WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
recipe-card-blocks-by-wpzoom
Published
2025-02-23
Title
Recipe Card Blocks for Gutenberg & Elementor < 3.4.4 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Disclosure
Slug
recipe-card-blocks-by-wpzoom
Published
2025-09-11
Title
Recipe Card Blocks for Gutenberg & Elementor < 3.4.9 - Incorrect Authorization
Slug
recipe-card-blocks-by-wpzoom
Published
2026-01-05
Title
Recipe Card Blocks < 3.4.13 - Contributor+ SQLi
Slug
recipe-card-blocks-by-wpzoom
Published
2026-06-07
Title
Recipe Card Blocks Lite < 3.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via 'summary' and 'notes'
Slug
recipe-card-blocks-by-wpzoom
Published
2026-08-18
Title
Recipe Card Blocks Lite < 3.4.19 - Unauthenticated Stored Cross-Site Scripting
Slug
recipe-card-blocks-by-wpzoom
Published
2026-10-26
Title
Recipe Card Blocks 3.5.0 - 3.6.3 - Contributor+ SQLi via 'recipeId' Attribute
Slug
recipe-card-blocks-by-wpzoom
Published
2026-10-26
Title
Recipe Card Blocks Lite 2.6.4 - 3.6.3 - Unauthenticated Unpublished Post Content Disclosure
Slug
recipepress-reloaded
Published
2024-11-20
Title
RecipePress Reloaded <= 2.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
recipes-writer
Published
2016-09-02
Title
Recipes Writer <= 1.0.4 - XSS
Slug
reciply
Published
2023-10-16
Title
Recip.ly < 1.1.8 - Unauthenticated File Upload
Slug
reciply
Published
2025-01-16
Title
Recip.ly Plugin <= 1.1.8 - Reflected Cross-Site Scripting
Slug
recommend-a-friend
Published
2014-08-01
Title
Recommend a friend 2.0.2 - inc/raf_form.php current_url Parameter Reflected XSS
Slug
recooty
Published
2026-01-27
Title
Recooty <= 1.0.6 - Cross-Site Request Forgery to Settings Update
Slug
record-of-consent-extension-for-complianz
Published
2026-10-13
Title
Record of Consent Extension for Complianz < 2.6 - Unauthenticated Stored Cross-Site Scripting via 'uid' Parameter
Slug
recordbrowser
Published
2026-10-09
Title
RecordBrowser <= 1.1.7 - Unauthenticated SQLi via 'recordid' Parameter
Slug
recover-wc-abandoned-cart
Published
2025-04-22
Title
Recover abandoned cart for WooCommerce < 2.3 - Cross-Site Request Forgery
Slug
recover-wc-abandoned-cart
Published
2025-06-03
Title
Recover abandoned cart for WooCommerce <= 2.5 - Unauthenticated SQL Injection
Slug
recoverexit-for-woocommerce
Published
2026-06-08
Title
Recover Exit For WooCommerce <= 1.0.3 - Unauthenticated Local File Inclusion via 'tpf' Parameter
Slug
recras
Published
2026-01-06
Title
Recras WordPress plugin < 6.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'recrasname' Shortcode Attribute
Slug
recurio
Published
2026-07-07
Title
Recurio < 1.1.4 - Authenticated (Shop Manager+) SQL Injection via 'data' Parameter
Slug
recurring-bookings-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
recurring-bookings-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
recurring-donation
Published
2024-06-05
Title
Recurring PayPal Donations < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
recurring-donation
Published
2025-08-22
Title
Recurring PayPal Donations < 1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
recurwp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius