WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-404-pro
Published
2023-05-02
Title
Custom 404 Pro < 3.7.3 - Reflected Cross-Site Scripting
Slug
custom-404-pro
Published
2023-06-05
Title
Custom 404 Pro < 3.8.1 - Multiple SQL Injection
Slug
custom-404-pro
Published
2023-05-19
Title
Custom 404 Pro < 3.8.2 - Reflected XSS
Slug
custom-404-pro
Published
2023-12-27
Title
Custom 404 Pro < 3.10.1 - Unauthenticated Stored Cross-Site Scripting via logging
Slug
custom-404-pro
Published
2024-08-01
Title
Custom 404 Pro < 3.11.2 - Reflected Cross-Site Scripting
Slug
custom-404-pro
Published
2025-10-10
Title
Custom 404 Pro <= 3.12.0 - Authenticated (Administrator+) SQL Injection via `path` Parameter
Slug
custom-404-pro
Published
2025-05-13
Title
Custom 404 Pro <= 3.12.0 - Cross-Site Request Forgery
Slug
custom-add-to-cart-button-for-woocommerce
Published
2024-06-20
Title
Ultimate Custom Add To Cart Button <= 1.222.17 - Missing Authorization
Slug
custom-add-user
Published
2023-02-02
Title
Custom Add User <= 2.0.2 - Reflected Cross-Site Scripting
Slug
custom-admin-login-styler-wpzest
Published
2023-08-16
Title
Custom Admin Login Page | WPZest <= 1.2.0 - Admin+ Stored XSS
Slug
custom-admin-menu
Published
2024-10-31
Title
Custom Admin Menu <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-admin-menu
Published
2025-11-18
Title
Custom Admin Menu <= 1.0.0 - Reflected XSS
Slug
custom-admin-page
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
custom-api-for-wp
Published
2025-07-16
Title
Custom API for WP < 4.2.3 - Unauthenticated SQL Injection
Slug
custom-api-for-wp
Published
2025-07-28
Title
Custom API for WP < 4.2.3 - Subscriber+ Privilege Escalation
Slug
custom-author-base
Published
2024-07-11
Title
Custom Author Base <= 1.1.1 - Settings Update via CSRF
Slug
custom-background-changer
Published
2025-12-31
Title
Custom Background Changer <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-banners
Published
2014-08-01
Title
Custom Banners 1.2.2.2 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
custom-banners
Published
2021-02-17
Title
Custom Banners < 3.3 - CSRF Nonce Bypass in saveCustomFields
Slug
custom-banners
Published
2024-09-30
Title
Custom Banners <= 3.3 - Reflected Cross-Site Scripting
Slug
custom-base-terms
Published
2023-05-22
Title
Custom Base Terms < 1.0.3 - Admin+ Stored XSS
Slug
custom-bulkquick-edit
Published
2025-06-05
Title
Custom Bulk/Quick Edit <= 1.6.10 - Cross-Site Request Forgery
Slug
custom-checkout-fields-for-woocommerce
Published
2025-05-07
Title
Multiple Plugins by wpcodefactory <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-codes
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
custom-coming-soon
Published
2025-01-16
Title
Custom Coming Soon <= 2.2 - Reflected Cross-Site Scripting