WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
coding-blocks
Published
2025-12-11
Title
Coding Blocks <= 1.1.0 - Cross-Site Request Forgery to Settings Update
Slug
codistoconnect
Published
2025-12-03
Title
Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration - Powered by Codisto <= 1.3.65 - Unauthenticated Stored Cross-Site Scripting
Slug
codistoconnect
Published
2026-01-15
Title
Omnichannel for WooCommerce <= 1.3.65 - Unauthenticated Stored Cross-Site Scripting
Slug
coditor
Published
2020-09-22
Title
Coditor <= 1.1 - Arbitrary File Edition, Deletion and Internal Directory Listing in wp-content
Slug
codoc
Published
2024-07-10
Title
codoc < 0.9.52 - Reflected Cross-Site Scripting
Slug
cognito-forms
Published
2024-12-11
Title
Cognito Forms <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
coil-web-monetization
Published
2025-11-17
Title
Coil Web Monetization <= 2.0.2 - Cross-Site Request Forgery
Slug
coinbase-commerce-for-contact-form-7
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
coinpayments-payment-gateway-for-woocommerce
Published
2025-05-07
Title
CoinPayments.net Payment Gateway for WooCommerce < 1.0.18 - Unauthenticated PHP Object Injection
Slug
coins-marketcap
Published
2024-12-30
Title
Coins MarketCap < 5.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
colibri-page-builder
Published
2023-06-22
Title
Colibri Page Builder < 1.0.229 - Admin+ SQL Injection
Slug
colibri-page-builder
Published
2023-12-23
Title
Colibri Page Builder < 1.0.240 - Contributor+ Stored XSS
Slug
colibri-page-builder
Published
2023-12-19
Title
Colibri Page Builder < 1.0.248 - Contributor+ Stored XSS
Slug
colibri-page-builder
Published
2024-02-22
Title
Colibri Page Builder < 1.0.260 - Import Images, Delete Post, Save Theme Data via CSRF
Slug
colibri-page-builder
Published
2024-02-22
Title
Colibri Page Builder < 1.0.260 - Arbitrary Shortcode Call via CSRF
Slug
colibri-page-builder
Published
2024-04-01
Title
Colibri Page Builder < 1.0.270 - Contributor+ Stored XSS
Slug
colibri-page-builder
Published
2024-04-22
Title
Colibri Page Builder < 1.0.272 - Contributor+ Stored Cross-Site Scripting
Slug
colibri-page-builder
Published
2024-04-22
Title
Colibri Page Builder < 1.0.264 - Author+ Stored Cross-Site Scripting
Slug
colibri-page-builder
Published
2024-04-22
Title
Colibri Page Builder < 1.0.272 - Contributor+ Stored Cross-Site Scripting via the plugin's 'colibri_breadcrumb_element' shortcode
Slug
colibri-page-builder
Published
2024-03-26
Title
Colibri Page Builder < 1.0.249 - Missing Authorization
Slug
colibri-page-builder
Published
2024-06-05
Title
Colibri Page Builder < 1.0.277 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
colibri-page-builder
Published
2024-06-06
Title
Colibri Page Builder < 1.0.277 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode
Slug
colibri-page-builder
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Slug
colibri-page-builder
Published
2025-04-04
Title
Colibri Page Builder < 1.0.332 - Contributor+ Stored XSS
Slug
colibri-page-builder
Published
2025-09-22
Title
Colibri Page Builder < 1.0.334 - Authenticated (Shop manager+) Stored Cross-Site Scripting