CVEs we hold for Chris
Records whose assigning authority named Chris as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-8839MapPress Maps for WordPress <= 2.96.6 - Unauthenticated Insecure Direct Object Reference via REST API Endpointschrisvrichardson MapPress Maps for WordPress
CVE-2026-65564WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerabilitychrisvrichardson MapPress Maps for WordPress
CVE-2026-62101WordPress EduAdmin Booking plugin <= 5.4.2 - Broken Authentication vulnerabilityChris Åkerfeldt Wendel EduAdmin Booking
CVE-2026-59533WordPress Relevanssi Light plugin <= 1.2.2 - SQL Injection vulnerabilityChristoph Vielgrader Relevanssi Light
CVE-2026-56026WordPress utm.codes plugin <= 1.9.0 - Server Side Request Forgery (SSRF) vulnerabilityChris Carlevato utm.codes
CVE-2026-56011WordPress MapPress Maps for WordPress plugin <= 2.97.3 - Cross Site Scripting (XSS) vulnerabilitychrisvrichardson MapPress Maps for WordPress
CVE-2026-5371MonsterInsights <= 10.1.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure And…chriscct7 MonsterInsights – Google Analytics Dashboard for…
CVE-2026-5207LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameterchrisbadgett LifterLMS – WP LMS for eLearning, Online…
CVE-2026-15033christopherthielen check-peer-dependencies peerDependencies packageUtils.js shelljs.exec os command injectionchristopherthielen check-peer-dependencies
CVE-2026-1398Change WP URL <= 1.0 - Cross-Site Request Forgery to Settings Updatechrisnowak Change WP URL
CVE-2025-68039WordPress WP BackItUp plugin <= 2.1.0 - Broken Access Control vulnerabilityChris Simmons WP BackItUp
CVE-2025-62744WordPress Page Title Splitter plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerabilityChris Steman Page Title Splitter
CVE-2025-58968WordPress MaxiBlocks Plugin <= 2.1.3 - Broken Access Control VulnerabilityChristiaan Pieterse MaxiBlocks
CVE-2025-58845WordPress Bulk Watermark Plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) VulnerabilityChrisHurst Bulk Watermark
CVE-2025-58223WordPress VoucherPress Plugin <= 1.5.7 - Cross Site Scripting (XSS) VulnerabilityChris Taylor VoucherPress
CVE-2025-52755WordPress Child Themes plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityChris Taylor Child Themes
CVE-2025-52717WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerabilitychrisbadgett LifterLMS
CVE-2025-50023WordPress CodePen Embed Block plugin <= 1.2.0 - Cross Site Scripting (XSS) VulnerabilityChris Coyier CodePen Embed Block
CVE-2025-49443WordPress Bacon Ipsum plugin <= 2.4 - Cross Site Scripting (XSS) VulnerabilityChris McCoy Bacon Ipsum
CVE-2025-49390WordPress Cookie Notice & Consent plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerabilitychristophrado Cookie Notice & Consent
CVE-2025-47614WordPress LessButtons Social Sharing and Statistics plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) to Settings…Chris Clark LessButtons Social Sharing and Statistics
CVE-2025-47601WordPress MaxiBlocks plugin <= 2.1.0 - Arbitrary Option Update to Privilege Escalation vulnerabilityChristiaan Pieterse MaxiBlocks
CVE-2025-47441WordPress Progress Bar plugin <= 2.2.3 - Cross Site Scripting (XSS) VulnerabilityChris Reynolds Progress Bar
CVE-2025-46540WordPress GNA Search Shortcode plugin <= 0.9.5 - Cross Site Scripting (XSS) VulnerabilityChris Mok GNA Search Shortcode
CVE-2025-30538WordPress Simple Optimizer plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerabilityChrisHurst Simple Optimizer
CVE-2025-26559WordPress Secure Invites plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityChris Taylor Secure Invites
CVE-2025-24610WordPress Restrict Anonymous Access Plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityChristian Leuenberg Restrict Anonymous Access
CVE-2025-23886WordPress Annie plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerabilityChris Roberts Annie
CVE-2025-23667WordPress custom-post-edit plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerabilityChristopher Churchill custom-post-edit
CVE-2025-23565WordPress Wibstats plugin <= 0.5.5 - Reflected Cross Site Scripting (XSS) vulnerabilityChris Taylor Wibstats
CVE-2025-2290LifterLMS <= 8.0.1 - Missing Authorization to Unauthenticated Post Trashingchrisbadgett LifterLMS – WP LMS for eLearning, Online…
