WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contus-video-gallery
Published
2014-09-23
Title
Contus Video Gallery 2.3.1.0.1 - SQL Injection
Slug
contus-video-gallery
Published
2015-02-11
Title
Wordpress Video Gallery <= 2.7 - SQL Injection
Slug
contus-video-gallery
Published
2015-04-02
Title
WordPress Video Gallery <= 2.8 - Multiple Cross-Site Request Forgery (CSRF)
Slug
contus-video-gallery
Published
2015-04-13
Title
WordPress Video Gallery <= 2.8 - SQL Injection
Slug
contus-video-gallery
Published
2015-04-05
Title
WordPress Video Gallery <= 2.8 - Unprotected Mail Page
Slug
contus-video-galleryversion-10
Published
2012-06-12
Title
Contus Video Gallery 1.3 - Arbitrary File Upload
Slug
conversador
Published
2014-05-28
Title
Conversador <= 2.61 - Cross-Site Scripting (XSS)
Slug
conversation-watson
Published
2020-01-21
Title
Chatbot with IBM Watson < 0.8.21 - DOM Cross-Site Scripting (XSS)
Slug
conversational-forms
Published
2023-01-20
Title
Conversational Forms for ChatBot < 1.17 - Admin+ Stored XSS
Slug
conversational-forms
Published
2024-04-22
Title
Conversational Forms for ChatBot < 1.2.0 - Unauthenticated Arbitrary File Download
Slug
conversational-forms
Published
2024-05-03
Title
Conversational Forms for ChatBot < 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
conversational-forms
Published
2025-01-07
Title
Conversational Forms for ChatBot < 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
conversational-forms
Published
2026-10-16
Title
WPBot – ChatBot Conversational Forms < 1.5.2 - Unauthenticated PHP Object Injection
Slug
conversational-forms
Published
2026-09-29
Title
WPBot – ChatBot Conversational Forms < 1.5.1 - Authenticated (Subscriber+) PHP Object Injection
Slug
conversion-de-moneda
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
conversion-helper
Published
2024-11-04
Title
Conversion Helper <= 1.12 - Reflected Cross-Site Scripting
Slug
conversionninja
Published
2014-08-01
Title
Conversion Ninja - /lp/index.php id Parameter XSS
Slug
convert-classic-editor-to-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
convert-classic-editor-to-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
convert-docx2post
Published
2024-11-13
Title
Convert Docx2post <= 1.4 - Authenticated (Author+) Arbitrary File Upload
Slug
convert-post-types
Published
2024-03-29
Title
Convert Post Types <= 1.4 - Reflected Cross-Site Scripting
Slug
convert-post-types
Published
2024-04-11
Title
Convert Post Types <= 1.4 - Cross-Site Request Forgery
Slug
convertbox-auto-embed
Published
2023-03-20
Title
ConvertBox Auto Embed WordPress < 1.0.20 - Contributor+ Stored Cross-Site Scripting
Slug
convertcalculator
Published
2024-11-15
Title
ConvertCalculator for WordPress < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and type Parameter
Slug
convertcalculator
Published
2024-12-30
Title
ConvertCalculator for WordPress < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting