WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
currency-converter-widget-pro
Published
2024-12-11
Title
Currency Converter Widget ⚡ PRO < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
currency-per-product-for-woocommerce
Published
2024-04-10
Title
Currency per Product for WooCommerce < 1.7.0 - Cross-Site Request Forgery to Notice Dismissal
Slug
currency-switcher
Published
2021-07-06
Title
WPCS < 1.1.7 - Arbitrary Plugin's Settings Change via CSRF
Slug
currency-switcher
Published
2023-05-12
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0 - Contributor+ Stored Cross-Site Scripting
Slug
currency-switcher
Published
2023-05-12
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0 - Subscriber+ Missing Authorization Checks
Slug
currency-switcher
Published
2023-12-27
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
currency-switcher
Published
2024-03-28
Title
WPCS < 1.2.0.2 - Cross-Site Request Forgery
Slug
currency-switcher
Published
2024-07-10
Title
WPCS < 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
currency-switcher
Published
2025-03-10
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0.5 - Unauthenticated Arbitrary Shortcode Execution
Slug
currency-switcher-for-woocommerce
Published
2025-03-27
Title
Currency Switcher for WooCommerce < 0.0.8 - Cross-Site Request Forgery
Slug
currency-switcher-woocommerce
Published
2019-10-31
Title
Currency Switcher for Woocommerce < 2.11.2 - Security Restrictions Bypass
Slug
currency-switcher-woocommerce
Published
2025-02-28
Title
Currency Switcher for WooCommerce < 2.16.3 - Reflected Cross-Site Scripting
Slug
current-age
Published
2025-09-22
Title
Current Age Plugin < 1.7 - Cross-Site Request Forgery
Slug
current-book
Published
2021-07-14
Title
Current Book <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
current-menu-item-for-custom-post-types
Published
2023-10-26
Title
Current Menu Item for Custom Post Types < 1.6 - Cross-Site Request Forgery
Slug
current-template-name
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
current-template-name
Published
2025-10-05
Title
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
current-template-name
Published
2025-10-14
Title
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Information Exposure
Slug
curtain
Published
2015-03-07
Title
Curtain < 1.0.2 - Unauthenticated Maintenance Mode Switch
Slug
curtain
Published
2022-04-27
Title
Curtain <= 1.0.2 - Admin+ Stored Cross-Site Scripting
Slug
curved-text
Published
2026-01-08
Title
Curved Text <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
custom-404-pro
Published
2019-06-24
Title
Custom 404 Pro < 3.2.9 - Authenticated Reflected XSS
Slug
custom-404-pro
Published
2019-06-24
Title
Custom 404 Pro < 3.2.8 - XSS
Slug
custom-404-pro
Published
2023-01-18
Title
Custom 404 Pro < 3.7.2 - Logs Deletion via CSRF
Slug
custom-404-pro
Published
2023-01-13
Title
Custom 404 Pro < 3.7.1 - Admin+ SQLi