WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
client-showcase
Published
2025-04-01
Title
Client Showcase <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
clients
Published
2024-12-06
Title
Clients <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
clients
Published
2025-04-02
Title
Clients <= 1.1.4 - Missing Authorization
Slug
clikstats
Published
2025-12-03
Title
Clik stats <= 0.8 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
clinicalwp-core
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
clinicalwp-core
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
clinicalwp-core
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
clink
Published
2025-03-24
Title
Clink <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
clink-gateway-for-woocommerce
Published
2026-08-07
Title
Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) < 1.0.8 - Missing Authorization
Slug
clinked-client-portal
Published
2025-01-29
Title
Clinked Client Portal < 1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
clinked-client-portal
Published
2025-04-10
Title
Clinked Client Portal <= 1.10 - Reflected Cross-Site Scripting
Slug
clio-grow-form
Published
2023-02-20
Title
Clio Grow < 1.0.1 - Admin+ Stored XSS
Slug
clio-grow-form
Published
2024-10-03
Title
Clio Grow < 1.0.3 - Reflected Cross-Site Scripting
Slug
clio-grow-form
Published
2024-10-15
Title
Clio Grow < 1.0.3 - Reflected Cross-Site Scripting
Slug
clipart
Published
2024-12-07
Title
ClipArt <= 0.2 - Reflected XSS
Slug
cliplink
Published
2025-06-19
Title
ClipLink <= 1.1 - Cross-Site Request Forgery
Slug
clipr
Published
2022-03-30
Title
Clipr <= 1.2.3 - Admin+ Stored Cross-Site Scripting
Slug
cliptakes
Published
2025-01-22
Title
Cliptakes < 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cloak-front-end-email
Published
2023-01-11
Title
Cloak Front End Email < 1.9.2 - Contributor+ Stored XSS
Slug
cloak-front-end-email
Published
2025-04-17
Title
Cloak Front End Email < 1.9.6 - Missing Authorization
Slug
clock-in-portal
Published
2023-04-18
Title
Clock In Portal <= 2.2 - Holidays Deletion via CSRF
Slug
clock-in-portal
Published
2023-04-18
Title
Clock In Portal <= 2.2 - Designation Deletion via CSRF
Slug
clock-in-portal
Published
2023-04-18
Title
Clock In Portal <= 2.2 - Staff Deletion via CSRF
Slug
clockify-lite
Published
2025-04-01
Title
Clockinator Lite <= 1.0.7 - Missing Authorization
Slug
clockwork-two-factor-authentication
Published
2017-12-14
Title
Multiple Mediaburst/Clockwork Plugins - Cross-Site Scripting (XSS)