WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cp-polls
Published
2024-02-05
Title
CP Polls < 1.0.72 - Unauthenticated Poll Limit Bypass
Slug
cp-polls
Published
2024-02-05
Title
CP Polls < 1.0.72 - Unauthenticated Content Injection
Slug
cp-polls
Published
2024-09-01
Title
Polls CP <= 1.0.75 - Admin+ Stored XSS via Custom Styles
Slug
cp-polls
Published
2024-09-01
Title
Polls CP <= 1.0.75 - Admin+ Stored Cross-Site Scripting
Slug
cp-polls
Published
2024-09-24
Title
CP Polls < 1.0.75 - Reflected Cross-Site Scripting
Slug
cp-polls
Published
2025-06-19
Title
CP Polls < 1.0.82 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cp-reservation-calendar
Published
2015-09-15
Title
CP Reservation Calendar <= 1.1.6 - Unauthenticated SQL Injection
Slug
cp-simple-newsletter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cp-simple-newsletter
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
cpa-offerwall
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cpi-wp-migration
Published
2025-11-10
Title
WP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated Arbitrary File Upload
Slug
cpl
Published
2014-08-01
Title
Copperleaf Photolog - SQL injection
Slug
cpo-companion
Published
2023-01-06
Title
CPO Companion < 1.1.0 - Contributor+ Stored XSS via Shortcode
Slug
cpo-companion
Published
2023-01-05
Title
CPO Companion < 1.1.0 - Admin+ Stored XSS
Slug
cpo-companion
Published
2024-04-29
Title
CPO Companion <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cpo-content-types
Published
2023-03-03
Title
CPO Content Types < 1.1.1 - Admin+ Stored XSS
Slug
cpo-shortcodes
Published
2022-09-15
Title
CPO Shortcodes <= 1.5.0 - Admin+ Stored XSS
Slug
cpo-shortcodes
Published
2023-10-22
Title
CPO Shortcodes <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
cpt-ajax-load-more
Published
2025-06-05
Title
WordPress Ajax Load More and Infinite Scroll <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
cpt-bootstrap-carousel
Published
2023-01-03
Title
CPT Bootstrap Carousel <= 1.12 - Contributor+ Stored XSS via Shortcode
Slug
cpt-bootstrap-carousel
Published
2024-01-03
Title
CPT Bootstrap Carousel <= 1.12 - Reflected Cross-Site Scripting
Slug
cpt-onomies
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cpt-shortcode
Published
2023-10-12
Title
CPT Shortcode Generator <= 1.0 - Admin+ Stored XSS
Slug
cpt-shortcode
Published
2023-10-16
Title
CPT Shortcode Generator <= 1.0 - Arbitrary Settings Update via CSRF
Slug
cpt-speakers
Published
2023-02-23
Title
CPT - Speakers <= 1.1 - Admin+ Stored XSS