WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
check-zipcode
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
check-zipcode
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
checkbot
Published
2025-04-25
Title
CheckBot <= 1.05 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
checkbox
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
checkbox
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
checkbox
Published
2025-11-20
Title
Checkbox < 2.8.11 - Missing Authorization to Unauthenticated Log Clearing
Slug
checkfront-wp-booking
Published
2023-09-21
Title
Checkfront Online Booking System < 3.7 - Settings Update via CSRF
Slug
checkimate
Published
2026-07-31
Title
Checkimate <= 1.0.13 - Unauthenticated License Deactivation via Hardcoded Secret
Slug
checklist
Published
2019-09-10
Title
Checklist < 1.1.9 - Unauthenticated Reflected XSS
Slug
checklist
Published
2025-03-31
Title
Checklist <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
checkout-custom-fields-builder-for-woocommerce
Published
2026-09-08
Title
Checkout Custom Fields Builder for WooCommerce < 1.1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation via 'plugin' Parameter
Slug
checkout-fees-for-woocommerce
Published
2024-04-25
Title
Payment Gateway Based Fees and Discounts for WooCommerce < 2.12.2 - Cross-Site Request Forgery to Notice Dismissal
Slug
checkout-fees-for-woocommerce
Published
2026-06-25
Title
Payment Gateway Based Fees and Discounts for WooCommerce < 3.1.0 - Unauthenticated Insecure Direct Object Reference
Slug
checkout-field-editor-and-manager-for-woocommerce
Published
2026-07-27
Title
Checkout Field Editor for WooCommerce – Checkout Manager < 3.0.6 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Slug
checkout-field-visibility-for-woocommerce
Published
2025-04-21
Title
Checkout Field Visibility for WooCommerce < 1.4.0 - Unauthenticated Local File Inclusion
Slug
checkout-files-upload-woocommerce
Published
2022-05-04
Title
Checkout Files Upload for WooCommerce < 2.1.3 - Reflected Cross-Site Scripting
Slug
checkout-files-upload-woocommerce
Published
2025-04-16
Title
Checkout Files Upload for WooCommerce < 2.2.1 - Contributor+ Stored XSS
Slug
checkout-files-upload-woocommerce
Published
2025-11-17
Title
Checkout Files Upload for WooCommerce < 2.2.2 - Unauthenticated Stored Cross-Site Scripting
Slug
checkout-files-upload-woocommerce
Published
2026-05-12
Title
Checkout Files Upload for WooCommerce < 2.2.6 - Unauthenticated Insecure Direct Object Reference
Slug
checkout-files-upload-woocommerce
Published
2026-10-26
Title
Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload
Slug
checkout-for-paypal
Published
2022-11-22
Title
Checkout for PayPal < 1.0.14 - Contributor+ Stored XSS
Slug
checkout-for-paypal
Published
2025-01-16
Title
Checkout for PayPal < 1.0.33 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
checkout-for-paypal
Published
2025-04-16
Title
Checkout for PayPal < 1.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
checkout-for-paypal
Published
2026-02-19
Title
Checkout for PayPal < 1.0.47 - Missing Authorization
Slug
checkout-freemius-rewamped
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting