WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
canto
Published
2023-08-09
Title
Canto < 3.0.5 - Unauthenticated Remote File Inclusion
Slug
canto
Published
2024-02-12
Title
Canto < 3.0.7 - Unauthenticated RCE
Slug
canto
Published
2024-06-13
Title
Canto < 3.0.9 - Unauthenticated Remote File Inclusion
Slug
canto-testimonials
Published
2026-01-23
Title
Canto Testimonials <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fx' Shortcode Attribute
Slug
canva
Published
2024-04-15
Title
Canva – Design beautiful blog graphics <= 1.2.4 - Reflected Cross-Site Scripting
Slug
canvasflow
Published
2025-01-10
Title
CanvasFlow <= 1.5.5 - Reflected XSS
Slug
canvasio3d-light
Published
2023-10-18
Title
Download canvasio3D Light <= 2.5.0 - Reflected XSS
Slug
canvasio3d-light
Published
2023-11-28
Title
Download canvasio3D Light <= 2.5.0 - Subscriber+ Entries Update/Deletion
Slug
canvasio3d-light
Published
2024-05-06
Title
canvasio3D Light <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
capa
Published
2022-05-30
Title
CaPa Protect <= 0.5.8.2 - Arbitrary Settings Update via CSRF
Slug
capabilities-pro
Published
2021-12-08
Title
PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise
Slug
capabilities-pro
Published
2022-10-10
Title
PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection
Slug
capability-manager-enhanced
Published
2018-09-25
Title
Capability Manager Enhanced <= 1.5.8 - Authenticated SQLi
Slug
capability-manager-enhanced
Published
2021-12-08
Title
PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise
Slug
capability-manager-enhanced
Published
2022-01-13
Title
PublishPress Capabilities < 2.3.3 - Reflected Cross-Site Scripting
Slug
capability-manager-enhanced
Published
2022-10-10
Title
PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection
Slug
capitalize-my-title
Published
2024-11-28
Title
Capitalize My Title <= 0.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
captain-slider
Published
2015-08-29
Title
Captain Slider 1.0.6 - Cross-Site Scripting (XSS)
Slug
captainform
Published
2022-10-29
Title
Forms by CaptainForm <= 2.5.3 - CSRF
Slug
captainform
Published
2023-11-29
Title
Forms by CaptainForm <= 2.5.3 - Reflected Cross-Site Scripting via REQUEST_URI
Slug
captcha
Published
2014-08-01
Title
Captcha 2.12-3.8.1 - Captcha Bypass
Slug
captcha
Published
2015-03-03
Title
Captcha <= 4.0.6 - Captcha Bypass
Slug
captcha
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
captcha
Published
2017-12-19
Title
Captcha 4.3.6–4.4.4 - Backdoored
Slug
captcha-bank
Published
2024-10-03
Title
WordPress Captcha Plugin by Captcha Bank <= 4.0.36 - Reflected Cross-Site Scripting