WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cowidgets-elementor-addons
Published
2024-11-08
Title
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
cowidgets-elementor-addons
Published
2024-11-28
Title
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cozy-addons
Published
2024-09-30
Title
Cozy Blocks < 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2024-10-24
Title
Cozy Blocks < 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2024-10-25
Title
Cozy Blocks < 2.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2025-03-27
Title
Cozy Blocks < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2025-05-07
Title
Cozy Blocks < 2.1.23 - Missing Authorization
Slug
cozy-addons
Published
2025-09-22
Title
Cozy Blocks < 2.1.30 - Unauthenticated Arbitrary Shortcode Execution
Slug
cozy-addons
Published
2026-07-23
Title
Cozy Blocks < 2.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block Attribute
Slug
cozy-addons
Published
2026-07-23
Title
Cozy Blocks < 2.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute
Slug
cozy-addons
Published
2026-07-28
Title
Cozy Blocks < 2.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute
Slug
cozy-addons
Published
2026-07-31
Title
Cozy Blocks < 2.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute
Slug
cozy-addons
Published
2026-08-24
Title
Cozy Blocks < 2.2.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute
Slug
cozy-addons
Published
2026-08-31
Title
Cozy Blocks < 2.2.18 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter
Slug
cozy-addons
Published
2026-10-03
Title
Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Templates < 2.2.24 - Unauthenticated Insecure Direct Object Reference
Slug
cozy-addons
Published
2026-10-29
Title
Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox < 2.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cozy-addons
Published
2026-10-27
Title
Cozy Blocks < 2.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute
Slug
cozy-addons
Published
2026-10-27
Title
Cozy Blocks < 2.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute
Slug
cp-blocks
Published
2022-02-02
Title
CP Blocks < 1.0.15 - Admin+ Stored Cross-Site Scripting
Slug
cp-blocks
Published
2023-10-06
Title
CP Blocks < 1.0.21 - CSRF
Slug
cp-contact-form-with-paypal
Published
2015-07-11
Title
CP Contact Form with Paypal <= 1.1.5 - Multiple Vulnerabilities
Slug
cp-contact-form-with-paypal
Published
2019-06-23
Title
CP Contact Form with Paypal <= 1.3.01 - Multiple XSS
Slug
cp-contact-form-with-paypal
Published
2025-01-29
Title
CP Contact Form with PayPal < 1.3.53 - Cross-Site Request Forgery
Slug
cp-contact-form-with-paypal
Published
2025-11-21
Title
CP Contact Form with PayPal < 1.3.57 - Missing Authorization to Unauthenticated Arbitrary Payment Confirmation