WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-field-suite
Published
2024-06-19
Title
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field
Slug
custom-field-suite
Published
2024-06-19
Title
Custom Field Suite <= 2.6.7 - Contributor+ PHP Code Injection via Loop Custom Field
Slug
custom-field-template
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
custom-field-template
Published
2022-12-09
Title
Custom Field Template < 2.5.8 - Admin+ PHP Object Injection
Slug
custom-field-template
Published
2020-09-16
Title
Custom Field Template < 2.5.2 - Cross-Site Request Forgery
Slug
custom-field-template
Published
2023-07-10
Title
Custom Field Template < 2.5.9 - Cross-Site Request Forgery
Slug
custom-field-template
Published
2023-07-24
Title
Custom Field Template < 2.6 - Reflected Cross-Site Scripting
Slug
custom-field-template
Published
2024-02-14
Title
Custom Field Template < 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via $search_label
Slug
custom-field-template
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Slug
custom-field-template
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name
Slug
custom-field-template
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated(Contributor+) Information Exposure
Slug
custom-field-template
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated (Admin+) Stored Cross-Site Scritping
Slug
custom-field-template
Published
2024-08-29
Title
Custom Field Template < 2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-field-template
Published
2025-12-08
Title
Custom Field Template < 2.7.7 - Authenticated (Subscriber+) Information Exposure
Slug
custom-field-template
Published
2025-12-24
Title
Custom Field Template <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-fields-account-registration-for-woocommerce
Published
2025-03-27
Title
Custom Fields Account Registration For Woocommerce < 1.2 - Cross-Site Request Forgery
Slug
custom-fields-account-registration-for-woocommerce
Published
2025-11-10
Title
Custom Fields Account Registration For Woocommerce < 1.3 - Authenticated (Author+) Privilege Escalation
Slug
custom-fields-search
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
custom-fields-shortcode
Published
2024-02-27
Title
Custom fields shortcode <= 0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Slug
custom-font-uploader
Published
2022-04-11
Title
Wbcom Designs Plugins - Subscriber+ Arbitrary Plugin Installation, Activation and Deactivation
Slug
custom-font-uploader
Published
2024-06-05
Title
Wbcom Designs - Custom Font Uploader < 2.4.0 - Missing Authorization to Font Deletion
Slug
custom-fonts
Published
2024-05-23
Title
Custom Fonts – Host Your Fonts Locally < 2.1.5 - Author+ Stored XSS
Slug
custom-fonts
Published
2026-01-19
Title
Custom Fonts – Host Your Fonts Locally < 2.1.17 - Missing Authorization to Unauthenticated Font Deletion
Slug
custom-frames
Published
2025-12-12
Title
Custom Frames <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Parameter
Slug
custom-functions
Published
2025-04-24
Title
Custom Functions Plugin <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting