WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
content-slide
Published
2015-04-16
Title
Content Slide <= 1.4.2 - CSRF & Stored XSS
Slug
content-slider-block
Published
2024-11-08
Title
Content Slider Block – Create fully functional slider with Gutenberg block < 3.1.6 - Authenticated (Contributor+) Post Disclosure
Slug
content-slideshow
Published
2026-05-26
Title
Content Slideshow <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
content-snippet-manager
Published
2025-02-14
Title
Content Snippet Manager < 1.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
content-staging
Published
2021-10-18
Title
Content Staging <= 2.0.1 - Admin+ Stored Cross-Site Scripting
Slug
content-syndication-toolkit
Published
2026-03-20
Title
Content Syndication Toolkit <= 1.3 - Unauthenticated Server-Side Request Forgery via 'url' Parameter
Slug
content-syndication-toolkit-reader
Published
2024-11-04
Title
Content Syndication Toolkit Reader <= 1.5 - Reflected Cross-Site Scripting
Slug
content-table
Published
2025-09-05
Title
Table of content <= 1.5.3.1 - Cross-Site Request Forgery
Slug
content-text-slider-on-post
Published
2015-12-22
Title
Content text slider on post < 6.9 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
content-views-query-and-display-post-page
Published
2024-01-22
Title
Content Views < 3.6.3 - Admin+ Stored XSS
Slug
content-views-query-and-display-post-page
Published
2024-04-24
Title
Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More < 3.7.1 - Contributor+ Stored Cross-Site Scripting via Widget Post Overlay
Slug
content-views-query-and-display-post-page
Published
2024-05-06
Title
Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) < 3.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagingType Parameter
Slug
content-views-query-and-display-post-page
Published
2025-09-05
Title
Content Views < 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Grid and List Widgets
Slug
content-visibility-for-divi-builder
Published
2026-06-02
Title
Content Visibility for Divi Builder < 5.00 - Authenticated (Contributor+) Remote Code Execution
Slug
content-warning-v2
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
content-writer
Published
2025-10-14
Title
Content Writer < 3.6.9 - Unauthenticated Information Exposure via Log File
Slug
content_timeline
Published
2017-09-26
Title
Content Timeline <= 4.4.2 - Multiple Blind SQL Injection
Slug
contentlock
Published
2024-06-21
Title
ContentLock < 1.0.4 - Settings Update via CSRF
Slug
contentlock
Published
2024-06-21
Title
ContentLock < 1.0.4 - Groups/Emails Deletion via CSRF
Slug
contentlock
Published
2024-06-21
Title
ContentLock < 1.0.4 - Email Adding via CSRF
Slug
contentmx-content-publisher
Published
2025-03-31
Title
ContentMX Content Publisher < 1.0.7 - Missing Authorization
Slug
contentmx-content-publisher
Published
2025-10-02
Title
ContentMX Content Publisher < 1.0.7 - Cross-Site Request Forgery
Slug
contentoptin
Published
2025-01-16
Title
ContentOptin Lite – WP Content Upgrade Plugin <= 1.1 - Reflected Cross-Site Scripting
Slug
contentstudio
Published
2023-01-27
Title
ContentStudio < 1.2.6 - Authorisation Bypass
Slug
contentstudio
Published
2023-01-27
Title
ContentStudio < 1.2.6 - Nonce Disclosure