WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rating-bws
Published
2022-05-24
Title
Rating by BestWebSoft < 1.6 - Rating Denial of Service
Slug
rating-bws
Published
2025-04-17
Title
Rating by BestWebSoft <= 1.7 - Authenticated (Subscriber+) PHP Object Injection
Slug
rating-widget
Published
2017-12-12
Title
Rating-Widget: Star Review System < 2.9.0 - Enable Debugging
Slug
rating-widget
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
rating-widget
Published
2023-04-24
Title
Rating Widget < 3.2.1 - Contributor+ Stored XSS
Slug
rating-widget
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ratings-shorttags
Published
2024-08-27
Title
Review Ratings <= 1.6 - Stored XSS via CSRF
Slug
rave-woocommerce-payment-gateway
Published
2026-08-18
Title
Flutterwave WooCommerce < 3.3.2 - Missing Authorization
Slug
ravelry-designs-widget
Published
2026-02-13
Title
Ravelry Designs Widget <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sb_ravelry_designs' Shortcode 'layout' Attribute
Slug
ravpage
Published
2022-04-28
Title
Ravpage < 2.25 - Reflected Cross-Site Scripting
Slug
ravpage
Published
2025-02-19
Title
Ravpage < 2.33 - PHP Object Injection
Slug
ravpage
Published
2026-01-20
Title
Ravpage < 2.41 - Reflected Cross-Site Scripting
Slug
raychat
Published
2025-06-05
Title
Raychat < 2.2.0 - Missing Authorization
Slug
raychat
Published
2025-10-19
Title
Raychat <= 2.2.1 - Cross-Site Request Forgery
Slug
raygun4wp
Published
2017-02-07
Title
Raygun4WP <= 1.8.0 - Unauthenticated Reflected XSS
Slug
raygun4wp
Published
2017-10-05
Title
Raygun4WP < 1.8.3 - XSS
Slug
rays-grid
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
rays-grid
Published
2025-02-24
Title
RAYS Grid <= 1.3.1 - Cross-Site Request Forgery
Slug
razorpay-payment-button
Published
2024-11-12
Title
Razorpay Payment Button < 2.4.7 - Reflected Cross-Site Scripting
Slug
razorpay-payment-button
Published
2026-09-23
Title
Razorpay Payment Button Plugin < 2.5.0 - Unauthenticated Stored Cross-Site Scripting
Slug
razorpay-payment-button-elementor
Published
2024-11-12
Title
Razorpay Payment Button for Elementor < 1.2.6 - Reflected Cross-Site Scripting
Slug
razorpay-payment-button-elementor
Published
2026-10-13
Title
Razorpay Payment Button Elementor Plugin <= 1.2.8 - Unauthenticated Stored Cross-Site Scripting
Slug
razorpay-subscription-button-elementor
Published
2025-03-04
Title
Razorpay Subscription Button Elementor Plugin < 1.0.4 - Reflected Cross-Site Scripting via add_query_arg and remove_query_arg Functions
Slug
rb-internal-links
Published
2022-05-23
Title
RB Internal Links <= 2.0.16 - Stored Cross-Site Scripting via CSRF
Slug
rbxgallery
Published
2014-08-01
Title
RBX Gallery 2.1 - uploader.php File Upload PHP Code Execution