CVEs we hold for Custom

Records whose assigning authority named Custom as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-8981Lazy Blocks < 4.3.0 - Admin+ Stored XSS via Custom Block Frontend HTMLUnknown Custom Block Builder

CVE-2026-83532Custom Menu Wizard <= 3.3.1 - Contributor+ Stored XSS via Shortcode AttributesUnknown Custom Menu Wizard Widget

CVE-2026-76585Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' ParameterUnknown Customer Reviews for WooCommerce

CVE-2026-6433Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCEUnknown Custom css-js-php

CVE-2026-16940Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path TraversalUnknown Custom Fields

CVE-2026-15240Customer Switching for WooCommerce < 2.1.3 - Customer+ Privilege Escalation to Administrator via Insecure Operator…Unknown Customer Switching

CVE-2026-14941Customer Reviews for WooCommerce < 5.116.0 - Subscriber+ Missing Authorization via Multiple Settings AJAX ActionsUnknown Customer Reviews for WooCommerce

CVE-2026-14182Customer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication…Unknown Customer Email Verification for WooCommerce

CVE-2026-13152Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege EscalationUnknown Custom Fields Account Registration For Woocommerce

CVE-2026-12684Customer Reviews for WooCommerce < 5.113.0 - Unauthenticated Arbitrary Media Upload via cr_upload_mediaUnknown Customer Reviews for WooCommerce

CVE-2025-5125Custom Post Carousels with Owl < 1.4.12 - Contributor+ Stored XSSUnknown Custom Post Carousels with Owl

CVE-2025-40729Reflected Cross-Site Scripting (XSS) vulnerability in Customer Support SystemCustomer Support System

CVE-2025-40728SQL injection vulnerability in Customer Support SystemCustomer Support System

CVE-2025-14975Custom Login Page Customizer < 2.5.4 - Unauthenticated Arbitrary Password ResetUnknown Custom Login Page Customizer

CVE-2025-13071Custom Admin Menu <= 1.0.0 - Reflected XSSUnknown Custom Admin Menu

CVE-2024-8983Custom Twitter Feeds < 2.2.3 - Admin+ Stored XSSUnknown Custom Twitter Feeds

CVE-2024-8050Custom Author Base <= 1.1.1 - Settings Update via CSRFUnknown Custom Author Base

CVE-2024-1774Customily Product Personalizer <= 1.23.3 - Unauthenticated Stored Cross-Site ScriptingCustomily Product Personalizer

CVE-2024-12878Custom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSSUnknown Custom Block Builder

CVE-2024-12873Custom Field Manager <= 1.0 - Reflected XSS VulnerabilityUnknown Custom Field Manager

CVE-2023-6391Custom User CSS <= 0.2 - Settings Update via CSRFUnknown Custom User CSS

CVE-2023-46777WordPress Feather Login Page Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)Custom Login Page | Temporary Users | Rebrand Login | Login…

CVE-2023-3328Custom Field For WP Job Manager < 1.2 - Admin+ Stored XSSUnknown Custom Field For WP Job Manager

CVE-2023-2600Custom Base Terms < 1.0.3 - Admin+ Stored XSSUnknown Custom Base Terms

CVE-2023-22696WordPress Affiliate Links Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)Custom4Web Affiliate Links Lite

CVE-2023-2032Custom 404 Pro < 3.8.1 - Multiple SQL InjectionUnknown Custom 404 Pro

CVE-2023-2023Custom 404 Pro < 3.7.3 - Reflected Cross-Site ScriptingUnknown Custom 404 Pro

CVE-2023-1623Custom Post Type UI < 1.13.5 - Debug Info Sending via CSRFUnknown Custom Post Type UI

CVE-2023-1347Customizer Export/Import < 0.9.6 - Admin+ PHP Object InjectionUnknown Customizer Export/Import

CVE-2023-0542Custom Post Type List Shortcode <= 1.4.4 - Contributor+ Stored XSSUnknown Custom Post Type List Shortcode

CVE-2023-0420Custom Post Type and Taxonomy GUI Manager <= 1.1 - Stored XSS via CSRFUnknown Custom Post Type and Taxonomy GUI Manager

CVE-2023-0340Custom Content Shortcode <= 4.0.2 - Contributor+ LFIUnknown Custom Content Shortcode

CVE-2023-0273Custom Content Shortcode <= 4.0.2 - Contributor+ Stored XSSUnknown Custom Content Shortcode

CVE-2023-0080Customer Reviews for WooCommerce < 5.16.0 - Contributor+ LFIUnknown Customer Reviews for WooCommerce

CVE-2023-0079Customer Reviews for WooCommerce < 5.17.0 - Contributor+ Stored XSSUnknown Customer Reviews for WooCommerce

CVE-2023-0043Custom Add User <= 2.0.2 - Reflected Cross-Site ScriptingUnknown Custom Add User

CVE-2022-4831Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 -…Unknown Custom User Profile Fields for User Registration &…

CVE-2022-4442WCK < 2.3.3 - Admin+ Stored XSSUnknown Custom Post Types and Custom Fields creator

CVE-2022-4324Custom Field Template < 2.5.8 - Admin+ PHP Object InjectionUnknown Custom Field Template

CVE-2022-3380Customizer Export/Import < 0.9.5 - Admin+ PHP Objection InjectionUnknown Customizer Export/Import

CVE-2022-1717Custom Share Buttons with Floating Sidebar < 4.2 - Admin+ Stored XSSUnknown Custom Share Buttons with Floating Sidebar

CVE-2022-1217Custom TinyMCE Shortcode Button <= 1.1 - Reflected Cross-Site ScriptingUnknown Custom TinyMCE Shortcode Button

CVE-2022-0345Better Notifications for WP < 1.8.7 - Email Address DisclosureUnknown Customize WordPress Emails and Alerts

CVE-2021-38347Custom Website Data <= 2.2 Reflected Cross-Site ScriptingCustom Website Data

CVE-2021-38321Custom Menu Plugin <= 1.3.3 Reflected Cross-Site ScriptingCustom Menu Plugin

CVE-2021-34654Custom Post Type Relations <= 1.0 Reflected Cross-Site ScriptingCustom Post Type Relations

CVE-2021-24944Custom Dashboard & Login Page < 7.0 - Admin+ Stored Cross-Site ScriptingUnknown Custom Dashboard & Login Page – AGCA

CVE-2021-24826Custom Content Shortcode < 4.0.2 - Authenticated Stored Cross-Site ScriptingUnknown Custom Content Shortcode

CVE-2021-24825Custom Content Shortcode < 4.0.2 - Authenticated Arbitrary File Access / LFIUnknown Custom Content Shortcode

CVE-2021-24824Custom Content Shortcode < 4.0.1 - Unauthorised Arbitrary Post Metadata AccessUnknown Custom Content Shortcode

CVE-2021-24622WP Ticket < 5.10.4 - Admin+ Stored Cross-Site ScriptingUnknown Customer Service Software & Support Ticket System

CVE-2021-24605Custom Post View Generator <= 0.4.6 - Reflected Cross-Site ScriptingUnknown Custom Post View Generator

CVE-2021-24536Custom Login Redirect <= 1.0.0 - CSRF to Stored XSSUnknown Custom Login Redirect

CVE-2019-5960no title heldCustom4Web WP Open Graph

CVE-2015-3173no title heldn/a custom-content-type-manager

CVE-2015-10075Custom-Content-Width custom-content-width.php register_settings cross site scriptingn/a Custom-Content-Width

56 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.