| Vulnerability Name |
CVE
CWE
|
CWE |
Severity |
|
WordPress Plugin Commentator Cross-Site Scripting (2.5.2)
|
|
|
High
|
|
WordPress Plugin Comment Attachment Cross-Site Scripting (1.5.5)
|
|
|
High
|
|
WordPress Plugin Comment Extra Fields 'cef-upload.php' Arbitrary File Upload (1.7)
|
|
|
High
|
|
WordPress Plugin Comment Extra Fields Multiple Cross-Site Scripting Vulnerabilities (1.7)
|
|
|
High
|
|
WordPress Plugin Comment Highlighter SQL Injection (0.13)
|
|
|
High
|
|
WordPress Plugin Comment Link Remove and Other Comment Tools Cross-Site Request Forgery (2.1.4)
|
|
|
High
|
|
WordPress Plugin CommentLuv Cross-Site Scripting (2.92.3)
|
|
|
High
|
|
WordPress Plugin Comment Rating 'id' Parameter SQL Injection (2.9.23)
|
|
|
High
|
|
WordPress Plugin Comment Rating 'path' Parameter Cross-Site Scripting (2.9.20)
|
|
|
High
|
|
WordPress Plugin Comment Rating Cross-Site Request Forgery (2.9.20)
|
|
|
High
|
|
WordPress Plugin Comment Rating SQL Injection and Security Bypass Weakness Vulnerabilities (2.9.32)
|
|
|
High
|
|
WordPress Plugin Comments-wpDiscuz Arbitrary File Upload (7.0.4)
|
|
|
High
|
|
WordPress Plugin Comments-wpDiscuz Cross-Site Request Forgery (3.2.8)
|
|
|
High
|
|
WordPress Plugin Comments-wpDiscuz Cross-Site Request Forgery (7.3.3)
|
|
|
High
|
|
WordPress Plugin Comments-wpDiscuz Cross-Site Scripting (3.1.4)
|
|
|
High
|
|
WordPress Plugin Comments-wpDiscuz Cross-Site Scripting (7.3.1)
|
|
|
High
|
|
WordPress Plugin Comments-wpDiscuz SQL Injection (5.3.5)
|
|
|
High
|
|
WordPress Plugin Comments Disable-AccessPress includes Backdoor [Only if downloaded via the vendor website] (1.0.7)
|
|
|
High
|
|
WordPress Plugin Comments Like Dislike Security Bypass (1.1.3)
|
|
|
High
|
|
WordPress Plugin Comment System for WordPress & Ajax Comments-Comment Press Cross-Frame Scripting (2.7.0)
|
|
|
High
|
|
WordPress Plugin Community by PeepSo-Social Network, Membership, Registration, User Profiles Multiple Cross-Site Request Forgery Vulnerabilities (6.0.2.0)
|
|
|
High
|
|
WordPress Plugin Community by PeepSo-Social Network, Membership, Registration, User Profiles Multiple Vulnerabilities (1.11.5)
|
|
|
High
|
|
WordPress Plugin Community by PeepSo-Social Network, Membership, Registration, User Profiles Privilege Escalation (1.6.0)
|
|
|
High
|
|
WordPress Plugin Community Events 'id' Parameter SQL Injection (1.2.2)
|
|
|
High
|
|
WordPress Plugin Community Events SQL Injection (1.3.5)
|
|
|
High
|
|
WordPress Plugin Compact WP Audio Player Cross-Site Scripting (1.9.7)
|
|
|
High
|
|
WordPress Plugin Compact WP Audio Player Multiple Vulnerabilities (1.9.6)
|
|
|
High
|
|
WordPress Plugin Companion Auto Update Cross-Site Scripting (2.9.3)
|
|
|
High
|
|
WordPress Plugin Companion Auto Update Multiple Vulnerabilities (3.2.0)
|
|
|
High
|
|
WordPress Plugin Companion Revision Manager-Revision Control Unspecified Vulnerability (1.3)
|
|
|
High
|
|
WordPress Plugin Companion Sitemap Generator Cross-Site Request Forgery (3.6.6)
|
|
|
High
|
|
WordPress Plugin Compfight Cross-Site Scripting (1.4)
|
|
|
High
|
|
WordPress Plugin Complete Gallery Manager for WordPress Arbitrary File Upload (3.3.3)
|
|
|
High
|
|
WordPress Plugin Complianz-GDPR/CCPA Cookie Consent Cross-Site Scripting (5.5.2)
|
|
|
High
|
|
WordPress Plugin Complianz-GDPR/CCPA Cookie Consent Cross-Site Scripting (6.4.1)
|
|
|
High
|
|
WordPress Plugin Complianz-GDPR/CCPA Cookie Consent SQL Injection (6.3.3)
|
|
|
High
|
|
WordPress Plugin Comprehensive Google Map Cross-Site Request Forgery (9.1.3)
|
|
|
High
|
|
WordPress Plugin Computer Repair Shop Cross-Site Scripting (1.0)
