WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via 'tag'
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
wp-recipe-maker
Published
2024-02-07
Title
WP Recipe Maker < 9.2.0 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton
Slug
wp-recipe-maker
Published
2024-03-14
Title
WP Recipe Maker < 9.3.0 - Authenticated Stored Cross-Site Scripting via Video Embed
Slug
wp-recipe-maker
Published
2024-05-01
Title
WP Recipe Maker < 9.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode
Slug
wp-recipe-maker
Published
2024-06-18
Title
WP Recipe Maker < 9.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'
Slug
wp-recipe-maker
Published
2024-10-23
Title
WP Recipe Maker < 9.7.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'
Slug
wp-recipe-maker
Published
2025-03-12
Title
WP Recipe Maker < 9.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-recipe-maker
Published
2025-09-26
Title
WP Recipe Maker < 10.1.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
wp-recipe-maker
Published
2025-12-16
Title
WP Recipe Maker < 10.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-recipe-maker
Published
2025-12-11
Title
WP Recipe Maker < 10.2.3 - Insecure Direct Object Reference to Sensitive Information Exposure
Slug
wp-recipe-manager
Published
2026-01-06
Title
WP Recipe Manager <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Skill Level' Input Field
Slug
wp-record
Published
2025-11-21
Title
Construction Light < 1.6.8 - Subscriber+ Arbitrary Plugin Activation
Slug
wp-register-profile-with-shortcode
Published
2023-05-12
Title
WP Register Profile With Shortcode < 3.5.9 - Admin+ Stored XSS
Slug
wp-register-profile-with-shortcode
Published
2024-01-10
Title
WP Register Profile With Shortcode < 3.6.0 - Cross-Site Request Forgery to User Password Reset
Slug
wp-register-profile-with-shortcode
Published
2025-06-19
Title
WP Register Profile With Shortcode <= 3.6.3 - Contributor+ Stored XSS
Slug
wp-register-profile-with-shortcode
Published
2025-07-10
Title
WP Register Profile With Shortcode < 3.6.3 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
wp-registration
Published
2024-10-17
Title
Simple User Registration <= 6.4 - Unauthenticated Account Takeover
Slug
wp-registration
Published
2024-12-02
Title
Simple User Registration < 6.0 - Missing Authorization to User Deletion
Slug
wp-registration
Published
2025-06-25
Title
Simple User Registration < 6.4 - Unauthenticated Privilege Escalation
Slug
wp-registration
Published
2025-09-20
Title
Simple User Registration <= 6.4 - Authenticated (Contributor+) Privilege Escalation
Slug
wp-registration
Published
2025-11-20
Title
Simple User Registration < 6.7 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-related-posts
Published
2011-03-17
Title
WP Related Posts <= 1.0 - Multiple CSRF
Slug
wp-relevant-ads
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-relevant-ads
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update