WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
coming-soon-master
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
coming-soon-page
Published
2021-09-13
Title
Coming Soon and Maintenance Mode < 3.5.3 - Authenticated Stored XSS
Slug
coming-soon-page
Published
2022-01-24
Title
Coming soon and Maintenance mode < 3.6.8 - Arbitrary Email Sending to Subscribed Users via CSRF
Slug
coming-soon-page
Published
2022-01-24
Title
Coming soon and Maintenance mode < 3.6.7 - Subscriber+ Arbitrary Email Sending to Subscribed Users
Slug
coming-soon-page
Published
2023-12-01
Title
Coming soon and Maintenance mode < 3.7.4 - IP Address Spoofing via get_real_ip
Slug
coming-soon-wp
Published
2021-10-04
Title
Coming Soon, Under Construction & Maintenance Mode By Dazzler < 1.6.7 - Admin+ Stored Cross-Site Scripting
Slug
coming-soon-wp
Published
2024-03-19
Title
Coming Soon, Under Construction & Maintenance Mode By Dazzler < 2.1.3 - Maintenance Mode Bypass
Slug
coming-soons
Published
2022-07-26
Title
Coming Soon - Under Construction <= 1.2.0 - Admin+ Stored Cross-Site Scripting
Slug
comment-approved-notifier-extended
Published
2025-03-27
Title
Comment Approved Notifier Extended < 5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
comment-attachment
Published
2014-08-01
Title
Comment Attachment 1.0 - XSS
Slug
comment-blacklist-updater
Published
2023-09-23
Title
Comment Blacklist Updater < 1.2.0 - Cross-Site Request Forgery via update_blacklist_manual
Slug
comment-control
Published
2014-08-01
Title
Comment Control 0.3.0 - comment-control.php type Parameter SQL Injection
Slug
comment-emailer
Published
2025-01-16
Title
Comment-Emailer <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
comment-engine-pro
Published
2021-12-13
Title
Comment Engine Pro <= 1.0 - Editor+ Stored Cross-Site Scripting
Slug
comment-extra-field
Published
2014-08-01
Title
Comment Extra Field 1.7 - CSRF / XSS
Slug
comment-form
Published
2022-09-15
Title
Advanced Comment Form < 1.2.1 - Admin+ Authenticated Stored XSS
Slug
comment-form-wp
Published
2025-09-05
Title
Comment Form WP <= 2.0.1 - Admin+ Stored XSS
Slug
comment-genius
Published
2026-03-20
Title
Comment Genius <= 1.2.5 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
comment-guestbook
Published
2022-09-26
Title
Comment Guestbook <= 0.8.0 - Admin+ Stored Cross-Site Scripting
Slug
comment-highlighter
Published
2021-07-23
Title
Comment Highlighter <= 0.13 - Authenticated SQL Injection
Slug
comment-images-reloaded
Published
2024-07-08
Title
Comment Images Reloaded <= 2.2.1 - Authenticated (Subscriber+) Arbitrary Media Deletion
Slug
comment-info-detector
Published
2025-10-02
Title
Comment Info Detector <= 1.0.5 - Cross-Site Request Forgery to Settings Update
Slug
comment-license
Published
2022-06-16
Title
Comment License < 1.4.0 - Arbitrary Settings Update via CSRF
Slug
comment-link-remove
Published
2021-08-23
Title
Comment Link Remove and Other Comment Tools < 2.1.6 - Arbitrary Comment Deletion via CSRF
Slug
comment-press
Published
2020-10-15
Title
Comment Press < 2.7.2 - Unauthenticated Cross-Frame Scripting