WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cubepoints
Published
2025-06-05
Title
CubePoints <= 3.2.1 - Cross-Site Request Forgery
Slug
cubeportfolio
Published
2025-07-31
Title
Cube Portfolio <= 1.16.8 - Authenticated (Subscriber+) SQL Injection
Slug
cubewp-forms
Published
2024-09-24
Title
CubeWP Forms – All-in-One Form Builder < 1.1.2 - Unauthenticated Stored Cross-Site Scripting
Slug
cubewp-forms
Published
2025-01-06
Title
CubeWP Forms <= 1.1.10 - Missing Authorization
Slug
cubewp-forms
Published
2025-06-12
Title
CubeWP Forms < 1.1.6 - Missing Authorization
Slug
cubewp-framework
Published
2024-03-28
Title
CubeWP – All-in-One Dynamic Content Framework < 1.1.13 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
cubewp-framework
Published
2024-10-09
Title
CubeWP – All-in-One Dynamic Content Framework < 1.1.16 - Missing Authorization
Slug
cubewp-framework
Published
2025-06-10
Title
CubeWP – All-in-One Dynamic Content Framework < 1.1.24 - Authenticated (Subscriber+) Privilege Escalation
Slug
cubewp-framework
Published
2025-06-05
Title
CubeWP <= 1.1.29 - Cross-Site Request Forgery
Slug
cubewp-framework
Published
2025-06-12
Title
CubeWP Framework < 1.1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cubewp-framework
Published
2025-08-19
Title
CubeWP Framework < 1.1.25 - Subscriber+ Privilege Escalation
Slug
cubewp-framework
Published
2025-09-22
Title
CubeWP < 1.1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cubewp-framework
Published
2025-12-26
Title
CubeWP < 1.1.28 - Missing Authorization
Slug
cubewp-framework
Published
2026-01-16
Title
CubeWP – All-in-One Dynamic Content Framework < 1.1.28 - Unauthenticated Information Exposure
Slug
cubewp-framework
Published
2026-01-16
Title
CubeWP < 1.1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode
Slug
cubewp-framework
Published
2026-01-24
Title
CubeWP – All-in-One Dynamic Content Framework < 1.1.28 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php
Slug
cue
Published
2025-04-01
Title
Cue < 2.4.5 - Missing Authorization
Slug
culqi-checkout
Published
2024-04-22
Title
Culqi < 3.0.15 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
cultbooking-booking-engine
Published
2024-11-28
Title
CultBooking Hotel Booking Engine <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
culture-object
Published
2022-09-08
Title
Culture Object < 4.1.1 - Admin+ Stored Cross-Site Scripting
Slug
curated-search
Published
2025-01-16
Title
Curated Search <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
curatorio
Published
2024-10-09
Title
Curator.io < 1.9.2 - Contributor+ Stored XSS
Slug
curatorio
Published
2025-12-31
Title
Curator.io < 1.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
currency-converter-calculator
Published
2023-11-28
Title
Currency Converter Calculator < 1.3.2 - Contributor+ Stored XSS
Slug
currency-converter-widget
Published
2023-12-19
Title
Currency Converter Widget < 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode