WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
really-simple-ssl
Published
2024-11-14
Title
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
Slug
really-simple-ssl
Published
2025-01-24
Title
Really Simple SSL < 9.2.0 - Cross-Site Request Forgery
Slug
really-simple-ssl
Published
2026-03-15
Title
Really Simple Security < 9.5.8 - Missing Authorization
Slug
really-simple-ssl
Published
2026-05-12
Title
Really Simple Security < 9.5.10.1 - Two-Factor OTP Bypass
Slug
really-simple-ssl
Published
2026-06-03
Title
Really Simple Security < 9.5.10 - Missing Authorization
Slug
really-simple-ssl
Published
2026-06-03
Title
Really Simple Security < 9.5.10.1 - Missing Authorization
Slug
really-simple-ssl
Published
2026-09-02
Title
Really Simple Security < 9.8.1 - Unauthenticated DoS
Slug
really-simple-ssl
Published
2026-09-02
Title
Really Simple Security < 9.8.1 - Unauthenticated 2FA Bypass
Slug
really-simple-ssl
Published
2026-08-28
Title
Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin
Slug
really-simple-ssl-pro
Published
2024-11-14
Title
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
Slug
really-simple-ssl-pro
Published
2026-02-23
Title
Really Simple Security Pro < 9.5.4.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
really-simple-ssl-pro-multisite
Published
2024-11-14
Title
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
Slug
really-simple-under-construction
Published
2025-05-07
Title
Really Simple Under Construction Page <= 1.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
realpress
Published
2025-10-10
Title
RealPress < 1.1.0 - Unauthenticated Content Creation/Email Sending via REST
Slug
realpress
Published
2026-01-13
Title
RealPress – Real Estate Plugin < 1.1.1 - Cross-Site Request Forgery
Slug
realpress
Published
2026-08-07
Title
RealPress – Real Estate Plugin <= 1.1.2 - Unauthenticated SQL Injection
Slug
realteo
Published
2021-03-31
Title
Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
realteo
Published
2021-03-31
Title
Realteo < 1.2.4 - Arbitrary Property Deletion via IDOR
Slug
realteo
Published
2025-03-13
Title
Realteo - Real Estate Plugin by Purethemes < 1.2.9 - Authentication Bypass via 'do_register_user'
Slug
realty
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
realty
Published
2024-11-04
Title
Realty by BestWebSoft < 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
realty-portal
Published
2025-11-20
Title
Realty Portal <= 0.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
realty-portal-agent
Published
2025-07-22
Title
Realty Portal – Agent <= 0.3.9 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via rp_user_profile() Function
Slug
realty-workstation
Published
2022-05-09
Title
Realty Workstation < 1.0.15 - Agent SQLi
Slug
realty-workstation
Published
2024-10-25
Title
Realty Workstation <= 1.0.45 - Authentication Bypass to Account Takeover