WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
recaptcha-jetpack
Published
2024-04-19
Title
reCAPTCHA Jetpack <= 0.2.2 - Stored XSS via CSRF
Slug
recaptcha-jetpack
Published
2025-04-09
Title
reCAPTCHA Jetpack <= 0.2.2 - Cross-Site Request Forgery
Slug
recaptcha-wp
Published
2025-09-26
Title
Recaptcha – wp <= 0.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
recapture-for-woocommerce
Published
2025-03-03
Title
Recapture for WooCommerce < 1.0.44 - Cross-Site Request Forgery to Settings Update
Slug
recencio-book-reviews
Published
2024-04-25
Title
Recencio Book Reviews <= 1.66.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
recent-backups
Published
2015-08-02
Title
recent-backups <= 0.7 - Remote File Download
Slug
recent-posts-from-each-category
Published
2025-12-31
Title
Recent Posts From Each Category <= 1.4 - Cross-Site Request Forgery
Slug
recent-posts-slider
Published
2023-06-16
Title
Recent Posts Slider <= 1.1 - Cross-Site Request Forgery
Slug
recent-posts-slider
Published
2023-06-13
Title
Recent Posts Slider <= 1.1 - Unauthenticated Stored XSS
Slug
recent-posts-slider-responsive
Published
2025-06-05
Title
Recent Posts Slider Responsive <= 1.0.1 - Cross-Site Request Forgery
Slug
recent-posts-widget-extended
Published
2015-10-19
Title
Recent Posts Widget Extended <= 0.9.9.3 - Authenticated XSS (multisite)
Slug
recent-posts-widget-extended
Published
2025-09-05
Title
Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode
Slug
recently
Published
2021-06-07
Title
Recently < 3.0.5 - Authenticated Code Injection
Slug
recently
Published
2021-06-07
Title
Recently < 3.0.5 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
recently-purchased-products-for-woo
Published
2025-03-04
Title
Recently Purchased Products For Woo < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via view Parameter
Slug
recently-viewed-and-most-viewed-products
Published
2023-11-07
Title
Recently viewed and most viewed products <= 1.1.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Slug
recently-viewed-most-viewed-and-sold-products-for-woocommerce
Published
2024-10-14
Title
Recently <= 1.1 - Unauthenticated PHP Object Injection
Slug
recipe-card-blocks-by-wpzoom
Published
2021-08-24
Title
Recipe Card Blocks < 2.8.1 - Reflected Cross-Site Scripting
Slug
recipe-card-blocks-by-wpzoom
Published
2021-08-24
Title
Recipe Card Blocks < 2.8.3 - Contributor+ Stored Cross-Site Scripting
Slug
recipe-card-blocks-by-wpzoom
Published
2024-08-16
Title
Recipe Card Blocks for Gutenberg & Elementor < 3.3.2 - Missing Authorization
Slug
recipe-card-blocks-by-wpzoom
Published
2025-02-23
Title
Recipe Card Blocks for Gutenberg & Elementor < 3.4.4 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Disclosure
Slug
recipe-card-blocks-by-wpzoom
Published
2025-09-11
Title
Recipe Card Blocks for Gutenberg & Elementor < 3.4.9 - Incorrect Authorization
Slug
recipe-card-blocks-by-wpzoom
Published
2026-01-05
Title
Recipe Card Blocks < 3.4.13 - Contributor+ SQLi
Slug
recipepress-reloaded
Published
2024-11-20
Title
RecipePress Reloaded <= 2.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
recipes-writer
Published
2016-09-02
Title
Recipes Writer <= 1.0.4 - XSS