WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cpt-to-map-store
Published
2024-11-28
Title
Custom Post Type to Map Store <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
crafthemes-demo-import
Published
2024-05-20
Title
Crafthemes Demo Import <= 3.3 - Missing Authorization to Arbitrary Plugin Installation
Slug
crafthemes-demo-import
Published
2024-12-13
Title
Crafthemes Demo Import <= 3.3 - Authenticated (Admin+) Arbitrary File Upload in process_uploaded_files
Slug
crafty-social-buttons
Published
2017-05-12
Title
Crafty Social Buttons < 1.5.8 - XSS
Slug
craw-data
Published
2022-08-19
Title
Craw Data <= 1.0.0 - Server Side Request Forgery
Slug
crawlomatic-multipage-scraper-post-generator
Published
2025-05-16
Title
Crawlomatic Multipage Scraper Post Generator < 2.6.8.2 - Unauthenticated Arbitrary File Upload
Slug
crawlomatic-multipage-scraper-post-generator
Published
2025-06-05
Title
Crawlomatic Multisite Scraper Post Generator < 2.6.9 - Missing Authorization
Slug
crawlomatic-multipage-scraper-post-generator
Published
2025-06-05
Title
Crawlomatic Multisite Scraper Post Generator < 2.6.9 - Unauthenticated Information Exposure via Log Files
Slug
crawlrate-tracker
Published
2014-08-01
Title
Craw Rate Tracker <= 2.0.2 - SQL Injection
Slug
crayon-syntax-highlighter
Published
2012-10-15
Title
Crayon Syntax Highlighter <= 1.12 - Remote File Inclusion
Slug
crayon-syntax-highlighter
Published
2015-04-14
Title
Crayon Syntax Highlighter < 2.7.0 - Local File Disclosure
Slug
crayon-syntax-highlighter
Published
2015-04-20
Title
Crayon Syntax Highlighter 2.0 - 2.6.10 - Defacement
Slug
crayon-syntax-highlighter
Published
2016-05-10
Title
Crayon Syntax Highlighter < 2.8.4 - Multiple XSS
Slug
crayon-syntax-highlighter
Published
2023-01-17
Title
Crayon Syntax Highlighter <= 2.8.4 - Cross-Site Request Forgery
Slug
crayon-syntax-highlighter
Published
2023-09-11
Title
Crayon Syntax Highlighter <= 2.8.4 - Contributor+ Server Side Request Forgery
Slug
crazy-bone
Published
2015-08-21
Title
Crazy Bone < 0.6.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
crazy-bone
Published
2022-01-31
Title
Crazy Bone <= 0.6.0 - Unauthenticated Stored XSS
Slug
crazy-call-to-action-box
Published
2024-10-14
Title
Crazy Call To Action Box <= 1.05 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
create-block-theme
Published
2022-10-05
Title
Create Block Theme < 1.2.2 - Unauthenticated Arbitrary File Upload
Slug
create-custom-dashboard-widget
Published
2024-11-08
Title
Custom Dashboard Widget <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
create-custom-dashboard-widget
Published
2024-12-17
Title
Custom Dashboard Widget <= 1.0.0 - Reflected Cross-Site Scripting
Slug
create-flipbook-from-pdf
Published
2024-10-09
Title
Creates 3D Flipbook, PDF Flipbook <= 1.2 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
create-posts-terms
Published
2025-10-27
Title
Create Posts & Terms <= 1.3.1 - Cross-Site Request Forgery
Slug
create-temporary-login
Published
2025-10-14
Title
WPBifröst – Instant Passwordless Temporary Login Links < 1.0.8 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Slug
create-with-code
Published
2025-01-24
Title
Create with Code < 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting