WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
colibri-page-builder
Published
2025-10-10
Title
Colibri Page Builder < 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode
Slug
colibri-page-builder
Published
2025-12-12
Title
Colibri Page Builder < 1.0.342 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
colibri-page-builder
Published
2025-12-18
Title
Colibri Page Builder < 1.0.358 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
collage-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
collage-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
collapsing-archives
Published
2024-08-26
Title
Collapsing Archives < 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
collapsing-archives
Published
2026-02-16
Title
Collapsing Archives < 3.0.8 - Authenticated (Contributor+) SQL Injection
Slug
collapsing-categories
Published
2024-12-17
Title
Collapsing Categories < 3.0.9 - Unauthenticated SQL Injection
Slug
collapsing-categories
Published
2026-02-16
Title
Collapsing Categories < 3.0.12 - Authenticated (Contributor+) SQL Injection
Slug
collect-and-deliver-interface-for-woocommerce
Published
2022-06-21
Title
CDI < 5.1.9 - Reflected Cross-Site-Scripting
Slug
collect-and-deliver-interface-for-woocommerce
Published
2024-11-13
Title
CDI < 5.5.6 - Authenticated (Shop Manager+) Arbitrary File Upload
Slug
collectchat
Published
2023-11-24
Title
Chatbot for WordPress < 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
collectchat
Published
2024-03-28
Title
collectchat < 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
collectchat
Published
2024-07-15
Title
CollectChat < 2.4.4 - Admin+ XSS
Slug
collectchat
Published
2026-02-13
Title
Chatbot for WordPress by Collect.chat ⚡️ < 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Field
Slug
collectchat
Published
2026-04-21
Title
Chatbot for WordPress by Collect.chat ⚡️ < 2.5.0 - Unauthenticated Stored Cross-Site Scripting
Slug
college-publisher-import
Published
2021-04-11
Title
College Publisher Import <= 0.1 - Arbitrary File Upload to RCE
Slug
collision-testimonials
Published
2014-08-01
Title
Collision Testimonials <= 3.0 - SQL Injection
Slug
color-palette
Published
2025-06-12
Title
Color Palette <= 4.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via hex Parameter
Slug
color-your-bar
Published
2025-05-07
Title
Color Your Bar <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
colorful-categories
Published
2021-10-13
Title
Colorful Categories < 2.0.15 - Arbitrary Colors Update via CSRF
Slug
colorlib-coming-soon-maintenance
Published
2022-05-30
Title
Coming Soon and Maintenance by Colorlib < 1.0.99 - Admin+ Stored Cross Site Scripting
Slug
colorlib-coming-soon-maintenance
Published
2024-03-19
Title
Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure
Slug
colorway
Published
2023-02-08
Title
ColorWay <= 4.2.3 - Cross-Site Request Forgery
Slug
colour-smooth-maps
Published
2024-11-08
Title
Smooth Maps <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting