WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
content-mask
Published
2022-05-03
Title
Content Mask < 1.8.4.1 - Subscriber+ Arbitrary Options Update
Slug
content-mask
Published
2025-09-22
Title
Content Mask <= 1.8.5.3 - Authenticated (Author+) Insecure Direct Object Reference
Slug
content-mask
Published
2025-09-22
Title
Content Mask < 1.8.5.3 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
content-mirror
Published
2025-01-16
Title
Content Mirror <= 1.2 - Reflected Cross-Site Scripting
Slug
content-no-cache
Published
2024-12-23
Title
Content No Cache: prevent specific content from being cached < 0.1.3 - Unauthenticated Private Content Disclosure
Slug
content-no-cache
Published
2025-06-23
Title
Content No Cache < 0.1.5 - Unauthenticated Arbitrary Function Call
Slug
content-planner
Published
2025-01-16
Title
Content Planner <= 1.0 - Reflected Cross-Site Scripting
Slug
content-protector
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
content-protector
Published
2022-09-21
Title
Passster < 3.5.5.5.2 - Insecure Storage of Password
Slug
content-protector
Published
2022-12-29
Title
Passster < 3.5.5.8 - Contributor+ Stored Cross-Site Scripting
Slug
content-protector
Published
2022-12-29
Title
Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access
Slug
content-protector
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
content-protector
Published
2024-02-08
Title
Passster – Password Protect Pages and Content < 4.2.6.3 - Missing Authorization to Sensitive Information Exposure
Slug
content-protector
Published
2024-04-04
Title
Passster < 4.2.6.5 - Contributor+ Stored XSS via content_protector Shortcode
Slug
content-protector
Published
2025-01-06
Title
Passster – Password Protect Pages and Content < 4.2.11 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
content-protector
Published
2025-09-22
Title
Passster < 4.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
content-protector
Published
2025-11-12
Title
Passster < 4.2.20 - Unauthenticated Information Exposure
Slug
content-protector
Published
2026-01-27
Title
Passster – Password Protect Pages and Content < 4.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
content-protector
Published
2026-02-12
Title
Passster < 4.2.26 - Missing Authorization
Slug
content-protector
Published
2026-02-17
Title
Passster < 4.2.24 - Password Protection Bypass
Slug
content-protector
Published
2026-02-17
Title
Passster < 4.2.26 - Global Protection Bypass
Slug
content-repeater
Published
2022-11-25
Title
Content Repeater <= 1.1.13 - Admin+ Stored XSS
Slug
content-restrictor-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
content-restrictor-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
content-security-policy-pro
Published
2025-01-16
Title
Content Security Policy Pro <= 1.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting