CRUDLab vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20242
3. 20253

Newest CVEs

• CVE-2025-22774

  WordPress CRUDLab Scroll to Top Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

  CRUDLab · CRUDLab Scroll to Top

  High7.1
• CVE-2025-23814

  WordPress CRUDLab Like Box Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

  CRUDLab · CRUDLab Like Box

  High7.1
• CVE-2025-23938

  WordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerability

  CRUDLab · Image Gallery Box by CRUDLab

  High7.5
• CVE-2024-54399

  WordPress CRUDLab Google Plus Button plugin <= 1.0.2 - CSRF to Stored XSS vulnerability

  CRUDLab · CRUDLab Google Plus Button

  High7.1
• CVE-2023-47820

  WordPress WP Like Button plugin <= 1.7.0 - Broken Access Control vulnerability

  CRUDLab · WP Like Button

  Medium4.3
• CVE-2023-32966

  WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS

  CRUDLab · Jazz Popups

  Medium5.4
• CVE-2023-40199

  WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

  CRUDLab · WP Like Button

  Medium5.4
• CVE-2023-32965

  WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)

  CRUDLab · Jazz Popups

  High7.1