WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cowidgets-elementor-addons
Published
2024-11-08
Title
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
cowidgets-elementor-addons
Published
2024-11-28
Title
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cozy-addons
Published
2024-09-30
Title
Cozy Blocks < 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2024-10-24
Title
Cozy Blocks < 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2024-10-25
Title
Cozy Blocks < 2.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2025-03-27
Title
Cozy Blocks < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2025-05-07
Title
Cozy Blocks < 2.1.23 - Missing Authorization
Slug
cozy-addons
Published
2025-09-22
Title
Cozy Blocks < 2.1.30 - Unauthenticated Arbitrary Shortcode Execution
Slug
cp-blocks
Published
2022-02-02
Title
CP Blocks < 1.0.15 - Admin+ Stored Cross-Site Scripting
Slug
cp-blocks
Published
2023-10-06
Title
CP Blocks < 1.0.21 - CSRF
Slug
cp-contact-form-with-paypal
Published
2015-07-11
Title
CP Contact Form with Paypal <= 1.1.5 - Multiple Vulnerabilities
Slug
cp-contact-form-with-paypal
Published
2019-06-23
Title
CP Contact Form with Paypal <= 1.3.01 - Multiple XSS
Slug
cp-contact-form-with-paypal
Published
2025-01-29
Title
CP Contact Form with PayPal < 1.3.53 - Cross-Site Request Forgery
Slug
cp-contact-form-with-paypal
Published
2025-11-21
Title
CP Contact Form with PayPal < 1.3.57 - Missing Authorization to Unauthenticated Arbitrary Payment Confirmation
Slug
cp-contact-form-with-paypal
Published
2026-03-02
Title
CP Contact Form with Paypal < 1.3.62 - Authenticated (Contributor+) SQL Injection
Slug
cp-easy-form-builder
Published
2022-08-29
Title
Form Builder CP < 1.2.32 - Admin+ Stored Cross-Site Scripting
Slug
cp-easy-form-builder
Published
2025-01-23
Title
Form Builder CP < 1.2.42 - Authenticated (Contributor+) SQL Injection
Slug
cp-easy-form-builder
Published
2025-01-24
Title
Form Builder CP < 1.2.42 - Authenticated (Contributor+) SQL Injection
Slug
cp-easy-form-builder
Published
2026-05-25
Title
Form Builder CP < 1.2.47 - Editor+ Stored XSS via form_structure
Slug
cp-image-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cp-image-gallery
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
cp-image-store
Published
2015-07-10
Title
CP Image Store with Slideshow <= 1.0.5 - Arbitrary File Download
Slug
cp-image-store
Published
2015-07-13
Title
CP Image Store with Slideshow <= 1.0.6 - Purchase ID Brute Force Prevention
Slug
cp-image-store
Published
2022-05-09
Title
CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLi