WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-responsive-video-gallery-with-lightbox
Published
2023-05-15
Title
Video Carousel Slider with Lightbox < 1.0.23 - Reflected XSS
Slug
wp-responsive-video-gallery-with-lightbox
Published
2023-11-02
Title
video carousel slider with lightbox 1.0 - Cross-Site Request Forgery
Slug
wp-responsive-video-gallery-with-lightbox
Published
2024-09-10
Title
video carousel slider with lightbox < 1.0.7 - Authenticated (Admin+) SQL Injection
Slug
wp-rest-api-authentication
Published
2022-11-09
Title
REST API Authentication < 2.4.1 - Settings Update via CSRF
Slug
wp-rest-api-authentication
Published
2025-04-16
Title
WordPress REST API Authentication < 3.6.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
wp-rest-cache
Published
2025-07-28
Title
WP REST Cache < 2025.1.1 - Unauthenticated Local File Inclusion
Slug
wp-rest-filter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-rest-filter
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-rest-headless
Published
2025-10-14
Title
WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass
Slug
wp-rest-user
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-rest-user
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-restaurant-listings
Published
2025-10-21
Title
WP Restaurant Listings <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-restful
Published
2014-06-12
Title
WP Restful <= 0.1 - Multiple XSS
Slug
wp-retina-2x
Published
2018-01-30
Title
WP Retina 2x < 5.2.3 - Cross-Site Scripting (XSS)
Slug
wp-retina-2x
Published
2023-11-28
Title
WP Retina 2x < 6.4.6 - Sensitive Information Exposure
Slug
wp-review
Published
2025-05-09
Title
WordPress Review Plugin: The Ultimate Solution for Building a Review Website <= 5.3.5 - Authenticated (Contributor+) Local File Inclusion via Post Custom Fields
Slug
wp-reviews-plugin-for-google
Published
2023-01-05
Title
Widgets for Google Reviews < 9.8 - Contributor+ Stored XSS
Slug
wp-reviews-plugin-for-google
Published
2023-10-16
Title
Widgets for Google Reviews < 10.9.1 - Arbitrary Settings Update via CSRF
Slug
wp-reviews-plugin-for-google
Published
2023-11-22
Title
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Slug
wp-reviews-plugin-for-google
Published
2025-12-05
Title
Widgets for Google Reviews < 13.2.5 - Unauthenticated Stored XSS via Google Reviews
Slug
wp-reviews-plugin-for-google
Published
2025-12-10
Title
Widgets for Google Reviews < 13.2.2 - Contributor+ Stored XSS via trustindex Shortcode
Slug
wp-revive-adserver
Published
2024-12-11
Title
WP-Revive Adserver <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-revive-adserver
Published
2025-01-16
Title
WP-Revive Adserver <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-ride-booking
Published
2025-03-24
Title
WP Ride Booking <= 2.4 - Cross-Site Request Forgery
Slug
wp-roadmap
Published
2023-11-23
Title
WP Roadmap < 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting