WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
clear-sucuri-cache
Published
2025-03-28
Title
Clear Sucuri Cache <= 1.4 - Missing Authorization
Slug
clearbit
Published
2025-04-01
Title
Clearbit Reveal <= 1.0.6 - Cross-Site Request Forgery
Slug
clearblue-ovulation-calculator
Published
2025-07-24
Title
Clearblue® Ovulation Calculator <= 1.2.4 - Unauthenticated Local File Inclusion
Slug
clearfy
Published
2022-06-14
Title
Clearfy Cache < 2.0.5 - Reflected Cross-Site Scripting
Slug
clearfy
Published
2024-05-13
Title
Clearfy Cache < 2.3.3 - Cross-Site Request Forgery
Slug
clearfy
Published
2024-08-12
Title
Clearfy Cache < 2.2.5 - Missing Authorization
Slug
clearfy
Published
2025-04-11
Title
Webcraftic Clearfy – WordPress optimization plugin < 2.3.3 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy'
Slug
clearfy
Published
2025-04-11
Title
Webcraftic Clearfy – WordPress optimization plugin < 2.3.2 - Cross-Site Request Forgery to Clear Cache
Slug
clearfy
Published
2026-01-08
Title
Clearfy < 2.4.1 - Cross-Site Request Forgery to Update Notification Tampering
Slug
clearout-email-validator
Published
2025-03-27
Title
Clearout Email Validator < 3.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cleeng
Published
2014-08-01
Title
cleeng <= 2.3.2 - XSS in ZeroClipboard
Slug
clerkio
Published
2022-11-10
Title
Clerk < 4.0.0 - Authentication Bypass and API Keys Disclosure
Slug
clever-fox
Published
2024-06-06
Title
Clever Fox – One Click Website Importer by Nayra Themes < 25.2.1 - Missing Authorization to arbitrary theme activation via clever-fox-activate-theme
Slug
clever-fox
Published
2024-06-06
Title
Clever Fox < 25.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
clevernode-related-content
Published
2024-12-11
Title
CleverNode Related Content < 1.1.6 - Reflected Cross-Site Scripting
Slug
cleverreach-wc
Published
2025-04-04
Title
Official CleverReach Plugin for WooCommerce < 3.4.7 - Settings Update via CSRF
Slug
cleverreach-wp
Published
2025-08-05
Title
CleverReach WP < 1.5.21 - Unauthenticated SQL Injection via title
Slug
cleverreach-wp
Published
2026-01-15
Title
CleverReach® WP < 1.5.22 - Unauthenticated SQL Injection via id
Slug
cleverwise-daily-quotes
Published
2023-08-17
Title
Cleverwise Daily Quotes <= 3.2 - Stored XSS via CSRF
Slug
clicface-trombi
Published
2025-02-28
Title
Clicface Trombi <= 2.08 - Authenticated (Contributor+) Stored Cross-Site Scripting via nom Parameter
Slug
click-datos-lopd
Published
2023-10-16
Title
Protección de Datos RGPD <= 3.1.0 - Reflected XSS
Slug
click-pledge-connect
Published
2025-04-09
Title
Click & Pledge Connect Plugin < 2.24120000-WP6.7.1-WP6.6.1 - Unauthenticated SQL Injection
Slug
click-pledge-connect
Published
2025-07-01
Title
Click & Pledge Connect < 25.07000000-WP6.8.1 - Unauthenticated SQL Injection to Privilege Escalation
Slug
click-pledge-wpjobboard
Published
2025-07-11
Title
WordPress-WPJobBoard < 25.09000000-WP6.8.2-JB5.12.0 - Unauthenticated SQLi
Slug
click-to-call-or-chat-buttons
Published
2023-02-15
Title
Click to Call or Chat Buttons < 1.5.0 - Admin+ Stored XSS