WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ce21-suite
Published
2025-11-03
Title
CE21 Suite 2.2.1 - 2.3.1 - Unauthenticated Privilege Escalation via Plugin Settings Update
Slug
ce21-suite
Published
2025-11-03
Title
CE21 Suite <= 2.3.1 - Unauthenticated Sensitive Information Exposure to Privilege Escalation
Slug
cecabank-woocommerce
Published
2025-09-22
Title
Cecabank WooCommerce Plugin < 0.3.5 - Missing Authorization
Slug
ceceppa-multilingua
Published
2020-08-31
Title
Ceceppa Multilingua <= 1.5.17 - Authenticated Reflected Cross-Site Scripting
Slug
ced-good-market-integration
Published
2025-12-26
Title
CedCommerce Integration for Good Market <= 1.0.6 - Unauthenticated Local File Inclusion
Slug
centangle-team
Published
2025-11-03
Title
Centangle Team Showcase <= 1.0.0 - Cross-Site Request Forgery To Plugin's Settings Modification And Stored Cross-Site Scripting
Slug
century-toolkit
Published
2025-08-20
Title
Century ToolKit <= 1.2.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Slug
certifica-wp
Published
2025-09-10
Title
Certifica WP <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via evento Parameter
Slug
cevhershare
Published
2014-08-01
Title
CevherShare 2.0 - SQL Injection
Slug
cf-geoplugin
Published
2021-08-31
Title
CF Geo Plugin < 7.13.12 - Reflected Cross-Site Scripting
Slug
cf-geoplugin
Published
2023-10-04
Title
Geo Controller < 8.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cf-geoplugin
Published
2024-03-28
Title
Geo Controller < 8.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cf-geoplugin
Published
2024-04-10
Title
WordPress Geo Controller < 8.6.5 - PHP Object Injection
Slug
cf-geoplugin
Published
2024-09-04
Title
Geo Controller < 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion
Slug
cf-geoplugin
Published
2024-09-04
Title
Geo Controller < 8.7.0 - Missing Authorization to Unauthenticated Shortcode Execution
Slug
cf-geoplugin
Published
2025-12-08
Title
Geo Controller <= 8.9.4 - Unauthenticated Information Exposure
Slug
cf-image-resizing
Published
2025-08-18
Title
Cloudflare Image Resizing < 1.5.7 - Missing Authentication to Unauthenticated Remote Code Execution via rest_pre_dispatch Hook
Slug
cf-images
Published
2025-11-20
Title
Offload, AI & Optimize with Cloudflare Images < 1.9.6 - Missing Authorization
Slug
cf7-active-campaign
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
cf7-antispam
Published
2024-03-13
Title
AntiSpam for Contact Form 7 < 0.6.1 - Reflected Cross-Site Scripting
Slug
cf7-antispam
Published
2025-07-16
Title
AntiSpam for Contact Form 7 < 0.6.4 - Cross-Site Request Forgery
Slug
cf7-builder
Published
2025-03-11
Title
Builder for Contact Form 7 by Webconstruct <= 1.2.2 - Cross-Site Request Forgery
Slug
cf7-calendar
Published
2025-04-24
Title
Contact Form 7 Calendar <= 3.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
cf7-calendly-integration
Published
2025-01-16
Title
Form To Online Booking <= 1.0 - Reflected Cross-Site Scripting
Slug
cf7-cc-avenue-add-on
Published
2025-01-16
Title
Contact Form 7 – CCAvenue Add-on <= 1.0 - Reflected Cross-Site Scripting