WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-revive-adserver
Published
2024-12-11
Title
WP-Revive Adserver <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-revive-adserver
Published
2025-01-16
Title
WP-Revive Adserver <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-ride-booking
Published
2025-03-24
Title
WP Ride Booking <= 2.4 - Cross-Site Request Forgery
Slug
wp-roadmap
Published
2023-11-23
Title
WP Roadmap < 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-roadmap
Published
2025-06-19
Title
WP Roadmap < 2.2.0 - Authenticated (Contributor+) SQL Injection
Slug
wp-rocket
Published
2017-06-22
Title
WP Rocket <= 2.10.3 - Local File Inclusion (LFI)
Slug
wp-rollback
Published
2015-06-28
Title
WP Rollback <= 1.2.2 - Cross-Site Scripting (XSS) & CSRF
Slug
wp-royal-gallery
Published
2014-08-01
Title
wp-royal-gallery - Arbitrary File Upload
Slug
wp-royal-gallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-rss-aggregator
Published
2021-11-01
Title
WP RSS Aggregator < 4.19.2 - Admin+ Stored Cross-Site Scripting
Slug
wp-rss-aggregator
Published
2021-11-29
Title
WP RSS Aggregator < 4.19.3 - Subscriber+ Stored Cross-Site Scripting
Slug
wp-rss-aggregator
Published
2022-01-26
Title
WP RSS Aggregator < 4.20 - Reflected Cross-Site Scripting (XSS)
Slug
wp-rss-aggregator
Published
2024-01-25
Title
WP RSS Aggregator < 4.23.5 - Admin+ Stored XSS
Slug
wp-rss-aggregator
Published
2024-02-06
Title
WP RSS Aggregator < 4.23.6 - Authenticated (Admin+) Server-Side Request Forgery via RSS Feed Source
Slug
wp-rss-aggregator
Published
2024-05-14
Title
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging < 4.23.9 - Reflected Cross-Site Scripting
Slug
wp-rss-aggregator
Published
2024-07-15
Title
WP RSS Aggregator < 4.23.12 - Missing Authorization to Authenticated (Subscriber+) Feed State Update
Slug
wp-rss-aggregator
Published
2024-10-22
Title
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging < 4.23.13 - Missing Authorization
Slug
wp-rss-aggregator
Published
2026-01-15
Title
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging < 5.0.11 - Reflected Cross-Site Scripting via className
Slug
wp-rss-aggregator
Published
2026-01-22
Title
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging < 5.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregator Shortcode
Slug
wp-rss-aggregator
Published
2026-02-16
Title
RSS Aggregator < 5.0.11 - Reflected Cross-Site Scripting via 'template' Parameter
Slug
wp-rss-aggregator
Published
2026-03-06
Title
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging < 5.0.12 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage
Slug
wp-rss-by-publishers
Published
2022-12-09
Title
WP RSS By Publishers <= 0.1 - Admin+ SQLi
Slug
wp-rss-by-publishers
Published
2022-12-09
Title
WP RSS By Publishers <= 0.1 - Admin+ SQLi
Slug
wp-rss-by-publishers
Published
2022-12-09
Title
WP RSS By Publishers <= 0.1 - Admin+ SQLi
Slug
wp-rss-images
Published
2023-07-04
Title
WP RSS Images <= 1.1 - Cross-Site Request Forgery