WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cpo-companion
Published
2023-01-06
Title
CPO Companion < 1.1.0 - Contributor+ Stored XSS via Shortcode
Slug
cpo-companion
Published
2023-01-05
Title
CPO Companion < 1.1.0 - Admin+ Stored XSS
Slug
cpo-companion
Published
2024-04-29
Title
CPO Companion <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cpo-content-types
Published
2023-03-03
Title
CPO Content Types < 1.1.1 - Admin+ Stored XSS
Slug
cpo-shortcodes
Published
2022-09-15
Title
CPO Shortcodes <= 1.5.0 - Admin+ Stored XSS
Slug
cpo-shortcodes
Published
2023-10-22
Title
CPO Shortcodes <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
cpt-ajax-load-more
Published
2025-06-05
Title
WordPress Ajax Load More and Infinite Scroll <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
cpt-bootstrap-carousel
Published
2023-01-03
Title
CPT Bootstrap Carousel <= 1.12 - Contributor+ Stored XSS via Shortcode
Slug
cpt-bootstrap-carousel
Published
2024-01-03
Title
CPT Bootstrap Carousel <= 1.12 - Reflected Cross-Site Scripting
Slug
cpt-onomies
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cpt-shortcode
Published
2023-10-12
Title
CPT Shortcode Generator <= 1.0 - Admin+ Stored XSS
Slug
cpt-shortcode
Published
2023-10-16
Title
CPT Shortcode Generator <= 1.0 - Arbitrary Settings Update via CSRF
Slug
cpt-speakers
Published
2023-02-23
Title
CPT - Speakers <= 1.1 - Admin+ Stored XSS
Slug
cpt-to-map-store
Published
2024-11-28
Title
Custom Post Type to Map Store <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
crafthemes-demo-import
Published
2024-05-20
Title
Crafthemes Demo Import <= 3.3 - Missing Authorization to Arbitrary Plugin Installation
Slug
crafthemes-demo-import
Published
2024-12-13
Title
Crafthemes Demo Import <= 3.3 - Authenticated (Admin+) Arbitrary File Upload in process_uploaded_files
Slug
crafty-social-buttons
Published
2017-05-12
Title
Crafty Social Buttons < 1.5.8 - XSS
Slug
craw-data
Published
2022-08-19
Title
Craw Data <= 1.0.0 - Server Side Request Forgery
Slug
crawlomatic-multipage-scraper-post-generator
Published
2025-05-16
Title
Crawlomatic Multipage Scraper Post Generator < 2.6.8.2 - Unauthenticated Arbitrary File Upload
Slug
crawlomatic-multipage-scraper-post-generator
Published
2025-06-05
Title
Crawlomatic Multisite Scraper Post Generator < 2.6.9 - Missing Authorization
Slug
crawlomatic-multipage-scraper-post-generator
Published
2025-06-05
Title
Crawlomatic Multisite Scraper Post Generator < 2.6.9 - Unauthenticated Information Exposure via Log Files
Slug
crawlomatic-multipage-scraper-post-generator
Published
2026-05-27
Title
Crawlomatic Multipage Scraper Post Generator < 2.7.3 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute
Slug
crawlrate-tracker
Published
2014-08-01
Title
Craw Rate Tracker <= 2.0.2 - SQL Injection
Slug
crayon-syntax-highlighter
Published
2012-10-15
Title
Crayon Syntax Highlighter <= 1.12 - Remote File Inclusion
Slug
crayon-syntax-highlighter
Published
2015-04-14
Title
Crayon Syntax Highlighter < 2.7.0 - Local File Disclosure