WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rs-survey
Published
2025-01-16
Title
RS Survey <= 1.0 - Reflected Cross-Site Scripting
Slug
rs-wp-books-showcase
Published
2025-05-07
Title
RS WP Book Showcase <= 6.7.71 - Contributor+ Stored XSS
Slug
rs-wp-books-showcase
Published
2025-05-16
Title
RS WP Book Showcase < 6.7.71 - Unauthenticated Arbitrary Shortcode Execution
Slug
rselements-lite
Published
2025-04-10
Title
RS Elements Elementor Addon <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rsfirewall
Published
2022-04-13
Title
RSFirewall < 1.1.25 - IP Block Bypass
Slug
rsfirewall
Published
2025-07-11
Title
RSFirewall! < 1.1.43 - Authenticated (Admin+) Arbitrary File Read
Slug
rsfirewall
Published
2026-03-23
Title
RSFirewall! < 1.1.46 - Unauthenticated Stored Cross-Site Scripting
Slug
rss-chimp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
rss-chimp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
rss-control
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
rss-control
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
rss-digest
Published
2025-06-27
Title
RSS Digest <= 1.5 - Cross-Site Request Forgery
Slug
rss-feed-post-generator-echo
Published
2024-09-30
Title
Echo RSS Feed Post Generator < 5.4.7 - Unauthenticated Privilege Escalation
Slug
rss-feed-post-generator-echo
Published
2025-05-16
Title
Echo RSS Feed Post Generator < 5.4.8.2 - Unauthenticated Arbitrary File Upload
Slug
rss-feed-post-generator-echo
Published
2025-06-18
Title
Echo RSS Feed Post Generator < 5.4.9 - Reflected Cross-Site Scripting
Slug
rss-feed-pro
Published
2025-08-14
Title
RSS Feed Pro < 1.1.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
rss-feed-widget
Published
2020-08-10
Title
RSS Feed Widget < 2.8.1 - Authenticated Cross-Site Scripting (XSS)
Slug
rss-feed-widget
Published
2024-04-19
Title
RSS Feed Widget < 2.9.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
rss-feed-widget
Published
2024-10-17
Title
RSS Feed Widget < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode
Slug
rss-feed-widget
Published
2024-10-22
Title
RSS Feed Widget < 3.0.0 - Contributor+ Stored XSS
Slug
rss-feed-widget
Published
2024-10-22
Title
RSS Feed Widget < 3.0.1 - Reflected XSS
Slug
rss-feed-widget
Published
2026-01-07
Title
RSS Feed Widget < 3.0.3 - Missing Authorization
Slug
rss-filter
Published
2025-02-13
Title
RSS Filter <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rss-for-yandex-turbo
Published
2021-04-21
Title
RSS for Yandex Turbo < 1.30 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
rss-for-yandex-turbo
Published
2021-06-15
Title
RSS for Yandex Turbo < 1.31 - Admin+ Stored Cross-Site Scripting