WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
comment-images-reloaded
Published
2024-07-08
Title
Comment Images Reloaded <= 2.2.1 - Authenticated (Subscriber+) Arbitrary Media Deletion
Slug
comment-info-detector
Published
2025-10-02
Title
Comment Info Detector <= 1.0.5 - Cross-Site Request Forgery to Settings Update
Slug
comment-license
Published
2022-06-16
Title
Comment License < 1.4.0 - Arbitrary Settings Update via CSRF
Slug
comment-link-remove
Published
2021-08-23
Title
Comment Link Remove and Other Comment Tools < 2.1.6 - Arbitrary Comment Deletion via CSRF
Slug
comment-press
Published
2020-10-15
Title
Comment Press < 2.7.2 - Unauthenticated Cross-Frame Scripting
Slug
comment-rating
Published
2014-08-01
Title
Comment Rating 2.9.32 - Security Bypass Weakness & SQL Injection
Slug
comment-rating
Published
2014-08-01
Title
Comment Rating 2.9.23 - Multiple Vulnerabilities
Slug
comment-reply-email
Published
2023-10-18
Title
Comment Reply Email < 1.0.4 - Admin+ Stored XSS
Slug
comment-reply-email
Published
2024-07-05
Title
Comment Reply Email < 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
comment-reply-notification
Published
2023-04-04
Title
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery
Slug
comment-validation-reloaded
Published
2025-04-09
Title
Comment Validation Reloaded <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
commentator
Published
2016-01-13
Title
Commentator <= 2.5.2 - Reflected Cross-Site Scripting (XSS)
Slug
commenting-feature
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
commenting-feature
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
commentluv
Published
2014-08-01
Title
CommentLuv 2.92.3 - Cross Site Scripting
Slug
commentluv
Published
2023-11-28
Title
CommentLuv <= 4 - Unauthenticated SSRF
Slug
comments-capcha-box
Published
2025-08-19
Title
Comments Capcha Box <= 1.1 - Reflected Cross-Site Scripting
Slug
comments-disable-accesspress
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
comments-from-facebook
Published
2022-04-04
Title
Social comments by WpDevArt < 2.5.0 - Admin+ Stored Cross-Site Scripting
Slug
comments-import-export-woocommerce
Published
2018-06-21
Title
WordPress Comments Import & Export <= 2.0.4 - CSV Injection
Slug
comments-import-export-woocommerce
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
comments-import-export-woocommerce
Published
2024-04-05
Title
WordPress Comments Import & Export < 2.3.6 - Cross-Site Request Forgery
Slug
comments-import-export-woocommerce
Published
2024-10-10
Title
WordPress Comments Import & Export < 2.3.9 - Authenticated (Author+) Arbitrary File Read via Directory Traversal
Slug
comments-import-export-woocommerce
Published
2025-06-02
Title
WordPress Comments Import & Export < 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
comments-like-dislike
Published
2021-06-07
Title
Comments Like Dislike < 1.1.4 - Add Like/Dislike Bypass