WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
computer-repair-shop
Published
2024-11-08
Title
Computer Repair Shop < 3.8116 - Unauthenticated Arbitrary File Upload
Slug
computer-repair-shop
Published
2024-12-17
Title
CRM WordPress Plugin – RepairBuddy < 3.8122 - Missing Authorization to Account Takeover/Privilege Escalation
Slug
computer-repair-shop
Published
2024-12-18
Title
Computer Repair Shop < 3.8120 - Authenticated (Customer+) Privilege Esclation via Account Takeover
Slug
computer-repair-shop
Published
2025-04-04
Title
CRM WordPress Plugin – RepairBuddy < 3.8214 - Missing Authorization
Slug
computer-repair-shop
Published
2026-01-16
Title
RepairBuddy < 4.1121 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders
Slug
computer-repair-shop
Published
2026-03-20
Title
RepairBuddy < 4.1133 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action
Slug
computer-repair-shop
Published
2026-04-20
Title
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress < 4.1133 - Missing Authorization
Slug
computer-repair-shop
Published
2026-02-26
Title
RepairBuddy < 4.1133 - Unauthenticated Information Exposure
Slug
conditional-extra-fees-for-woocommerce
Published
2023-06-26
Title
Conditional extra fees for WooCommerce < 1.0.97 - Admin+ Stored XSS
Slug
conditional-logic-for-woo-product-add-ons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
conditional-marketing-mailer
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via CSRF
Slug
conditional-marketing-mailer
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via Low Privilege User
Slug
conditional-menus
Published
2023-05-24
Title
Conditional Menus < 1.2.1 - Reflected XSS
Slug
conditional-menus
Published
2026-03-25
Title
Conditional Menus < 1.2.7 - Cross-Site Request Forgery to Menu Options Update
Slug
conditional-payment-methods-for-woocommerce
Published
2022-12-24
Title
Conditional Payment Methods for WooCommerce <= 1.0 - Admin+ SQLi
Slug
conditional-payments
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
conditional-payments-for-woocommerce
Published
2023-02-14
Title
Conditional Payments for WooCommerce < 2.3.2 - Plugin RuleSets Activation/Deactivation via CSRF
Slug
conditional-payments-for-woocommerce
Published
2025-04-16
Title
Conditional Payments for WooCommerce < 3.3.1 - Cross-Site Request Forgery
Slug
conditional-shipping-for-woocommerce
Published
2023-01-27
Title
Conditional Shipping for WooCommerce < 2.3.2 - Ruleset Toggle via CSRF
Slug
conditional-shipping-for-woocommerce
Published
2025-04-16
Title
Conditional Shipping for WooCommerce < 3.4.1 - Cross-Site Request Forgery
Slug
coneblog-widgets
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
coneblog-widgets
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
coneblog-widgets
Published
2024-07-09
Title
ConeBlog – WordPress Blog Widgets < 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
conference-scheduler
Published
2022-03-04
Title
Conference Scheduler < 2.4.3 - Reflected Cross-Site Scripting
Slug
conference-scheduler
Published
2025-06-23
Title
Conference Scheduler < 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter