WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cloudflare
Published
2016-03-28
Title
CloudFlare <= 1.3.20 - Authenticated Cross-Site Scripting (XSS)
Slug
cloudflare
Published
2017-08-26
Title
Multiple Plugins - Unauthenticated RCE via PHPUnit
Slug
cloudflare
Published
2024-01-04
Title
Cloudflare < 4.12.3 - Missing Authorization via initProxy
Slug
cloudflare-cache-purge
Published
2025-01-03
Title
CloudFlare(R) Cache Purge <= 1.2 - Reflected Cross-Site Scripting
Slug
cloudinary-image-management-and-manipulation-in-the-cloud-cdn
Published
2026-01-22
Title
Cloudinary < 3.3.1 - Missing Authorization
Slug
cloudnet-sync
Published
2023-10-25
Title
Download CloudNet360 <= 3.2.0 - Reflected Cross-Site Scripting
Slug
cloudsafe365-for-wp
Published
2014-08-01
Title
Cloudsafe365 - Multiple Vulnerabilities
Slug
cloudsecure-wp-security
Published
2026-05-28
Title
CloudSecure WP Security < 1.4.8 - Two-Factor Authentication Bypass
Slug
clover-online-orders
Published
2023-10-22
Title
Smart Online Order for Clover < 1.5.5 - Reflected XSS
Slug
clover-online-orders
Published
2024-03-16
Title
Smart Online Order for Clover < 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
clover-online-orders
Published
2024-04-05
Title
Smart Online Order for Clover < 1.5.5 - Cross-Site Request Forgery
Slug
clover-online-orders
Published
2024-08-20
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Update
Slug
clover-online-orders
Published
2024-08-20
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization to Plugin Deactivation and Data Deletion
Slug
clover-online-orders
Published
2024-08-12
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization
Slug
clover-online-orders
Published
2024-08-12
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization
Slug
clover-online-orders
Published
2024-10-14
Title
Smart Online Order for Clover < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode
Slug
clover-online-orders
Published
2024-10-15
Title
Smart Online Order for Clover < 1.5.8 - Reflected Cross-Site Scripting
Slug
clover-online-orders
Published
2026-04-15
Title
Smart Online Order for Clover < 1.6.5 - Cross-Site Request Forgery
Slug
clover-online-orders
Published
2026-05-27
Title
Smart Online Order for Clover < 1.6.1 - Unauthenticated Stored Cross-Site Scripting
Slug
clover-online-orders
Published
2026-05-28
Title
Smart Online Order for Clover < 1.6.1 - Unauthenticated Sensitive Information Exposure
Slug
clover-online-orders
Published
2026-05-28
Title
Smart Online Order for Clover < 1.6.1 - Missing Authorization
Slug
clover-online-orders
Published
2026-08-10
Title
Smart Online Order for Clover < 1.6.2 - Unauthenticated Stored Cross-Site Scripting
Slug
clp-custom-login-page
Published
2025-04-01
Title
CLP – Custom Login Page by NiteoThemes <= 1.5.5 - Cross-Site Request Forgery
Slug
clp-varnish-cache
Published
2026-01-26
Title
CLP Varnish Cache < 1.0.3 - Missing Authorization
Slug
club-management-software
Published
2021-07-23
Title
WordPress Membership SwiftCloud.io <= 1.0 - Authenticated SQL Injection