WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
copyright-licensing-tools
Published
2014-08-01
Title
iCopyright(R) Article Tools <= 1.1.4 - SQL Injection
Slug
copyright-safeguard-footer-notice
Published
2025-01-16
Title
Copyright Safeguard Footer Notice <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
copyrightpro
Published
2023-09-29
Title
CopyRightPro <= 2.1 - Settings Update via CSRF
Slug
copyscape-premium
Published
2024-09-30
Title
Copyscape Premium < 1.4.0 - Stored XSS via CSRF
Slug
copyscape-premium
Published
2026-01-10
Title
Copyscape Premium < 1.4.2 - Cross-Site Request Forgery
Slug
core-control
Published
2022-05-23
Title
Core Control <= 1.2.1 - Arbitrary Settings Update via CSRF
Slug
core-web-vitals-pagespeed-booster
Published
2025-12-31
Title
Core Web Vitals & PageSpeed Booster <= 1.0.27 - Missing Authorization
Slug
coreactivity
Published
2024-01-26
Title
coreActivity < 1.8.1 - Unauthenticated Stored XSS
Slug
coreactivity
Published
2024-03-27
Title
coreActivity < 2.1 - Unauthenticated IP Spoofing
Slug
coreactivity
Published
2025-04-07
Title
coreActivity: Activity Logging for WordPress < 2.7.1 - Authenticated (Subscriber+) SQL Injection
Slug
corner-ad
Published
2017-02-16
Title
Corner Ad < 1.0.8 - Admin+ Stored XSS
Slug
corner-ad
Published
2022-09-09
Title
Corner Ad < 1.0.57 - Ads Deletion via CSRF
Slug
cornerstone
Published
2024-04-16
Title
Cornerstone < 0.8.1 - Reflected Cross-Site Scripting via PHP_SELF
Slug
cornerstone
Published
2024-04-26
Title
Cornerstone < 0.8.1 - Reflected Cross-Site Scripting
Slug
cornerstone
Published
2025-10-06
Title
Cornerstone <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
corona-virus-covid-19-banner
Published
2022-10-24
Title
Corona Virus (COVID-19) Banner & Live Data < 1.8.0 - CSRF
Slug
corona-virus-covid-19-banner
Published
2024-05-06
Title
Corona Virus (COVID-19) Banner & Live Data <= 1.8.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
coronavirus-covid-19-notice-message
Published
2025-02-18
Title
Coronavirus (COVID-19) Notice Message <= 1.1.2 - Admin+ Stored XSS
Slug
coronavirus-data-widgets
Published
2025-01-16
Title
Coronavirus (COVID-19) Outbreak Data Widgets <= 1.1.1 - Reflected Cross-Site Scripting
Slug
correos-express
Published
2021-11-29
Title
CorreosExpress <= 2.6.0 - Sensitive Information Disclosure
Slug
correosoficial
Published
2023-01-31
Title
Correos Oficial < 1.3.0.3 - Unauthenticated Arbitrary File Download
Slug
coru-lfmember
Published
2022-04-27
Title
Coru LFMember <= 1.0.2 - Arbitrary Game Deletion/Activation via CSRF
Slug
coru-lfmember
Published
2022-04-26
Title
Coru LFMember <= 1.0.2 - Stored Cross-Site Scripting via CSRF
Slug
coschedule-by-todaymade
Published
2023-04-13
Title
CoSchedule < 3.3.9 - CSRF
Slug
coschedule-by-todaymade
Published
2025-09-26
Title
CoSchedule < 3.4.0 - Unauthenticated Sensitive Information Exposure