WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contact-us-page-contact-people
Published
2025-07-04
Title
Contact Us page - Contact people LITE <= 3.7.4 - Authenticated (Contributor+) SQL Injection
Slug
contact-us-simple-form
Published
2026-01-06
Title
Contact Us Simple Form <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
Slug
contact-widgets-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
contact-widgets-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
content-audit
Published
2014-10-01
Title
Content Audit < 1.6.2 - Authenticated Blind SQL Injection
Slug
content-audit
Published
2017-09-26
Title
Content Audit <= 1.9.1 - Cross-Site Scripting (XSS) & CSRF
Slug
content-audit-exporter
Published
2024-11-28
Title
Content Audit Exporter <= 1.1 - Unauthenticated Sensitive Information Exposure
Slug
content-aware-sidebars
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
content-aware-sidebars
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
content-aware-sidebars
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
content-blocks-builder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
content-blocks-builder
Published
2025-01-07
Title
Content Blocks Builder < 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
content-bot
Published
2025-04-01
Title
ContentBot AI Writer <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
content-cards
Published
2017-11-06
Title
Content Cards <= 0.9.6 - Cross-Site Scripting (XSS)
Slug
content-cards
Published
2024-02-09
Title
Content Cards <= 0.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
content-collector
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
content-collector
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
content-control
Published
2022-12-29
Title
Content Control < 1.1.10 - Contributor+ Stored XSS
Slug
content-control
Published
2024-04-16
Title
Content Control < 2.2.0 - Missing Authorization to Sensitive Information Exposure
Slug
content-control
Published
2025-03-04
Title
Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More < 2.6.0 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
content-control
Published
2025-05-07
Title
Content Control < 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
content-egg
Published
2022-04-06
Title
Content Egg < 5.3.0 - Reflected Cross-Site Scripting
Slug
content-egg
Published
2022-04-25
Title
Content Egg < 5.3.1 - Reflected Cross-Site Scripting
Slug
content-egg
Published
2022-10-31
Title
Content Egg < 5.5.0 - Multiple CSRF
Slug
content-egg
Published
2025-07-30
Title
Content Egg < 8.0.0 - Authenticated (Editor+) PHP Object Injection