WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cm-video-lesson-manager
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS
Slug
cm-video-lesson-manager-pro
Published
2021-10-25
Title
Video Lessons Manager - Admin+ Stored Cross-Site Scripting
Slug
cmb2
Published
2024-04-03
Title
CMB2 < 2.11.0 - Authenticated (Contributor+) PHP Object Injection
Slug
cmc-migrate
Published
2025-01-16
Title
CMC MIGRATE <= 0.0.3 - Reflected Cross-Site Scripting
Slug
cmp-coming-soon-maintenance
Published
2020-08-04
Title
CMP - Coming Soon & Maintenance < 3.8.2 - Improper Access Controls on AJAX Calls
Slug
cmp-coming-soon-maintenance
Published
2022-01-17
Title
Coming Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update
Slug
cmp-coming-soon-maintenance
Published
2023-03-07
Title
Coming Soon & Maintenance < 4.1.7 - Unauthenticated Post/Page Access in Maintenance Mode
Slug
cmp-coming-soon-maintenance
Published
2023-04-18
Title
CMP – Coming Soon & Maintenance < 4.1.8 - Maintenance Mode Bypass
Slug
cmp-coming-soon-maintenance
Published
2024-03-27
Title
CMP – Coming Soon & Maintenance < 4.1.11 - Authenticated (Admin+) Server-Side Request Forgery
Slug
cmp-coming-soon-maintenance
Published
2025-04-04
Title
CMP – Coming Soon & Maintenance < 4.1.15 - Admin+ Arbitrary File Upload
Slug
cmp-coming-soon-maintenance
Published
2026-04-17
Title
CMP < 4.1.17 - Admin+ Arbitrary File Upload and Remote Code Execution
Slug
cms-blocks
Published
2025-06-27
Title
CMS Blocks <= 1.1 - Missing Authorization
Slug
cms-commander-client
Published
2017-01-25
Title
CMS Commander Client <= 2.21 - Unauthenticated PHP Object Injection
Slug
cms-commander-client
Published
2023-06-19
Title
CMS Commander < 2.288 - Unauthenticated Authorisation Bypass
Slug
cms-commander-client
Published
2026-03-20
Title
CMS Commander <= 2.288 - Custom+ SQL Injection via 'or_blogname' Parameter
Slug
cms-fuer-motorrad-werkstaetten
Published
2026-04-16
Title
CMS für Motorrad Werkstätten <= 1.0.0 - Cross-Site Request Forgery
Slug
cms-fuer-motorrad-werkstaetten
Published
2026-04-20
Title
Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authenticated (Subscriber+) SQL Injection via 'arttype' Parameter
Slug
cms-pack-cache
Published
2014-08-01
Title
Cms Pack 1.3 - Shell Upload
Slug
cms-press
Published
2023-03-13
Title
CMS Press <= 0.2.3 - Admin+ Stored XSS
Slug
cms-tree-page-view
Published
2014-08-01
Title
CMS Tree Page View 1.2.4 - Page Creation CSRF
Slug
cms-tree-page-view
Published
2014-08-01
Title
CMS Tree Page View 0.8.8 - XSS
Slug
cms-tree-page-view
Published
2015-04-21
Title
CMS Tree Page View 1.2.31 - Multiple Parameter XSS
Slug
cms-tree-page-view
Published
2023-04-20
Title
CMS Tree Page View < 1.6.8 - Reflected XSS
Slug
cmsmasters-content-composer
Published
2024-10-08
Title
CMSMasters Content Composer < 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
cmsmasters-content-composer
Published
2025-07-01
Title
CMSMasters Content Composer < 2.5.7 - Unauthenticated Local File Inclusion