WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
content-protector
Published
2024-04-04
Title
Passster < 4.2.6.5 - Contributor+ Stored XSS via content_protector Shortcode
Slug
content-protector
Published
2025-01-06
Title
Passster – Password Protect Pages and Content < 4.2.11 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
content-protector
Published
2025-09-22
Title
Passster < 4.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
content-protector
Published
2025-11-12
Title
Passster < 4.2.20 - Unauthenticated Information Exposure
Slug
content-protector
Published
2026-01-27
Title
Passster – Password Protect Pages and Content < 4.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
content-protector
Published
2026-02-12
Title
Passster < 4.2.26 - Missing Authorization
Slug
content-protector
Published
2026-02-17
Title
Passster < 4.2.24 - Password Protection Bypass
Slug
content-protector
Published
2026-02-17
Title
Passster < 4.2.26 - Global Protection Bypass
Slug
content-protector
Published
2026-07-27
Title
Content Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Content Disclosure via Captcha REST Endpoint
Slug
content-protector
Published
2026-07-27
Title
Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Content Disclosure via Core REST API
Slug
content-protector
Published
2026-07-27
Title
Content Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disclosure via Content-Lock Block data-content Attribute
Slug
content-protector
Published
2026-08-03
Title
Content Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API
Slug
content-protector
Published
2026-08-17
Title
Content Protector (Passster) < 4.3.9 - Unauthenticated Protected Content Disclosure via REST Path Allowlist Bypass
Slug
content-protector
Published
2026-09-11
Title
Passster – Password Protect Pages and Content < 4.3.14 - Missing Authorization
Slug
content-protector
Published
2026-10-16
Title
Passster – Password Protect Pages and Content < 4.3.19 - Missing Authorization
Slug
content-repeater
Published
2022-11-25
Title
Content Repeater <= 1.1.13 - Admin+ Stored XSS
Slug
content-restrictor-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
content-restrictor-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
content-security-policy-pro
Published
2025-01-16
Title
Content Security Policy Pro <= 1.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
content-sidebars
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
content-sidebars
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
content-slide
Published
2014-08-01
Title
Content Slide <= 1.4.2 - Cross Site Request Forgery
Slug
content-slide
Published
2015-04-16
Title
Content Slide <= 1.4.2 - CSRF & Stored XSS
Slug
content-slider-block
Published
2024-11-08
Title
Content Slider Block – Create fully functional slider with Gutenberg block < 3.1.6 - Authenticated (Contributor+) Post Disclosure
Slug
content-slider-block
Published
2026-10-26
Title
Content Slider Block – Bring your content to life with slides < 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting