WordPress Plugin Vulnerabilities | Page 44 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2025-03-21

Title

Code Clone <= 0.9 - Authenticated (Administrator+) SQL Injection via snippetId Parameter

Slug

Published

2025-06-19

Title

Code Engine < 0.3.3 - Contributor+ Stored XSS

Slug

Published

2025-08-07

Title

Code Engine < 0.3.4 - Authenticated (Contributor+) Remote Code Execution

Slug

Published

2024-10-29

Title

Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading

Slug

Published

2026-02-03

Title

Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter

Slug

Published

2024-10-21

Title

Code Generate <= 1.0 - Reflected Cross-Site Scripting

Slug

code-generator-pro

Published

2024-12-14

Title

Code Generator Pro <= 1.2 - Unauthenticated SQL Injection

Slug

Published

2022-02-28

Title

Unauthorised AJAX Calls via Freemius

Slug

Published

2023-07-18

Title

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Slug

Published

2026-04-30

Title

Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter

Slug

code-quality-control-tool

Published

2025-10-10

Title

Code Quality Control Tool < 2.2 - Unauthenticated Information Exposure via Log Files

Slug

Published

2016-07-24

Title

Code Snippets < 2.7.0 - Authenticated Reflected Cross-Site Scripting (XSS)

Slug

Published

2020-01-29

Title

Code Snippets < 2.14.0 - CSRF to RCE

Slug

Published

2021-12-27

Title

Code Snippets < 2.14.3 - Reflected Cross-Site Scripting

Slug

Published

2022-05-18

Title

Code Snippets < 2.14.4 - Reflected Cross-Site Scripting

Slug

Published

2023-11-06

Title

Code Snippets < 3.6.0 - Arbitrary settings change via CSRF

Slug

Published

2025-11-18

Title

Code Snippets < 3.9.2 - Contributor+ PHP Code Injection via extract() and PHP Filter Chains

Slug

Published

2026-02-05

Title

Code Snippets < 3.9.5 - Cloud Snippet Download/Update Actions via CSRF

Slug

code-snippets-cpt

Published

2025-03-07

Title

Code Snippets CPT <= 2.1.0 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

Slug

code-snippets-extended

Published

2022-05-04

Title

Code Snippets Extended <= 1.4.7 - RCE via CSRF

Slug

code-snippets-extended

Published

2022-05-17

Title

Code Snippets Extended <= 1.4.7 - Arbitrary Snippet Deletion/Disabling via CSRF

Slug

code-snippets-extended

Published

2022-05-17

Title

Code Snippets Extended <= 1.4.7 - Stored Cross-Site Scripting via CSRF

Slug

codeablepress-simple-frontend-profile-picture-upload

Published

2025-08-14

Title

CodeablePress <= 1.0.0 - Missing Authorization

Slug

codebard-help-desk

Published

2024-12-19

Title

CodeBard Help Desk < 1.1.2 - Cross-Site Request Forgery

Slug

codebard-help-desk

Published

2025-01-14

Title

CodeBard Help Desk <= 1.1.2 - Reflected Cross-Site Scripting