WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-compress-image-optimizer
Published
2025-03-25
Title
WP Compress < 6.30.16 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
Slug
wp-compress-image-optimizer
Published
2025-05-07
Title
WP Compress < 6.30.31 - Cross-Site Request Forgery
Slug
wp-compress-image-optimizer
Published
2025-07-03
Title
WP Compress < 6.30.31 - Unauthenticated Broken Authentication
Slug
wp-compress-image-optimizer
Published
2025-09-22
Title
WP Compress < 6.50.55 - Missing Authorization
Slug
wp-compress-image-optimizer
Published
2026-02-17
Title
Compress < 6.60.29 - Missing Authorization
Slug
wp-compress-image-optimizer
Published
2026-07-02
Title
WP Compress < 7.10.04 - Reflected XSS via test_zone
Slug
wp-compress-mainwp
Published
2025-03-28
Title
WP Compress for MainWP < 6.30.06 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
wp-compress-mainwp
Published
2025-06-05
Title
WP Compress for MainWP < 6.50.05 - Missing Authorization
Slug
wp-compress-mainwp
Published
2025-11-29
Title
Compress for MainWP <= 6.50.17 - Missing Authorization
Slug
wp-concours
Published
2017-12-19
Title
WordPress Concours <= 1.1 - Authenticated Cross-Site Scripting (XSS)
Slug
wp-condition
Published
2025-04-10
Title
WordPress Health and Server Condition – Integrated with Google Page Speed <= 4.1.1 - Reflected Cross-Site Scripting
Slug
wp-conditional-captcha
Published
2014-08-01
Title
Conditional CAPTCHA 3.6 - wp-conditional-captcha.php Settings Page CSRF
Slug
wp-conditional-captcha
Published
2026-01-31
Title
Conditional CAPTCHA <= 4.0.0 - Open Redirect
Slug
wp-conditional-post-restrictions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-conditional-post-restrictions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-conference-schedule
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-config-file-editor
Published
2021-05-31
Title
WP Config File Editor <= 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wp-configurator-pro
Published
2026-03-23
Title
WP Configurator Pro < 3.8.0 - Missing Authorization
Slug
wp-connect
Published
2024-12-04
Title
WordPress连接微博 <= 2.5.6 - Stored XSS via CSRF
Slug
wp-construction-mode
Published
2014-08-01
Title
Construction Mode 1.8 - under-construction.php wuc_logo Parameter XSS
Slug
wp-construction-mode
Published
2014-12-15
Title
WP Construction Mode <= 1.91 - Cross-Site Scripting (XSS)
Slug
wp-consultant
Published
2014-06-12
Title
WP Consultant <= 1.0 - XSS
Slug
wp-contact
Published
2014-04-25
Title
WP Contact = 1.0 - Multiple Cross-Site Scripting (XSS)
Slug
wp-contact-form
Published
2024-02-09
Title
WP Contact Form <= 1.6 - Cross-Site Request Forgery via wpcf_adminpage
Slug
wp-contact-form-7-db-handler
Published
2026-05-27
Title
WP Contact Form 7 DB Handler < 3.1 - Cross-Site Request Forgery to Arbitrary File Deletion via 'contact_form' Parameter