WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
currency-switcher
Published
2023-12-27
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
currency-switcher
Published
2024-03-28
Title
WPCS < 1.2.0.2 - Cross-Site Request Forgery
Slug
currency-switcher
Published
2024-07-10
Title
WPCS < 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
currency-switcher
Published
2025-03-10
Title
WPCS – WordPress Currency Switcher Professional < 1.2.0.5 - Unauthenticated Arbitrary Shortcode Execution
Slug
currency-switcher
Published
2026-05-25
Title
WPCS – WordPress Currency Switcher Professional < 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Slug
currency-switcher-for-woocommerce
Published
2025-03-27
Title
Currency Switcher for WooCommerce < 0.0.8 - Cross-Site Request Forgery
Slug
currency-switcher-woocommerce
Published
2019-10-31
Title
Currency Switcher for Woocommerce < 2.11.2 - Security Restrictions Bypass
Slug
currency-switcher-woocommerce
Published
2025-02-28
Title
Currency Switcher for WooCommerce < 2.16.3 - Reflected Cross-Site Scripting
Slug
current-age
Published
2025-09-22
Title
Current Age Plugin < 1.7 - Cross-Site Request Forgery
Slug
current-book
Published
2021-07-14
Title
Current Book <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
current-menu-item-for-custom-post-types
Published
2023-10-26
Title
Current Menu Item for Custom Post Types < 1.6 - Cross-Site Request Forgery
Slug
current-template-name
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
current-template-name
Published
2025-10-05
Title
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
current-template-name
Published
2025-10-14
Title
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Information Exposure
Slug
curtain
Published
2015-03-07
Title
Curtain < 1.0.2 - Unauthenticated Maintenance Mode Switch
Slug
curtain
Published
2022-04-27
Title
Curtain <= 1.0.2 - Admin+ Stored Cross-Site Scripting
Slug
curved-text
Published
2026-01-08
Title
Curved Text <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
custom-404-pro
Published
2019-06-24
Title
Custom 404 Pro < 3.2.9 - Authenticated Reflected XSS
Slug
custom-404-pro
Published
2019-06-24
Title
Custom 404 Pro < 3.2.8 - XSS
Slug
custom-404-pro
Published
2023-01-18
Title
Custom 404 Pro < 3.7.2 - Logs Deletion via CSRF
Slug
custom-404-pro
Published
2023-01-13
Title
Custom 404 Pro < 3.7.1 - Admin+ SQLi
Slug
custom-404-pro
Published
2023-05-02
Title
Custom 404 Pro < 3.7.3 - Reflected Cross-Site Scripting
Slug
custom-404-pro
Published
2023-06-05
Title
Custom 404 Pro < 3.8.1 - Multiple SQL Injection
Slug
custom-404-pro
Published
2023-05-19
Title
Custom 404 Pro < 3.8.2 - Reflected XSS
Slug
custom-404-pro
Published
2023-12-27
Title
Custom 404 Pro < 3.10.1 - Unauthenticated Stored Cross-Site Scripting via logging