WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
customer-reviews-woocommerce
Published
2026-04-15
Title
Customer Reviews for WooCommerce < 5.102.0 - Reflected Cross-Site Scripting via 'crsearch'
Slug
customer-reviews-woocommerce
Published
2026-06-24
Title
Customer Reviews for WooCommerce < 5.111.0 - Unauthenticated Stored Cross-Site Scripting
Slug
customer-reviews-woocommerce
Published
2026-06-25
Title
Customer Reviews for WooCommerce < 5.113.0 - Unauthenticated Arbitrary Media Upload via cr_upload_media
Slug
customer-reviews-woocommerce
Published
2026-07-08
Title
Customer Reviews for WooCommerce < 5.114.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute
Slug
customer-reviews-woocommerce
Published
2026-08-06
Title
Customer Reviews for WooCommerce < 5.116.0 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions
Slug
customer-reviews-woocommerce
Published
2026-08-27
Title
Customer Reviews for WooCommerce < 5.107.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form
Slug
customer-reviews-woocommerce
Published
2026-08-28
Title
Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' Parameter
Slug
customer-reviews-woocommerce
Published
2026-09-24
Title
Customer Reviews for WooCommerce < 5.121.0 - Missing Authorization
Slug
customer-reviews-woocommerce
Published
2026-09-24
Title
Customer Reviews for WooCommerce < 5.121.0 - Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter
Slug
customer-reviews-woocommerce
Published
2026-10-01
Title
Customer Reviews for WooCommerce < 5.123.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
Slug
customify-sites
Published
2024-04-25
Title
Customify Site Library <= 0.0.9 - Unauthenticated Remote Code Execution
Slug
customily-v2
Published
2024-04-09
Title
Customily Product Personalizer <= 1.23.3 - Unauthenticated Stored Cross-Site Scripting
Slug
customizable-captcha-and-contact-us-form
Published
2025-01-16
Title
Customizable Captcha and Contact Us <= 1.0.2 - Reflected Cross-Site Scripting
Slug
customize-login
Published
2021-08-04
Title
WP Customize Login <= 1.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
customize-login-image
Published
2021-12-02
Title
Customize Login Image < 3.5.3 - Admin+ Stored Cross-Site Scripting
Slug
customize-login-page
Published
2025-04-09
Title
Customize Login Page <= 1.1 - Cross-Site Request Forgery
Slug
customize-my-account-for-woocommerce
Published
2023-12-26
Title
Customize My Account for WooCommerce < 1.8.4 - Cross-Site Request Forgery via restore_my_account_tabs
Slug
customize-my-account-for-woocommerce
Published
2024-11-09
Title
SysBasics Customize My Account for WooCommerce < 2.7.30 - Reflected Cross-Site Scripting via tab Parameter
Slug
customize-my-account-for-woocommerce
Published
2024-12-21
Title
SysBasics Customize My Account for WooCommerce < 2.9.0 - Reflected Cross-Site Scripting
Slug
customize-my-account-for-woocommerce
Published
2026-06-17
Title
SysBasics Customize My Account for WooCommerce < 4.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
customize-my-account-for-woocommerce
Published
2026-06-17
Title
SysBasics Customize My Account for WooCommerce < 4.3.7 - Reflected Cross-Site Scripting via 'tab' Parameter
Slug
customize-my-account-for-woocommerce
Published
2026-07-01
Title
SysBasics Customize My Account for WooCommerce – Live My Account Customizer < 4.3.10 - Reflected Cross-Site Scripting
Slug
customize-my-account-for-woocommerce
Published
2026-07-15
Title
SysBasics Customize My Account for WooCommerce < 4.5.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'row_type' Parameter
Slug
customize-wpadmin
Published
2025-02-03
Title
Custom Links On Admin Dashboard Toolbar <= 3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
customized-login
Published
2025-04-17
Title
Login Manager – Design Login Page, View Login Activity, Limit Login Attempts <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom URL