WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-recall
Published
2025-06-05
Title
WP-Recall <= 16.26.14 - Cross-Site Request Forgery
Slug
wp-recall
Published
2025-06-19
Title
WP-Recall <= 16.26.14 - Missing Authorization
Slug
wp-recall
Published
2025-06-26
Title
WP-Recall <= 16.26.14 - Reflected Cross-Site Scripting
Slug
wp-recaptcha
Published
2014-08-01
Title
Google reCAPTCHA <= 3.1.3 - Reflected XSS
Slug
wp-recaptcha
Published
2011-03-17
Title
WP Recaptcha < 3.0 - Multiple CSRF
Slug
wp-recaptcha-bp
Published
2025-04-24
Title
WP-reCAPTCHA-bp <= 4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-recaptcha-integration
Published
2024-07-10
Title
ReCaptcha Integration for WordPress < 1.2.8 - Admin+ Stored XSS
Slug
wp-recaptcha-integration
Published
2024-11-01
Title
ReCaptcha Integration for WordPress < 1.2.6 - Reflected Cross-Site Scripting
Slug
wp-recentcomments
Published
2011-09-22
Title
WP Recentcomments < 2.0.7 - XSS
Slug
wp-recipe-maker
Published
2022-12-19
Title
WP Recipe Maker < 8.6.1 - Contributor+ Stored XSS
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via header_tag
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Reflected Cross-Site Scripting via Referer
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Directory Traversal
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via icon_color
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via Recipe Notes
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via 'tag'
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
wp-recipe-maker
Published
2024-02-07
Title
WP Recipe Maker < 9.2.0 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton
Slug
wp-recipe-maker
Published
2024-03-14
Title
WP Recipe Maker < 9.3.0 - Authenticated Stored Cross-Site Scripting via Video Embed
Slug
wp-recipe-maker
Published
2024-05-01
Title
WP Recipe Maker < 9.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode
Slug
wp-recipe-maker
Published
2024-06-18
Title
WP Recipe Maker < 9.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'
Slug
wp-recipe-maker
Published
2024-10-23
Title
WP Recipe Maker < 9.7.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'
Slug
wp-recipe-maker
Published
2025-03-12
Title
WP Recipe Maker < 9.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-recipe-maker
Published
2025-09-26
Title
WP Recipe Maker < 10.1.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
wp-recipe-maker
Published
2025-12-16
Title
WP Recipe Maker < 10.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode