WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
classified-listing
Published
2026-07-23
Title
Classified Listing < 5.4.4 - Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_search
Slug
classified-listing
Published
2026-09-02
Title
Classified Listing – AI-Powered Classified ads & Business Directory < 6.1.5 - Missing Authorization
Slug
classified-listing
Published
2026-09-02
Title
Classified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDOR
Slug
classified-listing
Published
2026-09-28
Title
Classified Listing – AI-Powered Classified ads & Business Directory < 6.1.5 - Unauthenticated Stored Cross-Site Scripting
Slug
classified-listing
Published
2026-10-04
Title
Classified Listing – AI-Powered Classified ads & Business Directory < 6.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
classified-listing
Published
2026-10-12
Title
Classified Listing < 6.1.1 - Subscriber+ Unattached Media Deletion and Modification via Gallery AJAX Handlers
Slug
classified-listing
Published
2026-10-19
Title
Classified Listing – AI-Powered Classified ads & Business Directory < 6.2.0 - Authenticated (Subscriber+) Arbitrary PHP Code Execution
Slug
classified-listing-pro
Published
2022-08-22
Title
Classified Listing Pro < 2.0.20 - Reflected Cross-Site Scripting
Slug
classified-listing-pro
Published
2022-08-22
Title
Classima < 2.1.11 - Reflected Cross-Site Scripting
Slug
classified-listing-store
Published
2022-08-22
Title
Classima < 2.1.11 - Reflected Cross-Site Scripting
Slug
classima-core
Published
2022-08-22
Title
Classima < 2.1.11 - Reflected Cross-Site Scripting
Slug
classy-addons-for-elementor
Published
2024-10-31
Title
Classy Addons for Elementor <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
classyfrieds
Published
2021-04-10
Title
Classyfrieds <= 3.8 - Authenticated Arbitrary File Upload to RCE
Slug
clean-and-simple-contact-form-by-meg-nicholas
Published
2014-11-07
Title
Contact Form Clean & Simple <= 4.4.0 - Cross-Site Scripting (XSS)
Slug
clean-and-simple-contact-form-by-meg-nicholas
Published
2020-01-22
Title
Contact Form Clean and Simple < 4.7.1 - Authenticated Stored XSS
Slug
clean-contact
Published
2022-06-01
Title
Clean-Contact <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
clean-login
Published
2017-05-05
Title
Clean Login < 1.8 - Change Redirect URL CSRF
Slug
clean-login
Published
2015-07-27
Title
Clean Login < 1.5.1 - Reflected XSS
Slug
clean-login
Published
2021-08-09
Title
Clean Login 1.12.6.3 - Reflected Cross-Site Scripting
Slug
clean-login
Published
2023-01-10
Title
Clean Login < 1.13.7 - Contributor+ Stored XSS via Shortcode
Slug
clean-login
Published
2024-08-29
Title
Clean Login < 1.14.6 - Authenticated (Contributor+) Local File Inclusion
Slug
clean-login
Published
2026-06-16
Title
Clean Login < 1.16 - Unauthenticated Insecure Direct Object Reference
Slug
clean-login
Published
2026-09-16
Title
Clean Login < 1.19 - Unauthenticated Account Creation with Registration Disabled
Slug
clean-login
Published
2026-09-16
Title
Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison
Slug
clean-login
Published
2026-10-27
Title
Clean Login < 1.21 - Missing Authorization to Authenticated (Contributor+) Arbitrary Clean-Login Option Update via 'save_post' Hook