WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
click-pledge-connect
Published
2025-04-09
Title
Click & Pledge Connect Plugin < 2.24120000-WP6.7.1-WP6.6.1 - Unauthenticated SQL Injection
Slug
click-pledge-connect
Published
2025-07-01
Title
Click & Pledge Connect < 25.07000000-WP6.8.1 - Unauthenticated SQL Injection to Privilege Escalation
Slug
click-pledge-wpjobboard
Published
2025-07-11
Title
WordPress-WPJobBoard < 25.09000000-WP6.8.2-JB5.12.0 - Unauthenticated SQLi
Slug
click-to-call-or-chat-buttons
Published
2023-02-15
Title
Click to Call or Chat Buttons < 1.5.0 - Admin+ Stored XSS
Slug
click-to-chat-for-whatsapp
Published
2022-12-21
Title
Click to Chat < 3.18.1 - Contributor+ Stored XSS
Slug
click-to-chat-for-whatsapp
Published
2024-04-17
Title
Click to Chat – HoliThemes < 4.0 - Contributor+ LFI
Slug
click-to-chat-for-whatsapp
Published
2025-06-13
Title
Click to Chat < 4.23 - Contributor+ Stored XSS via data-no_number Parameter
Slug
click-to-chat-for-whatsapp
Published
2026-06-05
Title
Click to Chat < 4.40 - Contributor+ Stored XSS via num Shortcode Parameter
Slug
click-to-chat-for-whatsapp
Published
2026-10-13
Title
Click to Chat < 4.45 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI in the {url} Placeholder
Slug
click-to-copy-grab-box
Published
2014-08-01
Title
click-to-copy-grab-box <= 0.1.1 - XSS in ZeroClipboard
Slug
click-to-top
Published
2020-08-19
Title
Click to Top < 1.2.8 - Authenticated Stored Cross-Site Scripting
Slug
click-to-tweet
Published
2023-10-02
Title
Click To Tweet <= 2.0.14 - Reflected XSS
Slug
click-to-tweet
Published
2023-09-05
Title
Click To Tweet <= 2.0.14 - Missing Authorization
Slug
click-to-tweet
Published
2024-01-30
Title
Click To Tweet <= 2.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
click-tweet
Published
2025-09-26
Title
Click & Tweet <= 0.8.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
click5-crm-add-on-to-ninja-forms
Published
2026-10-09
Title
click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options Update
Slug
click5-crm-add-on-to-ninja-forms
Published
2026-10-09
Title
click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Stored XSS via post_notifications
Slug
clickbank-ads-clickbank-widget
Published
2015-05-06
Title
ClickBank Affiliate Ads < 1.35 - CSRF to Stored Cross-Site Scripting
Slug
clickbank-ads-clickbank-widget
Published
2015-05-06
Title
ClickBank Affiliate Ads < 1.35 - Admin+ Stored Cross-Site Scripting
Slug
clickbank-niche-storefronts
Published
2025-08-21
Title
Clickbank WordPress Plugin (Niche Storefront) <= 1.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
clickbank-storefront
Published
2024-12-05
Title
Clickbank WordPress Plugin (Storefront) <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
clickcease-click-fraud-protection
Published
2024-04-26
Title
ClickCease Click Fraud Protection < 3.2.8 - Cross-Site Request Forgery
Slug
clickcease-click-fraud-protection
Published
2024-05-06
Title
ClickCease Click Fraud Protection < 3.2.5 - Improper Authorization to sensitive information exposure via get_settings
Slug
clickdesigns
Published
2025-01-06
Title
ClickDesigns < 2.0.0 - Missing Authorization to API Key Modification or Removal
Slug
clickdesk-live-support-chat
Published
2014-08-01
Title
Click Desk Live Support Chat - Cross Site Scripting