WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
checkout-mestres-wp
Published
2025-03-28
Title
Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update
Slug
checkout-plugins-stripe-woo
Published
2023-02-28
Title
Stripe Payments For WooCommerce by Checkout < 1.4.11 - Settings Update via CSRF
Slug
checkout-plugins-stripe-woo
Published
2024-08-16
Title
Stripe Payments For WooCommerce by Checkout < 1.9.2 - Unauthenticated Insecure Direct Object Reference
Slug
checkout-plugins-stripe-woo
Published
2024-08-16
Title
Stripe Payments For WooCommerce by Checkout < 1.9.2 - Cross-Site Request Forgery
Slug
checkout-upsell-and-order-bumps
Published
2026-01-28
Title
UpsellWP <= 2.2.3 - Missing Authorization
Slug
checkout-upsell-and-order-bumps
Published
2026-03-14
Title
UpsellWP – WooCommerce Upsell and Related Products Offers < 2.2.5 - Authenticated (Shop manager+) SQL Injection
Slug
cheetaho-image-optimizer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cherry-plugin
Published
2016-06-22
Title
Cherry Plugin < 1.2.7 - Unauthenticated Arbitrary File Upload and Download
Slug
chessgame-shizzle
Published
2024-11-22
Title
Chessgame Shizzle < 1.3.1 - Reflected Cross-Site Scripting
Slug
chesstempoviewer
Published
2025-01-16
Title
Chess Tempo Viewer <= 0.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
chikuncount
Published
2014-08-01
Title
chikuncount - ofc_upload_image.php Arbitrary File Upload
Slug
child-support-calculator
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
child-support-calculator
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
child-theme-generator
Published
2021-11-18
Title
Child Theme Generator <= 2.2.7 - Reflected Cross-Site Scripting
Slug
child-themes
Published
2025-08-21
Title
Child Themes <= 1.0.1 - Reflected Cross-Site Scripting
Slug
child-themes-helper
Published
2025-02-03
Title
Child Themes Helper <= 2.2.7 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
chilexpress-oficial
Published
2023-05-30
Title
Chilexpress Woo Oficial <= 1.2.9 - Reflected XSS
Slug
chillpay-payment-gateway
Published
2025-04-09
Title
ChillPay WooCommerce < 2.6.0 - Stored XSS via CSRF
Slug
choice-payment-gateway-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
choice-payment-gateway-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
chopslider
Published
2020-05-09
Title
Chopslider <= 3.4 - Unauthenticated Blind SQL Injection
Slug
chordpress
Published
2025-06-19
Title
Lewe ChordPress <= 4.0.1 - Stored XSS via CSRF
Slug
chp-ads-block-detector
Published
2023-06-15
Title
CHP Ads Block Detector < 3.9.8 - Plugin Settings Update via CSRF
Slug
chp-ads-block-detector
Published
2023-06-15
Title
CHP Ads Block Detector < 3.9.8 - Subscriber+ Plugin Settings Update
Slug
chp-ads-block-detector
Published
2023-06-15
Title
CHP Ads Block Detector < 3.9.8 - Subscriber+ Stored Cross-Site Scripting