WordPress Plugin Vulnerabilities | Page 42 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

co-marquage-service-public

Published

2024-11-20

Title

Co-marquage service-public.fr < 0.5.77 - Reflected Cross-Site Scripting via add_query_arg Parameter

Slug

co-marquage-service-public

Published

2025-12-31

Title

Co-marquage service-public.fr <= 0.5.77 - Cross-Site Request Forgery

Slug

co2ok-for-woocommerce

Published

2022-02-28

Title

Unauthorised AJAX Calls via Freemius

Slug

co2ok-for-woocommerce

Published

2019-02-26

Title

Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update

Slug

co2ok-for-woocommerce

Published

2023-07-18

Title

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Slug

coaching-staffs

Published

2025-02-18

Title

Coaching Staffs < 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2024-03-12

Title

Page Builder Gutenberg Blocks < 3.1.7 - Contributor+ Stored XSS

Slug

Published

2024-03-22

Title

Page Builder Gutenberg Blocks – CoBlocks < 3.1.7 - Contributor+ Stored XSS

Slug

Published

2024-05-31

Title

Page Builder Gutenberg Blocks – CoBlocks < 3.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profiles

Slug

Published

2024-07-02

Title

CoBlocks < 3.1.12 - Contributor+ SSRF

Slug

Published

2024-08-08

Title

CoBlocks < 3.1.13 - Editor+ Stored XSS

Slug

Published

2025-01-24

Title

CoBlocks < 3.1.14 - Missing Authorization

Slug

Published

2026-01-07

Title

Page Builder Gutenberg Blocks – CoBlocks < 3.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-01-16

Title

Cobwebo URL Plugin <= 1.0 - Reflected Cross-Site Scripting

Slug

Published

2025-03-21

Title

Code Clone <= 0.9 - Authenticated (Administrator+) SQL Injection via snippetId Parameter

Slug

Published

2025-06-19

Title

Code Engine < 0.3.3 - Contributor+ Stored XSS

Slug

Published

2025-08-07

Title

Code Engine < 0.3.4 - Authenticated (Contributor+) Remote Code Execution

Slug

Published

2024-10-29

Title

Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading

Slug

Published

2026-02-03

Title

Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter

Slug

Published

2024-10-21

Title

Code Generate <= 1.0 - Reflected Cross-Site Scripting

Slug

code-generator-pro

Published

2024-12-14

Title

Code Generator Pro <= 1.2 - Unauthenticated SQL Injection

Slug

Published

2022-02-28

Title

Unauthorised AJAX Calls via Freemius

Slug

Published

2023-07-18

Title

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Slug

code-quality-control-tool

Published

2025-10-10

Title

Code Quality Control Tool < 2.2 - Unauthenticated Information Exposure via Log Files

Slug

Published

2016-07-24

Title

Code Snippets < 2.7.0 - Authenticated Reflected Cross-Site Scripting (XSS)