CVE-2025-141141180px Shortcodes <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attributechrisblackwell 1180px Shortcodes
CVE-2025-11923LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege…chrisbadgett LifterLMS – WP LMS for eLearning, Online…
CVE-2025-11810Print Button Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodechrishurst Name: Print Button Shortcode
CVE-2025-10496Cookie Notice & Consent <= 1.6.5 - Unauthenticated Stored Cross-Site Scriptingchristophrado Cookie Notice & Consent
CVE-2024-7349LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injectionchrisbadgett LifterLMS – WP LMS for eLearning, Online…
CVE-2024-55972WordPress eTemplates plugin <= 0.2.1 - SQL Injection vulnerabilitychriscarvache eTemplates
CVE-2024-54373WordPress EduAdmin Booking plugin <= 5.2.0 - Local File Inclusion vulnerabilityChris Gardenberg EduAdmin Booking
CVE-2024-54338WordPress Hello Event Widgets For Elementor plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilitychrister_f Hello Event Widgets For Elementor
CVE-2024-51762WordPress PropertyShift plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityChris Gipple PropertyShift
CVE-2024-50440WordPress CodePen Embedded Pens Shortcode plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilityChris Coyier CodePen Embedded Pens Shortcode
CVE-2024-49668WordPress Verbalize WP plugin <= 1.0 - Arbitrary File Upload vulnerabilitychristopherdewese1099 Verbalize WP
CVE-2024-4743LifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcodechrisbadgett LifterLMS – WP LMS for eLearning, Online…
CVE-2024-37960WordPress CodePen Embedded Pens Shortcode plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityChris Coyier CodePen Embedded Pens Shortcode
CVE-2024-12596LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated…chrisbadgett LifterLMS – WP LMS for eLearning, Online…
CVE-2024-10715MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Blockchrisvrichardson MapPress Maps for WordPress
CVE-2024-0377LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_reviewchrisbadgett LifterLMS – WP LMS for eLearning, Online…
CVE-2023-7225MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settingschrisvrichardson MapPress Maps for WordPress
CVE-2023-6524MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scriptingchrisvrichardson MapPress Maps for WordPress
CVE-2023-6160LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletionchrisbadgett LifterLMS – WP LMS for eLearning, Online…
CVE-2023-4840MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodechrisvrichardson MapPress Maps for WordPress
CVE-2023-47808WordPress Add Widgets to Page Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)Christina Uechi Add Widgets to Page
CVE-2023-46782WordPress MomentoPress for Momento360 Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)Chris Yee MomentoPress for Momento360
CVE-2023-45605WordPress Feed Statistics Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)Christopher Finke Feed Statistics
CVE-2023-41948WordPress Cookie Notice & Consent Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)Christoph Rado Cookie Notice & Consent
CVE-2023-36692WordPress WP-Cirrus Plugin <= 0.6.11 is vulnerable to Cross Site Scripting (XSS)Christian Kramer & Hendrik Thole WP-Cirrus
CVE-2023-31079WordPress Tippy Plugin <= 6.2.1 is vulnerable to Cross Site Scripting (XSS)Chris Roberts Tippy
CVE-2023-26015WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL InjectionChris Richardson MapPress Maps for WordPress
CVE-2023-23786WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.3 is vulnerable to Cross Site Scripting (XSS)Christof Servit affiliate-toolkit
CVE-2023-23725WordPress Shortcodes by Angie Makes plugin <= 3.46 - Broken Access Control vulnerabilityChris Baldelomar Shortcodes
CVE-2023-23699WordPress Progress Bar Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)Chris Reynolds Progress Bar
CVE-2022-37404WordPress add2fav plugin <= 1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityChristian Salazar add2fav (WordPress plugin)
CVE-2016-20076WordPress Simple-Backup 2.7.11 Arbitrary File Deletion and DownloadChrisHurst Simple Backup
CVE-2015-10131chrisy TFO Graphviz Plugin tfo-graphviz-admin.php admin_page cross site scriptingchrisy TFO Graphviz Plugin
73 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.