WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-chinese-conversion
Published
2023-05-10
Title
WP Chinese Conversion <= 1.1.16 - Reflected XSS
Slug
wp-chrono
Published
2025-04-01
Title
WP Chrono <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-church-center
Published
2025-02-02
Title
WP Church Center <= 1.3.3 - Reflected Cross-Site Scripting
Slug
wp-church-donation
Published
2025-03-24
Title
WP Church Donation <= 1.7 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-church-donation
Published
2025-03-31
Title
WP Church Donation <= 1.7 - Cross-Site Request Forgery
Slug
wp-cirrus
Published
2023-07-04
Title
WP-Cirrus <= 0.6.11 - Admin+ Stored Cross-Site Scripting
Slug
wp-clap
Published
2025-01-16
Title
WP-Clap <= 1.5 - Reflected Cross-Site Scripting
Slug
wp-clean-up
Published
2023-03-03
Title
WP Clean Up <= 1.2.3 - Cross-Site Request Forgery (CSRF)
Slug
wp-cleanfix
Published
2014-08-01
Title
wp-cleanfix - Remote Comm& Execution, CSRF & XSS
Slug
wp-cleanfix
Published
2023-11-28
Title
WP Cleanfix < 5.7.0 - Subscriber+ Post/Comment/Post Meta Content Replacement
Slug
wp-cleanup-and-basic-functions
Published
2024-10-04
Title
WP Cleanup and Basic Functions <= 2.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
wp-click-info
Published
2025-02-20
Title
WP Click Info <= 2.7.4 - Reflected XSS
Slug
wp-click-track
Published
2025-07-14
Title
WP-Click-Tracker <= 0.7.3 - Reflected Cross-Site Scripting
Slug
wp-client-logo-carousel
Published
2023-02-14
Title
Client Logo Carousel <= 3.0.0 - Contributor+ Stored XSS
Slug
wp-client-reports
Published
2024-04-12
Title
WP Client Reports < 1.0.23 - Cross-Site Request Forgery
Slug
wp-client-testimonial
Published
2026-01-08
Title
Client Testimonial Slider <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aft_testimonial_meta_name' Metabox Field
Slug
wp-clone-any-post-type
Published
2025-04-01
Title
WP Clone any post type <= 3.5 - Open Redirect
Slug
wp-clone-any-post-type
Published
2025-04-01
Title
WP Clone any post type <= 3.5 - Missing Authorization
Slug
wp-clone-by-wp-academy
Published
2014-08-01
Title
WP Clone by WP Academy <= 2.1.1 - XSS in ZeroClipboard
Slug
wp-clone-by-wp-academy
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
wp-clone-by-wp-academy
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
wp-clone-by-wp-academy
Published
2023-12-18
Title
Clone < 2.4.3 - Unauthenticated Backup Download
Slug
wp-clone-by-wp-academy
Published
2024-04-10
Title
Clone < 2.4.4 - Subscriber+ Unauthorised Action Calls
Slug
wp-clone-by-wp-academy
Published
2024-08-16
Title
Clone < 2.4.6 - Missing Authorization
Slug
wp-clone-by-wp-academy
Published
2024-11-19
Title
Clone < 2.4.7 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace'