WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-global-variables
Published
2021-01-11
Title
Custom Global Variables < 1.1.1 - Stored Cross-Site Scripting (XSS)
Slug
custom-header-images
Published
2023-10-25
Title
Custom Header Images <= 1.2.1 - Cross-Site Request Forgery
Slug
custom-html-bodyhead
Published
2025-08-25
Title
WordPress HTML <= 0.51 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-icons-for-elementor
Published
2024-10-21
Title
Custom Icons for Elementor < 0.3.4 - Authenticated (Admin+) Arbitrary File Upload
Slug
custom-iframe
Published
2025-09-22
Title
Custom iFrame for Elementor < 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-landing-pages-leadmagic
Published
2022-01-18
Title
User Registration, Login & Landing Pages <= 1.2.7 - Admin+ Stored Cross-Site Scripting
Slug
custom-layouts
Published
2024-08-16
Title
Custom Layouts – Post + Product grids made easy < 1.4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-layouts
Published
2025-12-05
Title
Custom Layouts – Post + Product grids made easy < 1.5.0 - Missing Authorization
Slug
custom-list-table-example
Published
2025-01-16
Title
Custom List Table Example <= 1.4.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
custom-login
Published
2023-12-07
Title
Custom Login < 4.1.1 - Subscriber+ Unauthorised Action
Slug
custom-login-and-signup-widget
Published
2025-07-01
Title
Custom Login And Signup Widget <= 1.0 - Authenticated (Administrator+) Remote Code Execution
Slug
custom-login-and-signup-widget
Published
2025-09-19
Title
Custom Login And Signup Widget <= 1.0 - Cross-Site Request Forgery
Slug
custom-login-page
Published
2025-01-10
Title
A5 Custom Login Page <= 2.8.1 - Reflected XSS
Slug
custom-login-redirect
Published
2021-07-19
Title
Custom Login Redirect <= 1.0.0 - CSRF to Stored XSS
Slug
custom-login-url
Published
2025-09-22
Title
Custom Login URL < 1.0.3 - Missing Authorization
Slug
custom-logo
Published
2026-02-25
Title
Custom Logo <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Logo Path Setting
Slug
custom-map
Published
2017-12-19
Title
Custom Map <= 1.1 - Authenticated Cross-Site Scripting (XSS)
Slug
custom-menu
Published
2025-08-17
Title
Custom Menu <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-metas
Published
2016-04-17
Title
custom-metas plugin <= 1.5.1 - Cross-Site Scripting (XSS)
Slug
custom-more-link-complete
Published
2023-03-30
Title
Custom More Link Complete <= 1.4.1 - Admin+ Stored XSS
Slug
custom-my-account-for-woocommerce
Published
2023-10-25
Title
Custom My Account for Woocommerce <= 2.1 - Stored XSS via CSRF
Slug
custom-option-tree
Published
2025-11-09
Title
Traveler Option Tree <= 2.8 - Authenticated (Editor+) Information Exposure
Slug
custom-order-numbers-for-woocommerce
Published
2023-04-14
Title
Custom Order Numbers for WooCommerce < 1.4.1 - CSRF
Slug
custom-order-numbers-for-woocommerce
Published
2025-11-22
Title
Custom Order Numbers for WooCommerce < 1.11.1 - Missing Authorization
Slug
custom-order-statuses-for-woocommerce
Published
2024-02-20
Title
Custom Order Statuses for WooCommerce <= 1.5.2 - Cross-Site Request Forgery