WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-cumulus
Published
2009-09-27
Title
WP Cumulus < 1.22 - XSS
Slug
wp-currency-exchange-rates
Published
2024-12-11
Title
WP Currency Exchange Rates < 1.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-curriculo-vitae
Published
2021-03-26
Title
WP-Curricul Vitea Free <= 6.3 - Unauthenticated Arbitrary File Upload to RCE
Slug
wp-custom-admin-interface
Published
2022-12-13
Title
WP Custom Admin Interface < 7.29 - Admin+ PHP Object Injection
Slug
wp-custom-admin-interface
Published
2023-09-29
Title
WP Custom Admin Interface < 7.33 - Missing Authorization to Transients Deletion
Slug
wp-custom-admin-interface
Published
2023-11-13
Title
WP Custom Admin Interface < 7.32 - Missing Authorization via wpcai_pro_notice_disable
Slug
wp-custom-admin-interface
Published
2025-12-31
Title
Custom Admin Interface < 7.41 - Missing Authorization
Slug
wp-custom-admin-interface
Published
2026-01-25
Title
Custom Admin Interface < 7.42 - Missing Authorization
Slug
wp-custom-author-url
Published
2023-04-10
Title
WP Custom Author URL < 1.0.5 - Admin+ Stored XSS
Slug
wp-custom-body-class
Published
2019-07-08
Title
WP Custom Body Class <= 0.7.0 - CSRF to Stored XSS and Settings Update
Slug
wp-custom-cms-block
Published
2025-04-24
Title
Wp Custom CMS Block <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-custom-countdown
Published
2025-01-07
Title
wp custom countdown <= 2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-custom-cursors
Published
2022-09-21
Title
WP Custom Cursors < 3.0.1 - Stored Cross-Site Scripting via CSRF
Slug
wp-custom-cursors
Published
2022-09-21
Title
WP Custom Cursors < 3.2 - Admin+ SQLi
Slug
wp-custom-cursors
Published
2022-09-21
Title
WP Custom Cursors < 3.0.1 - Arbitrary Cursor Deletion via CSRF
Slug
wp-custom-cursors
Published
2023-05-24
Title
WP Custom Cursors < 3.2 - Admin+ SQLi
Slug
wp-custom-cursors
Published
2023-10-07
Title
WP Custom Cursors <= 3.3 - Admin+ Stored XSS
Slug
wp-custom-field-for-gutenberg-editor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-custom-field-for-gutenberg-editor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-custom-fields-search
Published
2017-06-11
Title
WP Custom Fields Search < 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
wp-custom-fields-search
Published
2023-02-20
Title
WP Custom Fields Search < 1.2.35 - Admin+ Stored XSS
Slug
wp-custom-fields-search
Published
2024-09-18
Title
WP Custom Fields Search <= 1.2.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcfs-preset Shortcode
Slug
wp-custom-google-search
Published
2025-01-16
Title
WP Custom Google Search <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-custom-login-page
Published
2023-02-23
Title
Custom Login Page <= 2.0 - Admin+ Stored XSS
Slug
wp-custom-login-page-logo
Published
2025-11-10
Title
WP Custom Admin Login Page Logo <= 1.4.8.4 - Cross-Site Request Forgery to Settings Update