WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
counter-box
Published
2022-05-16
Title
Counter Box < 1.2 - Admin+ LFI
Slug
counter-box
Published
2022-07-08
Title
Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF
Slug
counter-box
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
counter-box
Published
2024-04-11
Title
Counter Box < 1.2.4 - Counter Deletion via CSRF
Slug
counter-box
Published
2025-01-24
Title
Counter Box < 2.0.6 - Cross-Site Request Forgery
Slug
counter-box
Published
2025-02-28
Title
Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site < 2.0.7 - Authenticated (Administrator+) DOM-Based Stored Cross-Site Scripting
Slug
counter-visitor-for-woocommerce
Published
2025-07-15
Title
Counter live visitors for WooCommerce < 1.3.7 - Unauthenticated Arbitrary File Deletion in wcvisitor_get_block
Slug
counter-yandex-metrica
Published
2023-05-31
Title
Yandex Metrica Counter <= 1.4.3 - Admin+ Stored XSS
Slug
counters-block
Published
2025-02-23
Title
Counters Block < 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
country-blocker
Published
2024-12-11
Title
Country Blocker <= 3.2 - Reflected Cross-Site Scripting
Slug
country-blocker
Published
2024-12-05
Title
Country Blocker <= 3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
country-blocker-for-adsense
Published
2026-02-18
Title
Country Blocker for AdSense <= 1.0 - Cross-Site Request Forgery to Settings Update
Slug
country-flags-for-elementor
Published
2024-10-14
Title
Country Flags for Elementor <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
country-state-city-auto-dropdown
Published
2024-04-15
Title
Country State City Dropdown CF7 < 2.7.2 - Missing Authorization
Slug
country-state-city-auto-dropdown
Published
2024-05-21
Title
Country State City Dropdown CF7 < 2.7.3 - Unauthenticated SQL Injection
Slug
coupon-code-plugin
Published
2014-08-01
Title
coupon-code-plugin <= 2.1 - XSS in ZeroClipboard
Slug
coupon-creator
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
coupon-creator
Published
2020-09-16
Title
Coupon Creator < 3.1.1 - Arbitrary Settings Update via CSRF
Slug
coupon-lite
Published
2025-01-06
Title
Coupon Plugin < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
coupon-lite
Published
2024-12-19
Title
Coupon <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
coupon-referral-program
Published
2024-01-03
Title
Coupon Referral Program < 1.8.5 - Sensitive Information Disclosure
Slug
coupon-referral-program
Published
2024-02-05
Title
Coupon Referral Program < 1.8.4 - Unauthenticated PHP Object Injection
Slug
coupon-reveal-button
Published
2024-04-22
Title
Coupon & Discount Code Reveal Button < 1.2.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
coupon-x-discount-pop-up
Published
2025-01-10
Title
Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups < 1.3.6 - Missing Authorization to Authenticated (Contributor+) PHP Object Injection
Slug
coupon-x-discount-pop-up
Published
2025-01-10
Title
Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups < 1.3.6 - Missing Authorization