WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
conveythis-translate
Published
2026-01-27
Title
ConveyThis <= 269.1 - Missing Authorization
Slug
convoworks-wp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
convoworks-wp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cooked
Published
2021-03-30
Title
Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)
Slug
cooked
Published
2021-07-01
Title
Cooked < 1.7.9.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
cooked
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cooked
Published
2023-10-02
Title
Cooked < 1.7.15.1 - Contributor+ Stored XSS
Slug
cooked
Published
2024-06-13
Title
Cooked – Recipe Management <= Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cooked
Published
2024-08-04
Title
Cooked – Recipe Management < 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
cooked
Published
2025-12-24
Title
Cooked < 1.11.4 - Missing Authorization
Slug
cooked
Published
2025-12-31
Title
Cooked < 1.11.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cooked-pro
Published
2021-03-30
Title
Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)
Slug
cooked-pro
Published
2022-11-21
Title
Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection
Slug
cooked-pro
Published
2024-07-17
Title
Cooked – Recipe Management < 1.8.0 - Cross-Site Request Forgery to Settings Update
Slug
cooked-pro
Published
2024-07-17
Title
Cooked – Recipe Management < 1.8.0 - Cross-Site Request Forgery via cooked_get_recipe_ids
Slug
cooked-pro
Published
2024-07-17
Title
Cooked – Recipe Management < 1.8.0 - Cross-Site Request Forgery to Template Reset
Slug
cooked-pro
Published
2024-07-17
Title
Cooked – Recipe Management < 1.8.0 - Cross-Site Request Forgery to Template Apply
Slug
cooked-pro
Published
2024-07-17
Title
Cooked Pro < 1.8.0 - Authenticated (Contributor+) HTML Injection
Slug
cooked-pro
Published
2024-10-15
Title
Cooked Pro < 1.8.0 - Cross-Site Request Forgery
Slug
cooked-pro
Published
2024-10-15
Title
Cooked Pro < 1.8.0 - Unauthenticated Arbitrary File Upload
Slug
cooked-pro
Published
2024-10-15
Title
Cooked Pro < 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cookie-bar
Published
2021-09-22
Title
Cookie Bar < 1.8.9 - Admin+ Stored Cross-Site Scripting
Slug
cookie-bar
Published
2023-12-05
Title
Cookie Bar < 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
cookie-consent-autoblock
Published
2025-01-16
Title
Cookie Consent & Autoblock for GDPR/CCPA <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
cookie-consent-box
Published
2023-08-30
Title
GDPR Cookie Consent Notice Box < 1.1.7 - Admin+ Stored XSS