WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cm-pop-up-banners
Published
2024-07-01
Title
CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS
Slug
cm-pop-up-banners
Published
2024-08-22
Title
CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS
Slug
cm-pop-up-banners
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS
Slug
cm-pop-up-banners
Published
2025-07-16
Title
CM Pop-Up banners < 1.8.5 - Missing Authorization
Slug
cm-registration-pro
Published
2021-05-17
Title
CM Registration Pro < 3.2.1 - PHP Object Injection
Slug
cm-table-of-content
Published
2024-10-28
Title
CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF
Slug
cm-table-of-content
Published
2024-10-31
Title
CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF
Slug
cm-video-lesson-manager
Published
2021-10-25
Title
Video Lessons Manager - Admin+ Stored Cross-Site Scripting
Slug
cm-video-lesson-manager
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS
Slug
cm-video-lesson-manager-pro
Published
2021-10-25
Title
Video Lessons Manager - Admin+ Stored Cross-Site Scripting
Slug
cmb2
Published
2024-04-03
Title
CMB2 < 2.11.0 - Authenticated (Contributor+) PHP Object Injection
Slug
cmc-migrate
Published
2025-01-16
Title
CMC MIGRATE <= 0.0.3 - Reflected Cross-Site Scripting
Slug
cmp-coming-soon-maintenance
Published
2020-08-04
Title
CMP - Coming Soon & Maintenance < 3.8.2 - Improper Access Controls on AJAX Calls
Slug
cmp-coming-soon-maintenance
Published
2022-01-17
Title
Coming Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update
Slug
cmp-coming-soon-maintenance
Published
2023-03-07
Title
Coming Soon & Maintenance < 4.1.7 - Unauthenticated Post/Page Access in Maintenance Mode
Slug
cmp-coming-soon-maintenance
Published
2023-04-18
Title
CMP – Coming Soon & Maintenance < 4.1.8 - Maintenance Mode Bypass
Slug
cmp-coming-soon-maintenance
Published
2024-03-27
Title
CMP – Coming Soon & Maintenance < 4.1.11 - Authenticated (Admin+) Server-Side Request Forgery
Slug
cmp-coming-soon-maintenance
Published
2025-04-04
Title
CMP – Coming Soon & Maintenance < 4.1.15 - Admin+ Arbitrary File Upload
Slug
cmp-coming-soon-maintenance
Published
2026-04-17
Title
CMP < 4.1.17 - Admin+ Arbitrary File Upload and Remote Code Execution
Slug
cmp-coming-soon-maintenance
Published
2026-08-25
Title
CMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajax
Slug
cmp-coming-soon-maintenance
Published
2026-08-25
Title
CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Privilege Escalation via cmp_ajax_import_settings
Slug
cmp-coming-soon-maintenance
Published
2026-08-25
Title
CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Stored XSS via niteoCS_socialmedia
Slug
cms-blocks
Published
2025-06-27
Title
CMS Blocks <= 1.1 - Missing Authorization
Slug
cms-commander-client
Published
2017-01-25
Title
CMS Commander Client <= 2.21 - Unauthenticated PHP Object Injection
Slug
cms-commander-client
Published
2023-06-19
Title
CMS Commander < 2.288 - Unauthenticated Authorisation Bypass