WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cookiebot
Published
2025-06-27
Title
Cookiebot < 4.5.9 - Cross-Site Request Forgery
Slug
cookiebot
Published
2026-01-29
Title
Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode < 4.6.5 - Missing Authorization
Slug
cookiecode
Published
2025-05-07
Title
CookieCode <= 2.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cookiehint-wp
Published
2025-03-31
Title
CookieHint WP <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cookiehint-wp
Published
2025-12-25
Title
CookieHint WP <= 1.0.0 - Unauthenticated Local File Inclusion
Slug
cookiehub
Published
2024-04-22
Title
CookieHub < 1.1.1 - Missing Authorization
Slug
cookielay
Published
2024-12-05
Title
Cookielay <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via cookielay Shortcode
Slug
cookiemonster
Published
2023-08-30
Title
Cookie Monster <= 1.51 - Admin+ Stored XSS
Slug
cookies-and-content-security-policy
Published
2026-01-05
Title
Cookies and Content Security Policy < 2.35 - Unauthenticated Information Exposure
Slug
cookies-by-jm
Published
2023-08-17
Title
Cookies by JM <= 1.0 - Admin+ Stored XSS
Slug
cookies-pro
Published
2025-03-21
Title
Cookies Pro <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
cool-facebook-page-feed-timeline
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
cool-fade-popup
Published
2025-07-04
Title
Cool fade popup <= 10.1 - Authenticated (Contributor+) SQL Injection
Slug
cool-tag-cloud
Published
2021-09-28
Title
Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scripting
Slug
cool-tag-cloud
Published
2025-12-04
Title
Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cool-tag-cloud
Published
2025-12-26
Title
Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cool-timeline
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
cool-timeline
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
cool-timeline
Published
2020-09-16
Title
Cool Timeline < 2.0.3 - Cross-Site Request Forgery
Slug
cool-video-gallery
Published
2014-08-01
Title
Cool Video Gallery 1.8 - admin/gallery-details.php Multiple Actions CSRF
Slug
cool-video-gallery
Published
2014-08-01
Title
Cool Video Gallery 1.8 - admin/gallery-manage.php Gallery Deletion CSRF
Slug
cool-video-gallery
Published
2014-08-01
Title
Cool Video Gallery 1.8 - admin/gallery-settings.php Gallery Settings Manipulation CSRF
Slug
cool-video-gallery
Published
2014-08-01
Title
Cool Video Gallery 1.8 - admin/gallery-sort.php Gallery Sort Order Manipulation CSRF
Slug
cool-video-gallery
Published
2014-08-01
Title
Cool Video Gallery 1.8 - admin/player-settings.php Player Settings Manipulation CSRF
Slug
cool-video-gallery
Published
2014-08-01
Title
Cool Video Gallery 1.8 - admin/plugin-uninstall.php Plugin Uninstallation CSRF