WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
really-simple-ssl
Published
2026-09-11
Title
Really Simple Security < 9.8.1 - Unauthenticated 2FA Bypass via Email Provider State Demotion
Slug
really-simple-ssl
Published
2026-09-16
Title
Really Simple Security (Free) < 9.8.3 - Unauthenticated Unbounded Option Growth via Spoofed Client IP Header
Slug
really-simple-ssl-pro
Published
2024-11-14
Title
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
Slug
really-simple-ssl-pro
Published
2026-02-23
Title
Really Simple Security Pro < 9.5.4.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
really-simple-ssl-pro-multisite
Published
2024-11-14
Title
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
Slug
really-simple-under-construction
Published
2025-05-07
Title
Really Simple Under Construction Page <= 1.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
realpress
Published
2025-10-10
Title
RealPress < 1.1.0 - Unauthenticated Content Creation/Email Sending via REST
Slug
realpress
Published
2026-01-13
Title
RealPress – Real Estate Plugin < 1.1.1 - Cross-Site Request Forgery
Slug
realpress
Published
2026-08-07
Title
RealPress – Real Estate Plugin < 1.1.5 - Unauthenticated SQL Injection
Slug
realteo
Published
2021-03-31
Title
Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
realteo
Published
2021-03-31
Title
Realteo < 1.2.4 - Arbitrary Property Deletion via IDOR
Slug
realteo
Published
2025-03-13
Title
Realteo - Real Estate Plugin by Purethemes < 1.2.9 - Authentication Bypass via 'do_register_user'
Slug
realty
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
realty
Published
2024-11-04
Title
Realty by BestWebSoft < 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
realty-portal
Published
2025-11-20
Title
Realty Portal <= 0.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
realty-portal-agent
Published
2025-07-22
Title
Realty Portal – Agent <= 0.3.9 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via rp_user_profile() Function
Slug
realty-workstation
Published
2022-05-09
Title
Realty Workstation < 1.0.15 - Agent SQLi
Slug
realty-workstation
Published
2024-10-25
Title
Realty Workstation <= 1.0.45 - Authentication Bypass to Account Takeover
Slug
realty-workstation
Published
2025-01-16
Title
Realty Workstation <= 1.0.45 - Missing Authorization
Slug
realtycandy-idx-broker-extended
Published
2024-11-22
Title
RealtyCandy IDX Broker Extended <= 1.5.1 - Cross-Site Request Forgery
Slug
realtyna-provisioning
Published
2025-01-15
Title
Realtyna Provisioning < 1.2.3 - Reflected Cross-Site Scripting
Slug
rearrange-woocommerce-products
Published
2022-01-05
Title
Rearrange Woocommerce Products < 3.0.8 - Subscriber+ SQL Injection
Slug
rebrand-fluent-forms
Published
2025-01-16
Title
Rebrand Fluent Forms <= 1.0 - Reflected Cross-Site Scripting
Slug
rebuild-permalinks
Published
2025-02-21
Title
Rebuild Permalinks <= 1.6 - Reflected Cross-Site Scripting
Slug
recall-products
Published
2020-08-31
Title
Recall Products <= 0.8 - Authenticated SQL Injection