WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cmp-coming-soon-maintenance
Published
2020-08-04
Title
CMP - Coming Soon & Maintenance < 3.8.2 - Improper Access Controls on AJAX Calls
Slug
cmp-coming-soon-maintenance
Published
2022-01-17
Title
Coming Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update
Slug
cmp-coming-soon-maintenance
Published
2023-03-07
Title
Coming Soon & Maintenance < 4.1.7 - Unauthenticated Post/Page Access in Maintenance Mode
Slug
cmp-coming-soon-maintenance
Published
2023-04-18
Title
CMP – Coming Soon & Maintenance < 4.1.8 - Maintenance Mode Bypass
Slug
cmp-coming-soon-maintenance
Published
2024-03-27
Title
CMP – Coming Soon & Maintenance < 4.1.11 - Authenticated (Admin+) Server-Side Request Forgery
Slug
cmp-coming-soon-maintenance
Published
2025-04-04
Title
CMP – Coming Soon & Maintenance < 4.1.15 - Admin+ Arbitrary File Upload
Slug
cmp-coming-soon-maintenance
Published
2026-04-17
Title
CMP < 4.1.17 - Admin+ Arbitrary File Upload and Remote Code Execution
Slug
cmp-coming-soon-maintenance
Published
2026-08-25
Title
CMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajax
Slug
cmp-coming-soon-maintenance
Published
2026-08-25
Title
CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Privilege Escalation via cmp_ajax_import_settings
Slug
cmp-coming-soon-maintenance
Published
2026-08-25
Title
CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Stored XSS via niteoCS_socialmedia
Slug
cmp-coming-soon-maintenance
Published
2026-09-29
Title
CMP - Coming Soon & Maintenance < 4.1.20 - Unauthenticated Maintenance Mode Bypass via Login URL Match
Slug
cmp-coming-soon-maintenance
Published
2026-10-19
Title
CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist
Slug
cms-blocks
Published
2025-06-27
Title
CMS Blocks <= 1.1 - Missing Authorization
Slug
cms-commander-client
Published
2017-01-25
Title
CMS Commander Client <= 2.21 - Unauthenticated PHP Object Injection
Slug
cms-commander-client
Published
2023-06-19
Title
CMS Commander < 2.288 - Unauthenticated Authorisation Bypass
Slug
cms-commander-client
Published
2026-03-20
Title
CMS Commander <= 2.288 - Custom+ SQL Injection via 'or_blogname' Parameter
Slug
cms-fuer-motorrad-werkstaetten
Published
2026-04-16
Title
CMS für Motorrad Werkstätten <= 1.0.0 - Cross-Site Request Forgery
Slug
cms-fuer-motorrad-werkstaetten
Published
2026-04-20
Title
Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authenticated (Subscriber+) SQL Injection via 'arttype' Parameter
Slug
cms-pack-cache
Published
2014-08-01
Title
Cms Pack 1.3 - Shell Upload
Slug
cms-press
Published
2023-03-13
Title
CMS Press <= 0.2.3 - Admin+ Stored XSS
Slug
cms-tree-page-view
Published
2014-08-01
Title
CMS Tree Page View 1.2.4 - Page Creation CSRF
Slug
cms-tree-page-view
Published
2014-08-01
Title
CMS Tree Page View 0.8.8 - XSS
Slug
cms-tree-page-view
Published
2015-04-21
Title
CMS Tree Page View 1.2.31 - Multiple Parameter XSS
Slug
cms-tree-page-view
Published
2023-04-20
Title
CMS Tree Page View < 1.6.8 - Reflected XSS
Slug
cmsmasters-content-composer
Published
2024-10-08
Title
CMSMasters Content Composer < 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode