WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
responsivevoice-text-to-speech
Published
2023-01-11
Title
ResponsiveVoice Text To Speech < 1.7.7 - Contributor+ Stored XSS
Slug
responsivity
Published
2025-01-16
Title
Responsivity <= 0.0.6 - Reflected Cross-Site Scripting
Slug
rest-api-fns
Published
2024-10-17
Title
WP REST API FNS <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
rest-api-fns
Published
2024-10-17
Title
WP REST API FNS <= 1.0.0 - Privilege Escalation
Slug
rest-api-to-miniprogram
Published
2023-04-25
Title
REST API TO MiniProgram <= 4.6.9 - Subscriber+ Attachment Deletion
Slug
rest-api-to-miniprogram
Published
2024-09-24
Title
REST API TO MiniProgram <= 4.7.7 - Unauthenticated SQL Injection
Slug
rest-api-to-miniprogram
Published
2024-09-24
Title
REST API TO MiniProgram < 4.7.6 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover
Slug
rest-api-to-miniprogram
Published
2025-03-11
Title
REST API TO MiniProgram <= 4.7.1 - Cross-Site Request Forgery
Slug
rest-api-to-miniprogram
Published
2026-03-20
Title
REST API TO MiniProgram <= 5.1.2 - Subscriber+ Insecure Direct Object Reference via 'userid'
Slug
rest-routes
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
rest-routes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
restaurant-cafe-addon-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
restaurant-cafe-addon-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
restaurant-cafe-addon-for-elementor
Published
2023-11-16
Title
Restaurant & Cafe Addon for Elementor < 1.5.4 - Missing Authorization via multiple AJAX functions
Slug
restaurant-cafe-addon-for-elementor
Published
2023-11-14
Title
Restaurant & Cafe Addon for Elementor < 1.5.3 - Missing Authorization
Slug
restaurant-cafe-addon-for-elementor
Published
2023-11-14
Title
Restaurant & Cafe Addon for Elementor < 1.5.3 - Cross-Site Request Forgery
Slug
restaurant-cafe-addon-for-elementor
Published
2024-09-24
Title
Restaurant & Cafe Addon for Elementor < 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
restaurant-cafe-addon-for-elementor
Published
2024-10-31
Title
Restaurant & Cafe Addon for Elementor < 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
restaurant-cafe-addon-for-elementor
Published
2024-11-27
Title
Restaurant & Cafe Addon for Elementor < 1.6.0 - Authenticated (Contributor+) Post Disclosure
Slug
restaurant-cafe-addon-for-elementor
Published
2024-12-11
Title
Restaurant & Cafe Addon for Elementor < 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
restaurant-cafe-addon-for-elementor
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
restaurant-pickup-delivery-dine-in
Published
2023-04-12
Title
Pickup | Delivery | Dine-in date time <= 1.0.9 - Admin+ Stored XSS
Slug
restaurant-reservations
Published
2021-12-21
Title
Five Star Restaurant Reservations < 2.4.8 - Subscriber+ Stored Cross-Site Scripting
Slug
restaurant-reservations
Published
2022-02-05
Title
Five Star Restaurant Reservations < 2.4.12 - Unauthenticated Arbitrary Payment Status Update to Stored XSS
Slug
restaurant-reservations
Published
2023-06-23
Title
Five Star Restaurant Reservations < 2.6.8 - Reflected Cross-Site Scripting