WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cc-bcc-for-woocommerce-order-emails
Published
2024-07-05
Title
CC & BCC for Woocommerce Order Emails <= 1.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cc-bmi-calculator
Published
2024-01-30
Title
CC BMI Calculator < 2.1.0 - Contributor+ Stored XSS
Slug
cc-bmi-calculator
Published
2025-05-07
Title
CC BMI Calculator < 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cc-canadian-mortgage-calculator
Published
2025-01-06
Title
CC Canadian Mortgage Calculator < 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cc-child-pages
Published
2023-01-05
Title
CC Child Pages < 1.43 - Contributor+ Stored XSS via Shortcode
Slug
cc-child-pages
Published
2025-12-15
Title
CC Child Pages < 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'child_pages' Shortcode
Slug
cc-circle-progress-bar
Published
2025-01-16
Title
CC Circle Progress Bar <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cc-coming-soon
Published
2023-07-12
Title
Coming Soon Chop Chop <= 2.2.4 - Reflected XSS
Slug
cc-custom-taxonmy
Published
2023-02-06
Title
CC Custom Taxonomy <= 1.0.1 - Admin+ Stored XSS
Slug
cc-img-shortcode
Published
2025-03-12
Title
CC-IMG-Shortcode <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cdnvote
Published
2011-02-08
Title
Cdnvote < 0.4.2 - Multiple SQL Injections
Slug
cds-simple-seo
Published
2022-07-29
Title
Simple SEO < 1.7.92 - Contributor+ Stored Cross-Site Scripting
Slug
cds-simple-seo
Published
2022-10-20
Title
Simple SEO < 1.8.13 - Sitemap Creation/Deletion via CSRF
Slug
cds-simple-seo
Published
2022-10-20
Title
Simple SEO < 1.8.13 - Subscriber+ Sitemap Creation/Deletion
Slug
cds-simple-seo
Published
2023-10-06
Title
Simple SEO < 2.0.26 - Arbitrary Settings Update via CSRF
Slug
cds-simple-seo
Published
2025-09-23
Title
Simple SEO < 2.0.32 - Contributor+ Stored XSS
Slug
ce21-suite
Published
2024-11-08
Title
CE21 Suite <= 2.2.0 - JWT Token Disclosure
Slug
ce21-suite
Published
2024-11-08
Title
CE21 Suite <= 2.2.0 - Missing Authorization to Unauthenticated Plugin Settings Change
Slug
ce21-suite
Published
2024-11-08
Title
CE21 Suite < 2.2.1 - Authentication Bypass
Slug
ce21-suite
Published
2024-12-11
Title
CE21 Suite < 2.2.1 - Unauthenticated Privilege Escalation
Slug
ce21-suite
Published
2025-11-03
Title
CE21 Suite 2.2.1 - 2.3.1 - Unauthenticated Privilege Escalation via Plugin Settings Update
Slug
ce21-suite
Published
2025-11-03
Title
CE21 Suite <= 2.3.1 - Unauthenticated Sensitive Information Exposure to Privilege Escalation
Slug
cecabank-woocommerce
Published
2025-09-22
Title
Cecabank WooCommerce Plugin < 0.3.5 - Missing Authorization
Slug
ceceppa-multilingua
Published
2020-08-31
Title
Ceceppa Multilingua <= 1.5.17 - Authenticated Reflected Cross-Site Scripting
Slug
ced-good-market-integration
Published
2025-12-26
Title
CedCommerce Integration for Good Market <= 1.0.6 - Unauthenticated Local File Inclusion