WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cmsmasters-content-composer
Published
2026-02-02
Title
CMSMasters Content Composer < 1.4.6 - Authenticated (Contributor+) Local File Inclusion
Slug
cmsmasters-content-composer
Published
2025-12-14
Title
CMSMasters Content Composer < 2.5.9 - Missing Authorization
Slug
cmsmasters-elementor-addon
Published
2024-12-02
Title
CMSMasters Elementor Addon < 1.15.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
cmyee-momentopress
Published
2023-11-06
Title
MomentoPress for Momento360 < 1.0.2 - Contributor+ Stored XSS
Slug
cnvrse
Published
2026-02-11
Title
Cnvrse < 026.02.10.20 - Unauthenticated Insecure Direct Object Reference
Slug
cnzz51la-for-wordpress
Published
2025-01-16
Title
CNZZ&51LA for WordPress <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
co-authors-plus
Published
2022-06-02
Title
Co-Authors-Plus 3.5/3.5.1 - Guest Authors Email Address Disclosure
Slug
co-marquage-service-public
Published
2024-03-25
Title
Co-marquage service-public.fr < 0.5.73 - Reflected Cross-Site Scripting via search_term
Slug
co-marquage-service-public
Published
2024-03-25
Title
Co-marquage service-public.fr < 0.5.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
co-marquage-service-public
Published
2024-11-20
Title
Co-marquage service-public.fr < 0.5.77 - Reflected Cross-Site Scripting via add_query_arg Parameter
Slug
co-marquage-service-public
Published
2025-12-31
Title
Co-marquage service-public.fr <= 0.5.77 - Cross-Site Request Forgery
Slug
co2ok-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
co2ok-for-woocommerce
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
co2ok-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
coachific-shortcode
Published
2026-04-14
Title
Coachific Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'userhash' Shortcode Attribute
Slug
coaching-staffs
Published
2025-02-18
Title
Coaching Staffs < 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
coblocks
Published
2024-03-12
Title
Page Builder Gutenberg Blocks < 3.1.7 - Contributor+ Stored XSS
Slug
coblocks
Published
2024-03-22
Title
Page Builder Gutenberg Blocks – CoBlocks < 3.1.7 - Contributor+ Stored XSS
Slug
coblocks
Published
2024-05-31
Title
Page Builder Gutenberg Blocks – CoBlocks < 3.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profiles
Slug
coblocks
Published
2024-07-02
Title
CoBlocks < 3.1.12 - Contributor+ SSRF
Slug
coblocks
Published
2024-08-08
Title
CoBlocks < 3.1.13 - Editor+ Stored XSS
Slug
coblocks
Published
2025-01-24
Title
CoBlocks < 3.1.14 - Missing Authorization
Slug
coblocks
Published
2026-01-07
Title
Page Builder Gutenberg Blocks – CoBlocks < 3.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
coblocks
Published
2026-04-17
Title
Page Builder Gutenberg Blocks < 3.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via External iCal Feed Data
Slug
cobwebo-url
Published
2025-01-16
Title
Cobwebo URL Plugin <= 1.0 - Reflected Cross-Site Scripting