WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
r-animated-icon
Published
2024-09-30
Title
R Animated Icon Plugin <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
r3w-instafeed
Published
2025-02-04
Title
R3W Instafeed <= 1.0 - Reflected XSS
Slug
ra-qrcode
Published
2024-11-08
Title
ra_qrcode <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rabbit-hole
Published
2025-12-11
Title
Rabbit Hole <= 1.1 - Cross-Site Request Forgery to Settings Reset
Slug
rabbit-loader
Published
2024-01-08
Title
RabbitLoader < 2.19.14 - Missing Authorization via multiple AJAX actions
Slug
rabbit-loader
Published
2024-10-01
Title
RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more < 2.21.1 - Reflected Cross-Site Scripting
Slug
rac
Published
2025-03-04
Title
WooCommerce Recover Abandoned Cart <= 24.3.0 - Unauthenticated PHP Object Injection
Slug
rac
Published
2025-11-09
Title
WooCommerce Recover Abandoned Cart < 24.7.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Slug
racar-clear-cart-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
radio-buttons-for-taxonomies
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
radio-buttons-for-taxonomies
Published
2020-09-16
Title
Radio Buttons for Taxonomies < 2.0.6 - Cross-Site Request Forgery
Slug
radio-forge
Published
2023-07-12
Title
Radio Forge Muses Player with Skins <= 2.5 - Reflected Cross-Site Scripting
Slug
radio-player
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
radio-player
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
radio-player
Published
2024-03-26
Title
Radio Player < 2.0.74 - Missing Authorization via get_players
Slug
radio-player
Published
2024-04-25
Title
Radio Player < 2.0.74 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
radio-player
Published
2024-04-15
Title
Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress < 2.0.74 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Slug
radio-player
Published
2024-04-25
Title
Radio Player < 2.0.74 - Unauthenticated Server-Side Request Forgery
Slug
radio-player
Published
2024-05-14
Title
Radio Player < 2.0.74 - Missing Authorization
Slug
radio-player
Published
2024-08-16
Title
Radio Player < 2.0.74 - Missing Authorization to Settings Update
Slug
radio-player
Published
2024-08-16
Title
Radio Player < 2.0.74 - Missing Authorization to Player Deletion
Slug
radio-player
Published
2024-08-16
Title
Radio Player < 2.0.74 - Missing Authorization to Player Update
Slug
radio-player
Published
2024-09-23
Title
Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress < 2.0.79 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
Slug
radio-player
Published
2024-12-12
Title
Radio Player < 2.0.85 - Unauthenticated Server-Side Request Forgery
Slug
radio-station
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius