WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
catfolders
Published
2025-11-30
Title
CatFolders < 2.5.4 - Missing Authorization
Slug
catholic-liturgical-calendar
Published
2014-08-01
Title
Catholic Liturgical Calendar Widget 0.0.1 - Title Field Stored XSS
Slug
cats-job-listings
Published
2025-02-17
Title
CATS Job Listings <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
causes
Published
2025-01-16
Title
Causes – Donation Plugin <= 1.0.01 - Reflected Cross-Site Scripting
Slug
caxton
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
caxton
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
caxton
Published
2024-07-10
Title
Caxton – Create Pro page layouts in Gutenberg <= 1.30.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cazamba
Published
2025-03-24
Title
Cazamba <= 1.2 - Reflected Cross-Site Scripting
Slug
cb-logo-slider
Published
2024-11-07
Title
Logo Slider < 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cb-logo-slider
Published
2024-11-07
Title
Logo Slider < 4.5.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
cbi-referral-manager
Published
2014-11-01
Title
CBI Referral Manager <= 1.2.1 Cross-Site Scripting (XSS)
Slug
cbx-restaurant-booking
Published
2025-07-21
Title
CBX Restaurant Booking <= 1.2.1 - Plugin Reset via CSRF
Slug
cbxgooglemap
Published
2023-11-07
Title
CBX Map for Google Map & OpenStreetMap < 1.1.12 - Contributor+ Stored XSS via shortcode
Slug
cbxgooglemap
Published
2024-01-17
Title
CBX Map for Google Map & OpenStreetMap < 1.1.12 - Contributor+ Stored XSS
Slug
cbxgooglemap
Published
2025-05-07
Title
CBX Map for Google Map & OpenStreetMap < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cbxgooglemap
Published
2025-09-10
Title
CBX Map for Google Map & OpenStreetMap < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cbxpetition
Published
2022-12-27
Title
CBX Petition for WordPress < 2.0.0 - Unauthenticated SQLi
Slug
cbxpoll
Published
2025-03-31
Title
CBX Poll <= 2.0.3 - Unauthenticated PHP Object Injection
Slug
cbxwpbookmark
Published
2021-08-16
Title
CBX Bookmark & Favorite < 1.6.9 - Reflected Cross-Site Scripting
Slug
cbxwpbookmark
Published
2023-12-27
Title
CBX Bookmark & Favorite < 1.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cbxwpbookmark
Published
2024-04-12
Title
CBX Bookmark & Favorite < 1.7.21 - Admin+ SQLi
Slug
cbxwpbookmark
Published
2024-04-16
Title
CBX Bookmark & Favorite < 1.7.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cbxwpbookmark
Published
2025-11-18
Title
CBX Bookmark & Favorite < 2.0.2 - Missing Authorization
Slug
cbxwpbookmark
Published
2026-01-05
Title
CBX Bookmark & Favorite < 2.0.5 - Authenticated (Subscriber+) SQL Injection via `orderby` Parameter
Slug
cbxwpsimpleaccounting
Published
2025-01-16
Title
CBX Accounting & Bookkeeping <= 1.3.14 - Reflected Cross-Site Scripting