WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
column-matic
Published
2023-05-12
Title
Column-Matic <= 1.3.3 - Contributor+ Stored XSS
Slug
columns-bws
Published
2026-04-07
Title
Columns by BestWebSoft <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'columns' Shortcode 'id' Attribute
Slug
combo-wp-rewrite-slugs
Published
2024-11-08
Title
Combo WP Rewrite Slugs <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Slug
comfino-payment-gateway
Published
2024-12-06
Title
Comfino Payment Gateway < 4.1.2 - Reflected Cross-Site Scripting
Slug
comic-easel
Published
2024-03-29
Title
Comic Easel <= 1.15 - Reflected Cross-Site Scripting
Slug
comicbookmanagementsystemweeklypicks
Published
2022-11-14
Title
Comic Book Management System < 2.2.0 - Admin+ SQLi
Slug
coming-soon
Published
2020-06-25
Title
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd < 5.1.2 - Authenticated Stored Cross Site Scripting (XSS)
Slug
coming-soon
Published
2023-09-18
Title
Website Builder by SeedProd < 6.15.15.3 - Arbitrary Settings Update via CSRF
Slug
coming-soon
Published
2024-01-31
Title
Website Builder by SeedProd < 6.15.22 - Unauthenticated Plugin Page Content Update
Slug
coming-soon
Published
2024-09-24
Title
Website Builder by SeedProd < 6.18.4 - Editor+ Stored XSS
Slug
coming-soon
Published
2025-05-08
Title
Website Builder by SeedProd < 6.18.16 - Subscriber+ Sensitive Information Exposure
Slug
coming-soon
Published
2025-12-24
Title
Website Builder by SeedProd <= 6.19.8 - Missing Authorization
Slug
coming-soon
Published
2026-03-14
Title
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd < 6.19.9 - Editor+ Server-Side Request Forgery
Slug
coming-soon-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
coming-soon-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
coming-soon-by-boomdevs
Published
2025-12-31
Title
BoomDevs WordPress Coming Soon <= 1.0.4 - Unauthenticated Information Exposure
Slug
coming-soon-by-supsystic
Published
2021-05-24
Title
Coming Soon by Supsystic < 1.7.6 - Reflected Cross-Site Scripting
Slug
coming-soon-by-supsystic
Published
2023-01-19
Title
Coming Soon by Supsystic <= 1.7.10 - Cross-Site Request Forgery
Slug
coming-soon-countdown
Published
2025-04-10
Title
Coming Soon Countdown <= 2.2 - Reflected Cross-Site Scripting
Slug
coming-soon-maintenance-mode
Published
2024-02-19
Title
Coming Soon Maintenance Mode < 1.0.6 - Information Exposure
Slug
coming-soon-maintenance-mode-from-acurax
Published
2023-11-07
Title
Under Construction / Maintenance Mode from Acurax <= 2.6 - Unauthenticated Stored XSS
Slug
coming-soon-maintenance-mode-from-acurax
Published
2024-02-27
Title
Under Construction / Maintenance Mode from Acurax <= 2.6 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
coming-soon-maintenance-mode-from-acurax
Published
2024-02-27
Title
Under Construction / Maintenance Mode from Acurax <= 2.6 - Information Exposure
Slug
coming-soon-maintenance-mode-from-acurax
Published
2024-06-06
Title
Under Construction / Maintenance Mode from Acurax <= 2.6 - Unauthenticated IP Spoofing
Slug
coming-soon-maintenance-mode-ready
Published
2014-09-17
Title
Ready! Coming Soon 0.5.0 - CSRF & XSS