WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-order-statuses-for-woocommerce
Published
2024-04-15
Title
Custom Order Statuses for WooCommerce <= 1.5.2 - Missing Authorization
Slug
custom-order-statuses-woocommerce
Published
2024-01-30
Title
Custom Order Status for WooCommerce < 2.4.0 - Cross-Site Request Forgery
Slug
custom-page-extensions
Published
2025-01-16
Title
Custom Page Extensions <= 0.6 - Reflected Cross-Site Scripting
Slug
custom-page-templates-by-vegacorp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
custom-page-templates-by-vegacorp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
custom-pc-builder-lite-for-woocommerce
Published
2025-04-29
Title
Custom PC Builder Lite for WooCommerce <= 1.0.1 - Missing Authorization to Unauthenticated Settings Update
Slug
custom-permalinks
Published
2018-02-22
Title
Custom Permalinks <= 1.1 - Authenticated SQL Injection
Slug
custom-permalinks
Published
2018-02-22
Title
Custom Permalinks <= 1.1 - Cross-Site Scripting (XSS)
Slug
custom-permalinks
Published
2024-08-23
Title
Custom Permalinks < 2.7.0 - Authenticated(Editor+) Stored Cross-Site Scripting
Slug
custom-post-limits
Published
2024-09-12
Title
Custom Post Limits <= 4.4.1 - Unauthenticated Full Path Disclosure
Slug
custom-post-order-category
Published
2025-06-05
Title
Custom Category/Post Type Post order < 2.0 - Missing Authorization
Slug
custom-post-popup
Published
2025-04-24
Title
WP Custom Post Popup <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-post-status
Published
2025-12-31
Title
Custom Post Status <= 1.1.0 - Cross-Site Request Forgery
Slug
custom-post-type
Published
2025-11-20
Title
Custom Post Type <= 1.0 - Cross-Site Request Forgery to Custom Post Type Deletion
Slug
custom-post-type-cpt-cusom-taxonomy-ct-manager
Published
2023-03-28
Title
Custom Post Type and Taxonomy GUI Manager <= 1.1 - Stored XSS via CSRF
Slug
custom-post-type-date-archives
Published
2025-02-21
Title
Custom Post Type Date Archives <= 2.7.1 - Missing Authorization to Unauthenticated Arbitrary Shortcode Execution
Slug
custom-post-type-generator
Published
2023-07-18
Title
Custom Post Type Generator <= 2.4.2 - Admin+ Stored Cross-Site Scripting
Slug
custom-post-type-gui
Published
2025-01-16
Title
Custom Post <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
custom-post-type-list-shortcode
Published
2023-04-17
Title
Custom Post Type List Shortcode <= 1.4.4 - Contributor+ Stored XSS
Slug
custom-post-type-lockdown
Published
2025-01-16
Title
Custom Post Type Lockdown <= 1.11 - Cross-Site Request Forgery to Privilege Escalation
Slug
custom-post-type-page-template
Published
2023-12-07
Title
Custom Post Type Page Template <= 1.1 - Cross-Site Request Forgery
Slug
custom-post-type-pdf-attachment
Published
2024-05-15
Title
Custom Post Type Attachment < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via pdf_attachment Shortcode
Slug
custom-post-type-pdf-attachment
Published
2025-09-29
Title
Custom Post Type Attachment <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
custom-post-type-relations
Published
2021-08-13
Title
Custom Post Type Relations <= 1.0 - Reflected Cross-Site Scripting
Slug
custom-post-type-templates-for-elementor
Published
2024-11-01
Title
Custom post type templates for Elementor < 1.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting