WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rewp
Published
2024-10-03
Title
Re:WP < 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
rewrite
Published
2025-03-24
Title
Rewrite <= 0.2.1 - Cross-Site Request Forgery
Slug
rezgo
Published
2014-05-28
Title
Rezgo < 2.0.0 - Reflected Cross-Site Scripting
Slug
rezgo
Published
2022-07-26
Title
Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting
Slug
rezgo
Published
2025-01-06
Title
Rezgo Online Booking < 4.17.1 - Unauthenticated Local File Inclusion
Slug
rezgo-online-booking
Published
2014-05-28
Title
Rezgo Online Booking < 1.8.2 - Multiple XSS
Slug
rich-counter
Published
2014-10-18
Title
Rich Counter < 1.2.0 - Cross-Site Scripting (XSS)
Slug
rich-event-timeline
Published
2022-07-11
Title
Event Timeline <= 1.1.6 - Admin+ Stored Cross-Site Scripting
Slug
rich-reviews
Published
2019-09-24
Title
Rich Reviews < 1.8.0 - Unauthenticated Plugin Options Update
Slug
rich-reviews
Published
2021-11-29
Title
Rich Reviews by Starfish < 1.9.6 - Admin+ SQL Injection
Slug
rich-reviews
Published
2022-08-01
Title
Rich Reviews <= 1.9.19 - Arbitrary Reviews Deletion via CSRF
Slug
rich-snippets-vevents
Published
2023-09-28
Title
Events Rich Snippets for Google <= 1.8 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
rich-table-of-content
Published
2023-01-17
Title
Rich Table of Contents < 1.3.9 - Contributor+ Stored XSS
Slug
rich-table-of-content
Published
2025-04-09
Title
Rich Table of Contents < 1.4.1 - Missing Authorization
Slug
rich-web-share-button
Published
2024-11-08
Title
Share Buttons – Social Media <= 1.0.2 - Authenticated (Contributor+) SQL Injection
Slug
rich-web-share-button
Published
2024-12-14
Title
Share Buttons – Social Media <= 1.0.2 - Unauthenticated SQL Injection
Slug
rich-widget
Published
2014-08-01
Title
Rich Widget - File Upload
Slug
richtexteditor
Published
2025-04-02
Title
Rich Text Editor <= 1.0.1 - Missing Authorization
Slug
richtexteditor
Published
2025-03-31
Title
Rich Text Editor <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rife-elementor-extensions
Published
2021-04-13
Title
Rife Elementor Extensions & Templates < 1.1.6 - Contributor+ Stored XSS
Slug
rife-elementor-extensions
Published
2024-07-01
Title
Rife Elementor Extensions & Templates < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline Widget
Slug
rife-elementor-extensions
Published
2025-02-21
Title
Rife Elementor Extensions & Templates < 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline Shortcode
Slug
rig-elements
Published
2024-11-08
Title
Rig Elements For Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
right-click-disable-or-ban
Published
2025-04-16
Title
Right Click Disable OR Ban < 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rightmessage
Published
2025-01-06
Title
RightMessage WP <= 0.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting