WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
crossslide-jquery-plugin-for-wordpress
Published
2015-02-09
Title
CrossSlide jQuery Plugin <= 2.0.5 - Stored XSS & CSRF
Slug
crossword-compiler-puzzles
Published
2025-04-25
Title
Crossword Compiler Puzzles < 5.3 - Subscriber+ Arbitrary File Upload
Slug
crossword-compiler-puzzles
Published
2025-05-02
Title
Crossword Compiler Puzzles <= 14.5 - Subscriber+ Stored XSS
Slug
crowdfunding-for-woocommerce
Published
2025-04-10
Title
Crowdfunding for WooCommerce < 3.1.13 - Reflected Cross-Site Scripting
Slug
crowdfunding-for-woocommerce
Published
2025-07-17
Title
Crowdfunding for WooCommerce <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Slug
crowdsignal-forms
Published
2025-12-27
Title
Crowdsignal Forms < 1.8.0 - Missing Authorization
Slug
crpaid-link-manager
Published
2026-03-17
Title
[CR]Paid Link Manager < 0.6 - Reflected Cross-Site Scripting
Slug
crudlab-facebook-like-box
Published
2025-01-16
Title
CRUDLab Like Box <= 2.0.9 - Reflected Cross-Site Scripting
Slug
crudlab-google-plus
Published
2024-12-12
Title
CRUDLab Google Plus Button <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
crudlab-scroll-to-top
Published
2025-04-14
Title
CRUDLab Scroll to Top <= 1.0.1 - Reflected Cross-Site Scripting
Slug
crumber-elementor
Published
2026-01-10
Title
Crumber <= 1.0.10 - Missing Authorization
Slug
crush-pics
Published
2026-01-13
Title
Crush.pics Image Optimizer <= 1.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
Slug
cryokey
Published
2025-03-21
Title
CryoKey <= 2.4 - Reflected Cross-Site Scripting via 'ckemail' Parameter
Slug
cryout-serious-slider
Published
2024-04-25
Title
Serious Slider < 1.2.5 - Cross-Site Request Forgery
Slug
cryout-serious-slider
Published
2024-06-17
Title
Serious Slider < 1.2.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
cryout-serious-slider
Published
2024-11-29
Title
Serious Slider < 1.2.7 - Contributor+ Stored XSS via Shortcode
Slug
cryout-serious-slider
Published
2026-01-30
Title
Serious Slider < 1.3.0 - Missing Authorization
Slug
crypto
Published
2024-10-28
Title
Crypto < 2.16 - Cross-Site Request Forgery to Authentication Bypass
Slug
crypto
Published
2024-10-28
Title
Crypto < 2.20 - Authentication Bypass via register
Slug
crypto
Published
2024-10-28
Title
Crypto < 2.19 - Authentication Bypass via log_in
Slug
crypto
Published
2025-11-10
Title
Crypto Tool <= 2.22 - Missing Authentication to Unauthenticated Limited File Deletion
Slug
crypto
Published
2025-11-10
Title
Crypto Tool <= 2.22 - Unauthenticated Information Exposure via Global Authentication State
Slug
crypto-converter-widget
Published
2023-11-28
Title
Crypto Converter Widget < 1.8.4 - Contributor+ Stored XSS
Slug
crypto-converter-widget
Published
2024-03-25
Title
Crypto Converter Widget < 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
crypto-payment-gateway-with-payeer-for-woocommerce
Published
2025-11-03
Title
Crypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypass