WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
reciply
Published
2023-10-16
Title
Recip.ly < 1.1.8 - Unauthenticated File Upload
Slug
reciply
Published
2025-01-16
Title
Recip.ly Plugin <= 1.1.8 - Reflected Cross-Site Scripting
Slug
recommend-a-friend
Published
2014-08-01
Title
Recommend a friend 2.0.2 - inc/raf_form.php current_url Parameter Reflected XSS
Slug
recover-wc-abandoned-cart
Published
2025-04-22
Title
Recover abandoned cart for WooCommerce < 2.3 - Cross-Site Request Forgery
Slug
recover-wc-abandoned-cart
Published
2025-06-03
Title
Recover abandoned cart for WooCommerce <= 2.5 - Unauthenticated SQL Injection
Slug
recras
Published
2026-01-06
Title
Recras WordPress plugin < 6.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'recrasname' Shortcode Attribute
Slug
recurring-bookings-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
recurring-bookings-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
recurring-donation
Published
2024-06-05
Title
Recurring PayPal Donations < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
recurring-donation
Published
2025-08-22
Title
Recurring PayPal Donations < 1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
recurwp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
recurwp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
redi-restaurant-reservation
Published
2021-05-09
Title
ReDi Restaurant Reservations < 21.0426 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
redi-restaurant-reservation
Published
2024-03-25
Title
ReDi Restaurant Reservation < 24.0303 - Reflected Cross-Site Scripting
Slug
redi-restaurant-reservation
Published
2024-04-05
Title
ReDi Restaurant Reservation < 24.0303 - Cross-Site Request Forgery via redi_restaurant_admin_options_page()
Slug
redi-restaurant-reservation
Published
2024-04-10
Title
ReDi Restaurant Reservation < 24.0303 - Cross-Site Request Forgery via redi_restaurant_admin_options_page()
Slug
redi-restaurant-reservation
Published
2024-07-11
Title
ReDi Restaurant Reservation < 24.0712 - Missing Authorization
Slug
redi-restaurant-reservation
Published
2024-10-16
Title
ReDi Restaurant Reservation < 24.1015 - Reflected Cross-Site Scripting
Slug
redi-restaurant-reservation
Published
2025-05-22
Title
ReDi Restaurant Reservation < 25.0513 - Reflected Cross-Site Scripting
Slug
redirect-404-error-page-to-homepage-or-custom-page
Published
2021-10-06
Title
Redirect 404 Error Page to Homepage or Custom Page with Logs < 1.7.9 - Log Deletion via CSRF
Slug
redirect-404-error-page-to-homepage-or-custom-page
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
redirect-404-error-page-to-homepage-or-custom-page
Published
2023-11-07
Title
Redirect 404 Error Page to Homepage or Custom Page with Logs < 1.8.8 - Authenticated (Administrator+) SQL Injection
Slug
redirect-404-to-parent
Published
2021-04-23
Title
Redirect 404 to Parent < 1.3.1 - Reflected Cross-Site Scripting (XSS)
Slug
redirect-after-login
Published
2023-04-21
Title
Redirect After Login <= 0.1.9 - Admin+ Stored XSS
Slug
redirect-by-cookie
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting