WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
convert-classic-editor-to-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
convert-classic-editor-to-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
convert-docx2post
Published
2024-11-13
Title
Convert Docx2post <= 1.4 - Authenticated (Author+) Arbitrary File Upload
Slug
convert-post-types
Published
2024-03-29
Title
Convert Post Types <= 1.4 - Reflected Cross-Site Scripting
Slug
convert-post-types
Published
2024-04-11
Title
Convert Post Types <= 1.4 - Cross-Site Request Forgery
Slug
convertbox-auto-embed
Published
2023-03-20
Title
ConvertBox Auto Embed WordPress < 1.0.20 - Contributor+ Stored Cross-Site Scripting
Slug
convertcalculator
Published
2024-11-15
Title
ConvertCalculator for WordPress < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and type Parameter
Slug
convertcalculator
Published
2024-12-30
Title
ConvertCalculator for WordPress < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
convertforce-popup-builder
Published
2026-01-09
Title
ConvertForce Popup Builder < 0.0.8 - Stored Cross-Site Scripting via entrance_animation
Slug
convertful
Published
2023-10-24
Title
Convertful – Your Ultimate On-Site Conversion Tool < 2.6 - Missing Authorization via add_woo_coupon
Slug
convertkit
Published
2022-12-23
Title
ConvertKit < 2.0.5 - Contributor+ Stored XSS
Slug
convertkit
Published
2023-05-15
Title
ConvertKit < 2.2.1 - Reflected XSS
Slug
convertkit
Published
2024-04-05
Title
ConvertKit < 2.4.6 - Unauthenticated Sensitive Information Exposure
Slug
convertkit
Published
2024-06-20
Title
ConvertKit < 2.4.9.1 - Missing Authorization
Slug
convertplug
Published
2019-05-29
Title
ConvertPlus <= 3.4.2 - Unauthenticated Arbitrary User Role Creation
Slug
convertplug
Published
2019-06-07
Title
ConvertPlus <= 3.4.4 - Multiple Issues
Slug
convertplug
Published
2024-05-03
Title
ConvertPlug < 3.5.26 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Slug
convertplug
Published
2024-05-03
Title
ConvertPlug < 3.5.26 - Authenticated (Contributor+) PHP Object Injection
Slug
convertplug
Published
2024-05-15
Title
ConvertPlus < 3.5.26.1 - Authenticated (Contributor+) PHP Object Injection
Slug
convertplug
Published
2025-02-11
Title
Popup Plugin For WordPress - ConvertPlus < 3.5.31 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
convertpro
Published
2025-12-31
Title
EasyTest <= 1.0.1 - Missing Authorization
Slug
conveythis-translate
Published
2024-04-10
Title
Language Translate Widget for WordPress – ConveyThis < 224 - Unauthenticated Stored Cross-Site Scripting via api_key
Slug
conveythis-translate
Published
2024-07-22
Title
Language Translate Widget for WordPress – ConveyThis < 235 - Missing Authorization to Limited Option Update
Slug
conveythis-translate
Published
2025-09-22
Title
Translate WordPress with ConveyThis < 269.2 - Admin+ PHP Object Injection
Slug
conveythis-translate
Published
2025-11-29
Title
ConveyThis < 269.3 - Missing Authorization