WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
coschedule-by-todaymade
Published
2025-11-04
Title
CoSchedule < 3.4.1 - Missing Authorization
Slug
coschool
Published
2024-12-11
Title
CoSchool LMS <= 1.4.3 - Missing Authorization to Privilege Escalation
Slug
coschool
Published
2025-07-07
Title
CoSchool LMS <= 1.4.3 - Unauthenticated PHP Object Injection
Slug
coschool
Published
2025-07-14
Title
CoSchool LMS <= 1.4.3 - Authenticated (Subscriber+) SQL Injection
Slug
cosign-sso
Published
2025-12-04
Title
CoSign Single Signon <= 0.3.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
cosmetsy-core
Published
2023-12-07
Title
Multiple Plugins by KlbTheme - Reflected Cross-Site Scripting
Slug
cosmic-blocks
Published
2025-02-18
Title
Cosmic Blocks (40+) Content Editor Blocks Collection <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cosmosfarm-share-buttons
Published
2024-11-28
Title
소셜 공유 버튼 By 코스모스팜 <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cost-calculator
Published
2026-02-25
Title
EM Cost Calculator <= 2.3.1 - Unauthenticated Stored Cross-Site Scripting via 'customer_name'
Slug
cost-calculator-builder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cost-calculator-builder
Published
2024-07-01
Title
Cost Calculator Builder < 3.2.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cost-calculator-builder
Published
2024-07-01
Title
Cost Calculator Builder < 3.2.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation
Slug
cost-calculator-builder
Published
2024-08-07
Title
Cost Calculator Builder < 3.2.16 - Unauthenticated SQL Injection
Slug
cost-calculator-builder
Published
2024-09-09
Title
Cost Calculator Builder < 3.2.29 - Admin+ SQL Injection
Slug
cost-calculator-builder
Published
2024-11-27
Title
Cost Calculator Builder < 3.2.43 - Settings update via CSRF
Slug
cost-calculator-builder
Published
2025-03-29
Title
Cost Calculator Builder < 3.2.66 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cost-calculator-builder
Published
2025-04-10
Title
Cost Calculator Builder < 3.2.68 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter
Slug
cost-calculator-builder
Published
2025-04-16
Title
Cost Calculator Builder < 3.2.68 - Unauthenticated SQL Injection
Slug
cost-calculator-builder
Published
2025-05-19
Title
Cost Calculator Builder < 3.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cost-calculator-builder
Published
2025-10-03
Title
Cost Calculator Builder < 3.5.33 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions
Slug
cost-calculator-builder
Published
2025-10-15
Title
Cost Calculator Builder < 3.5.33 - Missing Authorization
Slug
cost-calculator-builder
Published
2025-12-01
Title
Cost Calculator Builder < 3.6.4 - Unauthenticated Arbitrary File Deletion
Slug
cost-calculator-builder
Published
2026-01-15
Title
Cost Calculator Builder < 3.6.10 - Missing Authorization to Unauthenticated Payment Status Bypass
Slug
cost-calculator-builder-pro
Published
2024-04-30
Title
Cost Calculator Builder Pro < 3.1.68 - Unauthenticated Cross-Site Scripting via SVG Upload
Slug
cost-calculator-builder-pro
Published
2024-05-16
Title
Cost Calculator Builder Pro < 3.1.73 - Authenticated (Subscriber+) Server-Side Request Forgery