WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cubewp-framework
Published
2024-10-09
Title
CubeWP – All-in-One Dynamic Content Framework < 1.1.16 - Missing Authorization
Slug
cubewp-framework
Published
2025-06-10
Title
CubeWP – All-in-One Dynamic Content Framework < 1.1.24 - Authenticated (Subscriber+) Privilege Escalation
Slug
cubewp-framework
Published
2025-06-05
Title
CubeWP <= 1.1.29 - Cross-Site Request Forgery
Slug
cubewp-framework
Published
2025-06-12
Title
CubeWP Framework < 1.1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cubewp-framework
Published
2025-08-19
Title
CubeWP Framework < 1.1.25 - Subscriber+ Privilege Escalation
Slug
cubewp-framework
Published
2025-09-22
Title
CubeWP < 1.1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cubewp-framework
Published
2025-12-26
Title
CubeWP < 1.1.28 - Missing Authorization
Slug
cubewp-framework
Published
2026-01-16
Title
CubeWP – All-in-One Dynamic Content Framework < 1.1.28 - Unauthenticated Information Exposure
Slug
cubewp-framework
Published
2026-01-16
Title
CubeWP < 1.1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode
Slug
cubewp-framework
Published
2026-01-24
Title
CubeWP – All-in-One Dynamic Content Framework < 1.1.28 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php
Slug
cue
Published
2025-04-01
Title
Cue < 2.4.5 - Missing Authorization
Slug
culqi-checkout
Published
2024-04-22
Title
Culqi < 3.0.15 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
cultbooking-booking-engine
Published
2024-11-28
Title
CultBooking Hotel Booking Engine <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
culture-object
Published
2022-09-08
Title
Culture Object < 4.1.1 - Admin+ Stored Cross-Site Scripting
Slug
curated-search
Published
2025-01-16
Title
Curated Search <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
curatorio
Published
2024-10-09
Title
Curator.io < 1.9.2 - Contributor+ Stored XSS
Slug
curatorio
Published
2025-12-31
Title
Curator.io < 1.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
curly-core
Published
2026-03-16
Title
Curly Core < 2.2.2 - Unauthenticated Local File Inclusion
Slug
currency-converter-calculator
Published
2023-11-28
Title
Currency Converter Calculator < 1.3.2 - Contributor+ Stored XSS
Slug
currency-converter-widget
Published
2023-12-19
Title
Currency Converter Widget < 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
currency-converter-widget-pro
Published
2024-12-11
Title
Currency Converter Widget ⚡ PRO < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
currency-per-product-for-woocommerce
Published
2024-04-10
Title
Currency per Product for WooCommerce < 1.7.0 - Cross-Site Request Forgery to Notice Dismissal
Slug
currency-switcher
Published
2021-07-06
Title
WPCS < 1.1.7 - Arbitrary Plugin's Settings Change via CSRF
Slug
currency-switcher
Published
2023-05-12
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0 - Contributor+ Stored Cross-Site Scripting
Slug
currency-switcher
Published
2023-05-12
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0 - Subscriber+ Missing Authorization Checks