WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-company-info
Published
2025-11-20
Title
WP Company Info <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-compare-tables
Published
2025-03-11
Title
WP Compare Tables <= 1.0.5 - Cross-Site Request Forgery
Slug
wp-compiler
Published
2025-09-22
Title
WP Compiler <= 1.0.0 - Cross-Site Request Forgery
Slug
wp-compress-image-optimizer
Published
2024-01-03
Title
WP Compress < 6.10.34 - Unauthenticated Arbitrary File Read
Slug
wp-compress-image-optimizer
Published
2024-03-21
Title
WP Compress – Image Optimizer < 6.11.11 - Missing Authorization to Unauthenticated CDN Modification
Slug
wp-compress-image-optimizer
Published
2024-04-11
Title
WP Compress – Image Optimizer [All-In-One] < 6.11.01 - Cross-Site Request Forgery
Slug
wp-compress-image-optimizer
Published
2024-05-13
Title
WP Compress – Image Optimizer [All-In-One] < 6.20.02 - Open Redirect via css
Slug
wp-compress-image-optimizer
Published
2024-05-13
Title
WP Compress – Image Optimizer [All-In-One] < 6.20.02 - Missing Authorization
Slug
wp-compress-image-optimizer
Published
2024-09-30
Title
WP Compress – Image Optimizer [All-In-One] < 6.21.01 - Reflected Cross-Site Scripting
Slug
wp-compress-image-optimizer
Published
2025-01-03
Title
WP Compress – Instant Performance & Speed Optimization < 6.30.04 - Reflected Cross-Site Scripting via custom_server Parameter
Slug
wp-compress-image-optimizer
Published
2025-03-24
Title
WP Compress < 6.30.16 - Unauthenticated Server-Side Request Forgery via init Function
Slug
wp-compress-image-optimizer
Published
2025-03-25
Title
WP Compress < 6.30.16 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
Slug
wp-compress-image-optimizer
Published
2025-05-07
Title
WP Compress < 6.30.31 - Cross-Site Request Forgery
Slug
wp-compress-image-optimizer
Published
2025-07-03
Title
WP Compress < 6.30.31 - Unauthenticated Broken Authentication
Slug
wp-compress-image-optimizer
Published
2025-09-22
Title
WP Compress < 6.50.55 - Missing Authorization
Slug
wp-compress-mainwp
Published
2025-03-28
Title
WP Compress for MainWP < 6.30.06 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
wp-compress-mainwp
Published
2025-06-05
Title
WP Compress for MainWP < 6.50.05 - Missing Authorization
Slug
wp-compress-mainwp
Published
2025-11-29
Title
Compress for MainWP <= 6.50.17 - Missing Authorization
Slug
wp-concours
Published
2017-12-19
Title
WordPress Concours <= 1.1 - Authenticated Cross-Site Scripting (XSS)
Slug
wp-condition
Published
2025-04-10
Title
WordPress Health and Server Condition – Integrated with Google Page Speed <= 4.1.1 - Reflected Cross-Site Scripting
Slug
wp-conditional-captcha
Published
2014-08-01
Title
Conditional CAPTCHA 3.6 - wp-conditional-captcha.php Settings Page CSRF
Slug
wp-conditional-post-restrictions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-conditional-post-restrictions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-conference-schedule
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-config-file-editor
Published
2021-05-31
Title
WP Config File Editor <= 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)