WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
content-excel-importer
Published
2024-04-16
Title
Import Content in WordPress & WooCommerce with Excel < 4.3 - Reflected Cross-Site Scripting
Slug
content-fetcher
Published
2025-12-31
Title
Content Fetcher <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
content-glass-button
Published
2025-03-19
Title
CG Button <= 1.0.5.6 - Reflected Cross-Site Scripting
Slug
content-grabber
Published
2015-06-14
Title
Content Grabber 1.0 - Cross-Site Scripting (XSS)
Slug
content-grid-slider
Published
2025-12-25
Title
Content Grid Slider <= 1.5 - Reflected Cross-Site Scripting
Slug
content-hubs
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
content-hubs
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
content-locker-for-elementor
Published
2025-11-03
Title
Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload
Slug
content-manager-light
Published
2025-04-01
Title
Content Manager Light <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
content-manager-light
Published
2025-06-26
Title
Content Manager Light <= 3.2 - Reflected Cross-Site Scripting
Slug
content-mask
Published
2022-05-03
Title
Content Mask < 1.8.4.1 - Subscriber+ Arbitrary Options Update
Slug
content-mask
Published
2025-09-22
Title
Content Mask <= 1.8.5.3 - Authenticated (Author+) Insecure Direct Object Reference
Slug
content-mask
Published
2025-09-22
Title
Content Mask < 1.8.5.3 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
content-mirror
Published
2025-01-16
Title
Content Mirror <= 1.2 - Reflected Cross-Site Scripting
Slug
content-no-cache
Published
2024-12-23
Title
Content No Cache: prevent specific content from being cached < 0.1.3 - Unauthenticated Private Content Disclosure
Slug
content-no-cache
Published
2025-06-23
Title
Content No Cache < 0.1.5 - Unauthenticated Arbitrary Function Call
Slug
content-planner
Published
2025-01-16
Title
Content Planner <= 1.0 - Reflected Cross-Site Scripting
Slug
content-protector
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
content-protector
Published
2022-09-21
Title
Passster < 3.5.5.5.2 - Insecure Storage of Password
Slug
content-protector
Published
2022-12-29
Title
Passster < 3.5.5.8 - Contributor+ Stored Cross-Site Scripting
Slug
content-protector
Published
2022-12-29
Title
Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access
Slug
content-protector
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
content-protector
Published
2024-02-08
Title
Passster – Password Protect Pages and Content < 4.2.6.3 - Missing Authorization to Sensitive Information Exposure
Slug
content-protector
Published
2024-04-04
Title
Passster < 4.2.6.5 - Contributor+ Stored XSS via content_protector Shortcode
Slug
content-protector
Published
2025-01-06
Title
Passster – Password Protect Pages and Content < 4.2.11 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure