WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contextual-adminbar-color
Published
2020-01-19
Title
Contextual Adminbar Color < 0.3 - Authenticated Stored Cross-Site Scripting Issue
Slug
contextual-related-posts
Published
2014-08-01
Title
Contextual Related Posts < 1.8.10.2 - Multiple Parameter SQL Injection
Slug
contextual-related-posts
Published
2014-08-01
Title
Contextual Related Posts < 1.8.7 - Cross-Site Request Forgery
Slug
contextual-related-posts
Published
2020-11-19
Title
Contextual Related Posts < 2.9.4 - CSRF Nonce Validation Bypass
Slug
contextual-related-posts
Published
2023-01-16
Title
Contextual Related Posts < 3.3.1 - Contributor+ Stored XSS
Slug
contextual-related-posts
Published
2025-05-07
Title
Contextual Related Posts < 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
contextual-related-posts
Published
2026-03-18
Title
Contextual Related Posts < 4.2.2 - Missing Authorization
Slug
contextual-related-posts
Published
2026-04-17
Title
Contextual Related Posts < 4.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes'
Slug
contextual-related-posts
Published
2026-09-21
Title
Contextual Related Posts < 4.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'other_attributes' Block Parameter
Slug
contexture-page-security
Published
2022-03-28
Title
Page Security & Membership <= 1.5.15 - Admin+ Stored Cross-Site Scripting
Slug
continually
Published
2026-05-11
Title
Continually <= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'continually_embed_code' Parameter
Slug
continue-shopping-from-cart-page
Published
2024-11-22
Title
Continue Shopping From Cart <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
continuous-announcement-scroller
Published
2023-04-19
Title
Continuous announcement scroller <= 13.0 - Admin+ Stored XSS
Slug
continuous-image-carousel-with-lightbox
Published
2023-03-27
Title
Continuous Image Carousel With Lightbox < 1.0.16 - Reflected XSS
Slug
contractor-contact-form-website-to-workflow-tool
Published
2023-10-02
Title
Contractor Contact Form Website to Workflow Tool < 4.1.0 - Reflected XSS
Slug
contribuinte-checkout
Published
2025-05-07
Title
Contribuinte Checkout < 2.0.04 - Stored XSS via CSRF
Slug
control-block-patterns
Published
2024-03-04
Title
Build & Control Block Patterns – Boost up Gutenberg Editor <= 1.3.5.4 - Missing Authorization
Slug
control-horas
Published
2024-11-21
Title
Control horas <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
control-listings
Published
2025-04-22
Title
Control Listings < 1.0.5 - Reflected Cross-Site Scripting
Slug
controlled-admin-access
Published
2021-03-30
Title
Controlled Admin Access < 1.5.6 - Improper Access Control to Privilege Escalation
Slug
controlled-admin-access
Published
2021-03-23
Title
Controlled Admin Access < 1.5.2 - Improper Access Control & Privilege Escalation
Slug
contus-hd-flv-player
Published
2011-08-17
Title
Contus HD FLV Player <= 1.3 - SQL Injection
Slug
contus-hd-flv-player
Published
2014-08-01
Title
Contus HD FLV Player 1.7 - Arbitrary File Upload
Slug
contus-video-comments
Published
2016-06-22
Title
Contus Video Comments - Unauthenticated Remote JPG File Upload
Slug
contus-video-gallery
Published
2014-08-01
Title
Contus Video Gallery 2.0 & 1.6 - SQL Injection