Reviews Collector for WooCommerce < 4.7 - Reflected Cross-Site Scripting
Slug
customer-reviews-woocommerce
Published
2022-09-22
Title
Customer Reviews for WooCommerce < 5.3.6 - Unauthenticated Sensitive Information Disclosure
Slug
customer-reviews-woocommerce
Published
2022-09-22
Title
Customer Reviews for WooCommerce < 5.3.6 - Cross-Site Request Forgery
Slug
customer-reviews-woocommerce
Published
2022-09-22
Title
Customer Reviews for WooCommerce < 5.3.6 - Broken Access Control
Slug
customer-reviews-woocommerce
Published
2023-01-23
Title
Customer Reviews for WooCommerce < 5.16.0 - Contributor+ LFI
Slug
customer-reviews-woocommerce
Published
2023-01-24
Title
Customer Reviews for WooCommerce < 5.17.0 - Contributor+ Stored XSS
Slug
customer-reviews-woocommerce
Published
2023-10-06
Title
Customer Reviews for WooCommerce < 5.36.1 - Missing Authorization in Reviews Exporter