WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-custom-cursors
Published
2022-09-21
Title
WP Custom Cursors < 3.2 - Admin+ SQLi
Slug
wp-custom-cursors
Published
2022-09-21
Title
WP Custom Cursors < 3.0.1 - Arbitrary Cursor Deletion via CSRF
Slug
wp-custom-cursors
Published
2023-05-24
Title
WP Custom Cursors < 3.2 - Admin+ SQLi
Slug
wp-custom-cursors
Published
2023-10-07
Title
WP Custom Cursors <= 3.3 - Admin+ Stored XSS
Slug
wp-custom-field-for-gutenberg-editor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-custom-field-for-gutenberg-editor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-custom-fields-search
Published
2017-06-11
Title
WP Custom Fields Search < 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
wp-custom-fields-search
Published
2023-02-20
Title
WP Custom Fields Search < 1.2.35 - Admin+ Stored XSS
Slug
wp-custom-fields-search
Published
2024-09-18
Title
WP Custom Fields Search <= 1.2.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcfs-preset Shortcode
Slug
wp-custom-google-search
Published
2025-01-16
Title
WP Custom Google Search <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-custom-login-page
Published
2023-02-23
Title
Custom Login Page <= 2.0 - Admin+ Stored XSS
Slug
wp-custom-login-page-logo
Published
2025-11-10
Title
WP Custom Admin Login Page Logo <= 1.4.8.4 - Cross-Site Request Forgery to Settings Update
Slug
wp-custom-pages
Published
2014-08-01
Title
WP Custom Pages 0.5.0.1 - LFI
Slug
wp-custom-post-rss-feed
Published
2025-02-03
Title
WP Custom Post RSS Feed <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-custom-post-template
Published
2023-09-05
Title
WP Custom Post Template <= 1.0 - Settings Update via CSRF
Slug
wp-custom-taxonomy-image
Published
2024-10-21
Title
Category and Taxonomy Image <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-custom-taxonomy-meta
Published
2024-10-21
Title
Category and Taxonomy Meta Fields <= 1.0.0 - Cross-Site Request Forgery to Taxonomy Meta Add/Delete
Slug
wp-custom-taxonomy-meta
Published
2024-10-21
Title
Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-custom-taxonomy-meta
Published
2024-10-21
Title
Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-custom-widget-area
Published
2023-10-03
Title
WP Custom Widget area <= 1.2.5 - Missing Authorization
Slug
wp-custom-widget-area
Published
2023-12-21
Title
WP Custom Widget Area <= 1.2.5 - Subscriber+ Menus Creation/Deletion/Update
Slug
wp-customer-reviews
Published
2016-04-05
Title
WP Customer Reviews < 3.0.9 - CSRF & XSS
Slug
wp-customer-reviews
Published
2020-08-20
Title
WP Customer Reviews < 3.4.3 - Multiple Unauthenticated and Low Priv Authenticated Stored XSS
Slug
wp-customer-reviews
Published
2021-05-04
Title
WP Customer Reviews < 3.5.6 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wp-customer-reviews
Published
2023-09-13
Title
WP Customer Reviews < 3.6.7 - Admin+ Stored XSS