WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rapid-cache
Published
2025-02-17
Title
Rapid Cache <= 1.2.3 - Unauthenticated Cache Poisoning
Slug
rapidexpcart
Published
2023-04-19
Title
RapidExpCart <= 1.0 - Stored XSS via CSRF
Slug
rapidresult
Published
2025-10-23
Title
RapidResult < 1.3 - Authenticated (Contributor+) SQL Injection
Slug
rara-one-click-demo-import
Published
2022-04-21
Title
Rara One Click Demo Import < 1.3.0 - Arbitrary File Upload via CSRF
Slug
rate-limiting-for-contact-form-7
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
rate-my-post
Published
2022-09-14
Title
Rate my Post < 3.3.5 - Cross-Site Request Forgery
Slug
rate-my-post
Published
2022-09-14
Title
Rate my Post < 3.3.5 - Subscriber+ Votes Tampering via Race Condition
Slug
rate-my-post
Published
2022-12-27
Title
Rate my Post – WP Rating System < 3.3.9 - Contributor+ Stored XSS via Shortcode
Slug
rate-my-post
Published
2023-12-27
Title
Rate my Post < 3.4.3 - IP Spoofing
Slug
rate-my-post
Published
2024-04-22
Title
Rate My Post – Star Rating Plugin by FeedbackWP < 3.4.5 - Insecure Direct Object Reference
Slug
rate-my-post
Published
2024-12-12
Title
Rate My Post – Star Rating Plugin by FeedbackWP < 4.2.5 - Unauthenticated Voting On Scheduled Posts
Slug
rate-own-post
Published
2024-10-18
Title
Rate Own Post <= 1.0 - Authenticated (Subscriber+) SQL Injection
Slug
rate-star-review
Published
2024-01-03
Title
Rate Star Review < 1.5.2 - Reflected Cross-Site Scripting
Slug
rate-star-review
Published
2025-01-17
Title
Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings < 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ratemyagent-official
Published
2025-02-27
Title
RateMyAgent Official < 1.5.0 - Cross-Site Request Forgery to API Key Update
Slug
rating-bws
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
rating-bws
Published
2022-05-24
Title
Rating by BestWebSoft < 1.6 - Rating Denial of Service
Slug
rating-bws
Published
2025-04-17
Title
Rating by BestWebSoft <= 1.7 - Authenticated (Subscriber+) PHP Object Injection
Slug
rating-widget
Published
2017-12-12
Title
Rating-Widget: Star Review System < 2.9.0 - Enable Debugging
Slug
rating-widget
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
rating-widget
Published
2023-04-24
Title
Rating Widget < 3.2.1 - Contributor+ Stored XSS
Slug
rating-widget
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ratings-shorttags
Published
2024-08-27
Title
Review Ratings <= 1.6 - Stored XSS via CSRF
Slug
ravpage
Published
2022-04-28
Title
Ravpage < 2.25 - Reflected Cross-Site Scripting
Slug
ravpage
Published
2025-02-19
Title
Ravpage < 2.33 - PHP Object Injection