WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
content-protector
Published
2025-09-22
Title
Passster < 4.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
content-protector
Published
2025-11-12
Title
Passster < 4.2.20 - Unauthenticated Information Exposure
Slug
content-protector
Published
2026-01-27
Title
Passster – Password Protect Pages and Content < 4.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
content-protector
Published
2026-02-12
Title
Passster < 4.2.26 - Missing Authorization
Slug
content-protector
Published
2026-02-17
Title
Passster < 4.2.24 - Password Protection Bypass
Slug
content-protector
Published
2026-02-17
Title
Passster < 4.2.26 - Global Protection Bypass
Slug
content-repeater
Published
2022-11-25
Title
Content Repeater <= 1.1.13 - Admin+ Stored XSS
Slug
content-restrictor-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
content-restrictor-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
content-security-policy-pro
Published
2025-01-16
Title
Content Security Policy Pro <= 1.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
content-sidebars
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
content-sidebars
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
content-slide
Published
2014-08-01
Title
Content Slide <= 1.4.2 - Cross Site Request Forgery
Slug
content-slide
Published
2015-04-16
Title
Content Slide <= 1.4.2 - CSRF & Stored XSS
Slug
content-slider-block
Published
2024-11-08
Title
Content Slider Block – Create fully functional slider with Gutenberg block < 3.1.6 - Authenticated (Contributor+) Post Disclosure
Slug
content-snippet-manager
Published
2025-02-14
Title
Content Snippet Manager < 1.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
content-staging
Published
2021-10-18
Title
Content Staging <= 2.0.1 - Admin+ Stored Cross-Site Scripting
Slug
content-syndication-toolkit-reader
Published
2024-11-04
Title
Content Syndication Toolkit Reader <= 1.5 - Reflected Cross-Site Scripting
Slug
content-table
Published
2025-09-05
Title
Table of content <= 1.5.3.1 - Cross-Site Request Forgery
Slug
content-text-slider-on-post
Published
2015-12-22
Title
Content text slider on post < 6.9 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
content-views-query-and-display-post-page
Published
2024-01-22
Title
Content Views < 3.6.3 - Admin+ Stored XSS
Slug
content-views-query-and-display-post-page
Published
2024-04-24
Title
Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More < 3.7.1 - Contributor+ Stored Cross-Site Scripting via Widget Post Overlay
Slug
content-views-query-and-display-post-page
Published
2024-05-06
Title
Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) < 3.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagingType Parameter
Slug
content-views-query-and-display-post-page
Published
2025-09-05
Title
Content Views < 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Grid and List Widgets
Slug
content-warning-v2
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius