WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cool-video-gallery
Published
2014-08-01
Title
Cool Video Gallery 1.8 - lib/core.php Multiple Actions CSRF
Slug
cool-video-gallery
Published
2015-12-02
Title
Cool Video Gallery < 2.0 - Authenticated Command Injection
Slug
cool-yt-player
Published
2026-01-06
Title
Cool YT Player <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
coolclock
Published
2021-08-30
Title
CoolClock < 4.3.5 - Contributor+ Stored Cross-Site Scripting
Slug
coon-google-maps
Published
2025-11-10
Title
Coon Google Maps <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
coordinadora
Published
2025-09-22
Title
Envíos Coordinadora Woocommerce <= 1.1.32 - Unauthenticated Sensitive Information Exposure
Slug
copify
Published
2022-06-08
Title
Copify <= 1.3.0 - Stored Cross-Site Scripting via CSRF
Slug
copy-delete-posts
Published
2021-10-25
Title
Duplicate Post < 1.2.0 - Authenticated SQL Injection
Slug
copy-delete-posts
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
copy-delete-posts
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
copy-in-clipboard
Published
2014-08-01
Title
copy-in-clipboard <= 0.8 - XSS in ZeroClipboard
Slug
copy-link
Published
2025-03-24
Title
CopyLink <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
copy-me
Published
2016-12-21
Title
copy-me 1.0.0 - Copy Posts Cross-Site Request Forgery (CSRF)
Slug
copy-menu
Published
2025-03-24
Title
Menu Duplicator <= 1.0 - Missing Authorization
Slug
copy-move-posts
Published
2025-01-16
Title
Copy Move Posts <= 1.6 - Missing Authorization
Slug
copy-or-move-comments
Published
2015-06-21
Title
Copy Or Move Comments 1.0.0 - Cross-Site Scripting (XSS)
Slug
copy-or-move-comments
Published
2023-10-11
Title
Copy Or Move Comments <= 5.0.4 - Reflected XSS
Slug
copy-or-move-comments
Published
2023-10-03
Title
Copy Or Move Comments <= 5.0.4 - Authenticated (Subscriber+) SQL Injection
Slug
copy-the-code
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
copy-the-code
Published
2023-09-22
Title
Copy Anything to Clipboard < 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
copy-the-code
Published
2024-11-13
Title
Copy Anything to Clipboard < 4.0.4 - Contributor+ Stored XSS
Slug
copymatic
Published
2024-05-14
Title
Copymatic – AI Content Writer & Generator < 1.7 - Unauthenticated Arbitrary File Upload
Slug
copymatic
Published
2024-06-06
Title
Copymatic – AI Content Writer & Generator < 2.0 - Missing Authorization
Slug
copymatic
Published
2025-07-17
Title
Copymatic – AI Content Writer & Generator <= 2.1 - Cross-Site Request Forgery to Settings Update
Slug
copypress-rest-api
Published
2025-09-29
Title
Copypress Rest API 1.1 - 1.2 - Unauthenticated Remote Code Execution