|
|
|
High
|
|
WordPress Plugin Concours Cross-Site Scripting (1.1)
|
|
|
High
|
|
WordPress Plugin Conditional Marketing Mailer for WooCommerce Cross-Site Request Forgery (1.5.2)
|
|
|
High
|
|
WordPress Plugin Conditional Marketing Mailer for WooCommerce Security Bypass (1.5.1)
|
|
|
High
|
|
WordPress Plugin Conditional Marketing Mailer for WooCommerce Unspecified Vulnerability (1.6)
|
|
|
High
|
|
WordPress Plugin Conditional Payments for WooCommerce Cross-Site Request Forgery (2.3.1)
|
|
|
High
|
|
WordPress Plugin Conduit Banner 'banner-index-field-id' Parameter Cross-Site Scripting (0.2)
|
|
|
High
|
|
WordPress Plugin Connections Business Directory Cross-Site Scripting (8.5.8)
|
|
|
High
|
|
WordPress Plugin Connections Business Directory Cross-Site Scripting (10.4.2)
|
|
|
High
|
|
WordPress Plugin Connections Business Directory CSV Injection (9.6)
|
|
|
High
|
|
WordPress Plugin Connections Business Directory Unspecified Vulnerability (0.7.1.5)
|
|
|
High
|
|
WordPress Plugin Connections Business Directory Unspecified Vulnerability (10.4.7)
|
|
|
High
|
|
WordPress Plugin Connector for Gravity Forms and Google Sheets Cross-Site Scripting (1.1.0)
|
|
|
High
|
|
WordPress Plugin Constant Contact Forms Cross-Site Scripting (1.8.7)
|
|
|
High
|
|
WordPress Plugin Constant Contact for WordPress Multiple Cross-Site Scripting Vulnerabilities (3.1.7)
|
|
|
High
|
|
WordPress Plugin Constant Contact for WordPress Unspecified Vulnerability (3.1.6)
|
|
|
High
|
|
WordPress Plugin Consulting Elementor Widgets Local File Inclusion (1.3.0)
|
|
|
High
|
|
WordPress Plugin Consulting Elementor Widgets SQL Injection (1.3.0)
|
|
|
High
|
|
WordPress Plugin Contact Bank-Contact Form Builder for WordPress 'Label' Field Cross-Site Scripting (2.0.19)
|
|
|
High
|
|
WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (2.0.69)
|
|
|
High
|
|
WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (2.0.225)
|
|
|
High
|
|
WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (2.0.226)
|
|
|
High
|
|
WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (2.1.22)
|
|
|
High
|
|
WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (2.1.23)
|
|
|
High
|
|
WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (3.0.30)
|
|
|
High
|
|
WordPress Plugin Contact Bank-Contact Form Builder for WordPress Unspecified Vulnerability (2.1.26)
|
|
|
High
|
|
WordPress Plugin Contact Form & SMTP Plugin for WordPress by PirateForms Cross-Site Scripting (2.5.1)
|
|
|
High
|
|
WordPress Plugin Contact Form 'wpcf_easyform_formid' Parameter SQL Injection (2.7.5)
|
|
|
High
|
|
WordPress Plugin Contact Form, Drag and Drop Form Builder for WordPress-Everest Forms SQL Injection (1.4.9)
|
|
|
High
|
|
WordPress Plugin Contact Form, Survey & Popup Form for WordPress-ARForms Form Builder Cross-Site Scripting (1.4)
|
|
|
High
|
|
WordPress Plugin Contact Form-Fastest Contact Form Builder Plugin for WordPress by Fluent Forms Cross-Site Request Forgery (3.6.66)
|
|
|
High
|
|
WordPress Plugin Contact Form-Form builder with drag & drop for WordPress by Kali Forms Security Bypass (2.1.1)
|
|
|
High
|
|
WordPress Plugin Contact Form 7 Arbitrary File Upload (3.5.2)
|
|
|
High
|
|
WordPress Plugin Contact Form 7 Arbitrary File Upload (3.5.3)
|
|
|
High
|
|
WordPress Plugin Contact Form 7 Arbitrary File Upload (5.3.1)
|
|
|
High
|
|
WordPress Plugin Contact Form 7 Captcha Cross-Site Request Forgery (0.0.8)
|
|
|
High
|
|
WordPress Plugin Contact Form 7 Cross-Site Scripting (4.0.1)
|
|
|
High
|
|
WordPress Plugin Contact Form 7 Database Addon-CFDB7 CSV Injection (1.2.5.5)
|
|
|
High
|
