Crudlab

9 CVEs across 8 Crudlab products. Browse Crudlab vulnerabilities, severities, and proof-of-concept exploits.

Crudlab products with known CVEs

ProductCVEs
Jazz Popups2
Jazz Popups2
Wp Like Button2
Wp Like Button2
Crudlab Google Plus Button1
Crudlab Like Box1
Crudlab Scroll To Top1
Image Gallery Box By Crudlab1
Crudlab CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-22774High7.12025-04-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRUDLab CRUDLab Scroll to Top crudlab-scroll-to-top allow…
CVE-2025-23814High7.12025-03-03Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRUDLab CRUDLab Like Box crudlab-facebook-like-box allows…
CVE-2025-23938High7.52025-01-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CRUDLab Image Gallery Box by CRUDLab i…
CVE-2024-54399High7.12024-12-16Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab CRUDLab Google Plus Button crudlab-google-plus allows Stored XSS.This issue affects CRUDLab Google P…
CVE-2023-47820Medium4.32024-12-09Missing Authorization vulnerability in CRUDLab WP Like Button allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Lik…
CVE-2023-32966Medium5.42023-11-07Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab Jazz Popups leads to Stored XSS.This issue affects Jazz Popups: from n/a through 1.8.7.
CVE-2023-40199Medium5.42023-10-03Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab WP Like Button plugin <= 1.7.0 versions.
CVE-2023-32965High7.12023-07-18Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CRUDLab Jazz Popups plugin <= 1.8.7 versions.
CVE-2019-13344Medium5.32019-07-05An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to change settings. Th…