WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
category-specific-rss-feed-menu
Published
2019-07-18
Title
Category Specific RSS feed Subscription <= 2.0 - Cross-Site Request Forgery (CSRF)
Slug
category-specific-rss-feed-menu
Published
2023-01-20
Title
Category Specific RSS feed Subscription < 2.2 - Settings Update via CSRF
Slug
category-specific-rss-feed-menu
Published
2023-04-19
Title
Category Specific RSS feed Subscription < 2.3 - Admin+ Stored XSS
Slug
category-widget
Published
2025-05-02
Title
Category Widget <= 2.0.2 - Reflected Cross-Site Scripting
Slug
category-wise-search
Published
2014-08-01
Title
Wise Search Widget 1.1 - s Parameter Reflected XSS
Slug
categorycustomfields
Published
2025-01-16
Title
Category Custom Fields <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
catfolders
Published
2025-09-10
Title
CatFolders – Tame Your WordPress Media Library by Category < 2.5.3 - Authenticated (Author+) SQL Injection via CSV Import
Slug
catfolders
Published
2025-11-30
Title
CatFolders < 2.5.4 - Missing Authorization
Slug
catfolders-document-gallery
Published
2026-08-14
Title
CatFolders Document Gallery < 2.0.7 - Unauthenticated Attachment Disclosure via REST API
Slug
catfolders-document-gallery
Published
2026-09-03
Title
CatFolders Document Gallery < 2.0.7 - Author+ Stored XSS via titleTag Block Attribute
Slug
catfolders-document-gallery-pro
Published
2026-08-27
Title
CatFolders Document Gallery Pro < 2.0.7 - Unauthenticated Missing Authorization via download-all
Slug
catholic-liturgical-calendar
Published
2014-08-01
Title
Catholic Liturgical Calendar Widget 0.0.1 - Title Field Stored XSS
Slug
cats-job-listings
Published
2025-02-17
Title
CATS Job Listings <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
causes
Published
2025-01-16
Title
Causes – Donation Plugin <= 1.0.01 - Reflected Cross-Site Scripting
Slug
caxton
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
caxton
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
caxton
Published
2024-07-10
Title
Caxton – Create Pro page layouts in Gutenberg <= 1.30.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cazamba
Published
2025-03-24
Title
Cazamba <= 1.2 - Reflected Cross-Site Scripting
Slug
cb-logo-slider
Published
2024-11-07
Title
Logo Slider < 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cb-logo-slider
Published
2024-11-07
Title
Logo Slider < 4.5.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
cbi-referral-manager
Published
2014-11-01
Title
CBI Referral Manager <= 1.2.1 Cross-Site Scripting (XSS)
Slug
cbx-restaurant-booking
Published
2025-07-21
Title
CBX Restaurant Booking <= 1.2.1 - Plugin Reset via CSRF
Slug
cbxgooglemap
Published
2023-11-07
Title
CBX Map for Google Map & OpenStreetMap < 1.1.12 - Contributor+ Stored XSS via shortcode
Slug
cbxgooglemap
Published
2024-01-17
Title
CBX Map for Google Map & OpenStreetMap < 1.1.12 - Contributor+ Stored XSS
Slug
cbxgooglemap
Published
2025-05-07
Title
CBX Map for Google Map & OpenStreetMap < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting