WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
redirects
Published
2024-02-27
Title
Redirects <= 1.2.1 - Missing Authorization via save
Slug
redux-converter
Published
2025-01-16
Title
Redux Converter <= 1.1.3.1 - Reflected Cross-Site Scripting
Slug
redux-framework
Published
2020-12-15
Title
Redux Framework < 4.1.21 - CSRF Nonce Validation Bypass
Slug
redux-framework
Published
2020-12-15
Title
Redux Framework 4.1.22 - 4.1.23 - CSRF Nonce Validation Bypass
Slug
redux-framework
Published
2021-09-01
Title
Gutenberg Template Library & Redux Framework < 4.2.13 - Contributor+ Arbitrary Plugin Installation and Post Deletion
Slug
redux-framework
Published
2021-09-01
Title
Gutenberg Template Library & Redux Framework < 4.2.13 - Unauthenticated Sensitive Information Disclosure
Slug
redux-framework
Published
2024-07-22
Title
Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting
Slug
redux-framework
Published
2025-12-12
Title
Redux Framework < 4.5.9 - Contributor+ Stored XSS via data Parameter
Slug
reepay-checkout-gateway
Published
2025-09-03
Title
Frisbii Pay < 1.8.3 - Missing Authorization
Slug
refer-a-friend-widget-for-wp
Published
2021-09-09
Title
WordPress InviteBox Plugin <= 1.4.1 - Reflected Cross-Site Scripting
Slug
referral-link-tracker
Published
2025-09-28
Title
Referral Link Tracker <= 1.1.4 - Missing Authorization
Slug
referrer-detector
Published
2017-04-27
Title
Referrer Detector <= 4.2.1.0 - Unauthenticated PHP Object Injection
Slug
referrer-detector
Published
2024-11-13
Title
Referrer Detector <= 4.2.1.0 - Unauthenticated PHP Object Injection
Slug
reflector-plugins
Published
2026-02-03
Title
Reflector < 1.2.3 - Reflected Cross-Site Scripting
Slug
reflex-gallery
Published
2014-08-01
Title
ReFlex Gallery 1.4.2 - Unspecified XSS
Slug
reflex-gallery
Published
2014-08-01
Title
ReFlex Gallery 1.3 - Shell Upload
Slug
reflex-gallery
Published
2015-03-16
Title
Reflex Gallery <= 3.1.3 - Arbitrary File Upload
Slug
reflex-gallery
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
reformer-elementor
Published
2025-06-11
Title
Reformer for Elementor <= 1.0.5 - Unauthenticated Arbitrary File Upload
Slug
reformer-elementor
Published
2025-12-11
Title
Reformer for Elementor <= 1.0.6 - Missing Authorization
Slug
reftagger-shortcode
Published
2024-10-31
Title
Reftagger Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
refund-request-for-woocommerce
Published
2025-11-24
Title
Refund Request for WooCommerce <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Refund Status Update
Slug
regallery
Published
2026-01-07
Title
Re Gallery – Responsive Photo Gallery <= 1.17.19 - Missing Authorization
Slug
regenerate-post-permalinks
Published
2024-04-19
Title
Regenerate post permalink <= 1.0.3 - Cross-Site Request Forgery
Slug
register-ip-multisite
Published
2019-05-14
Title
Register IPs <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting (XSS)