CRUDLab vulnerabilities
8 published CVEs name CRUDLab among the affected products.
- 8Published CVEs8 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-22774
WordPress CRUDLab Scroll to Top Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
CRUDLab · CRUDLab Scroll to Top
High7.1 - CVE-2025-23814
WordPress CRUDLab Like Box Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerability
CRUDLab · CRUDLab Like Box
High7.1 - CVE-2025-23938
WordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerability
CRUDLab · Image Gallery Box by CRUDLab
High7.5 - CVE-2024-54399
WordPress CRUDLab Google Plus Button plugin <= 1.0.2 - CSRF to Stored XSS vulnerability
CRUDLab · CRUDLab Google Plus Button
High7.1 - CVE-2023-47820
WordPress WP Like Button plugin <= 1.7.0 - Broken Access Control vulnerability
CRUDLab · WP Like Button
Medium4.3 - CVE-2023-32966
WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS
CRUDLab · Jazz Popups
Medium5.4 - CVE-2023-40199
WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)
CRUDLab · WP Like Button
Medium5.4 - CVE-2023-32965
WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)
CRUDLab · Jazz Popups
High7.1