WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
responsive-posts-carousel-pro
Published
2025-12-23
Title
Responsive Posts Carousel Pro < 15.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
responsive-posts-carousel-pro
Published
2025-12-25
Title
Responsive Posts Carousel Pro <= 15.1 - Authenticated (Contributor+) Local File Inclusion
Slug
responsive-posts-carousel-pro
Published
2026-02-25
Title
Responsive Posts Carousel WordPress Plugin <= 15.1 - Missing Authorization
Slug
responsive-progress-bar
Published
2025-10-21
Title
Responsive Progress Bar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
responsive-sidebar
Published
2025-07-28
Title
Responsive Sidebar <= 1.2.2 - Unauthenticated Local File Inclusion
Slug
responsive-tabs
Published
2022-04-11
Title
Responsive Tabs < 4.0.6 - Author+ Stored Cross-Site Scripting
Slug
responsive-tabs
Published
2023-10-11
Title
Responsive Tabs < 4.0.6 - Authenticated (Contributor+) Content Injection
Slug
responsive-tabs
Published
2024-03-25
Title
Responsive Tabs < 4.0.7 - Contributor+ Stored XSS
Slug
responsive-tabs
Published
2024-03-25
Title
Responsive Tabs < 4.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
responsive-tabs
Published
2024-03-25
Title
Carousel Slider < 2.2.7 - Editor+ Stored Cross-Site Scripting
Slug
responsive-tabs
Published
2024-07-09
Title
Responsive Tabs < 4.0.11 - Contributor+ Stored XSS
Slug
responsive-tabs-for-wpbakery
Published
2023-05-22
Title
Responsive Tabs For WPBakery Page Builder <= 1.1 - Contributor+ Stored XSS
Slug
responsive-vector-maps
Published
2022-01-06
Title
RVM - Responsive Vector Maps < 6.4.2 - Subscriber+ Arbitrary File Read
Slug
responsive-video
Published
2024-08-20
Title
Responsive Video <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
responsive-video-embed
Published
2024-05-30
Title
Responsive video embed < 0.5.1 - Contributor+ Stored XSS
Slug
responsive-youtube-videos
Published
2024-12-03
Title
Responsive Videos <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
responsivevoice-text-to-speech
Published
2023-01-11
Title
ResponsiveVoice Text To Speech < 1.7.7 - Contributor+ Stored XSS
Slug
responsivity
Published
2025-01-16
Title
Responsivity <= 0.0.6 - Reflected Cross-Site Scripting
Slug
rest-api-fns
Published
2024-10-17
Title
WP REST API FNS <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
rest-api-fns
Published
2024-10-17
Title
WP REST API FNS <= 1.0.0 - Privilege Escalation
Slug
rest-api-to-miniprogram
Published
2023-04-25
Title
REST API TO MiniProgram <= 4.6.9 - Subscriber+ Attachment Deletion
Slug
rest-api-to-miniprogram
Published
2024-09-24
Title
REST API TO MiniProgram <= 4.7.7 - Unauthenticated SQL Injection
Slug
rest-api-to-miniprogram
Published
2024-09-24
Title
REST API TO MiniProgram < 4.7.6 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover
Slug
rest-api-to-miniprogram
Published
2025-03-11
Title
REST API TO MiniProgram <= 4.7.1 - Cross-Site Request Forgery
Slug
rest-api-to-miniprogram
Published
2026-03-20
Title
REST API TO MiniProgram <= 5.1.2 - Subscriber+ Insecure Direct Object Reference via 'userid'