WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
catch-popup
Published
2024-12-11
Title
Catch Popup <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
catch-scroll-progress-bar
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-sticky-menu
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-themes-demo-import
Published
2021-10-21
Title
Catch Themes Demo Import < 1.8 - Admin+ Arbitrary File Upload
Slug
catch-themes-demo-import
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-themes-demo-import
Published
2022-02-07
Title
Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution
Slug
catch-themes-demo-import
Published
2026-07-15
Title
Catch Themes Demo Import < 3.4 - Missing Authorization to Authenticated (Subscriber+) Single Plugin Installation via 'activate_plugin' Parameter
Slug
catch-under-construction
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-web-tools
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-web-tools
Published
2022-01-24
Title
Catch Web Tools < 2.7.1 - Subscriber+ Arbitrary Catch IDs Activation/Deactivation
Slug
catchers-helpdesk
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
categories-gallery
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
categories-gallery-woocommerce
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
categories-images
Published
2026-04-17
Title
Categories Images < 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'z_taxonomy_image' Shortcode
Slug
categories-images
Published
2026-03-14
Title
Categories Images < 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
categorify
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Cross-Site Request Forgery via categorifyAjaxDeleteCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Missing Authorization in categorifyAjaxAddCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Missing Authorization in categorifyAjaxUpdateFolderPosition
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Cross-Site Request Forgery via categorifyAjaxRenameCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Cross-Site Request Forgery via categorifyAjaxUpdateFolderPosition
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Cross-Site Request Forgery via categorifyAjaxAddCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Missing Authorization in categorifyAjaxClearCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Cross-Site Request Forgery via categorifyAjaxClearCategory
Slug
categorify
Published
2024-02-26
Title
Categorify < 1.0.7.5 - Missing Authorization in categorifyAjaxDeleteCategory