WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
redirect-to-welcome-or-landing-page
Published
2025-04-17
Title
Redirect wordpress to welcome or landing page <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
redirection
Published
2014-08-01
Title
Redirection 2.3.3 - view/admin/item.php URL Handling Reflected XSS
Slug
redirection
Published
2014-08-01
Title
Redirection - view/admin/log_item.php Non-existent Posts Referer HTTP Header XSS
Slug
redirection
Published
2014-08-01
Title
Redirection - wp-admin/tools.php id Parameter XSS
Slug
redirection
Published
2018-06-12
Title
Redirection < 2.8 - Authenticated Local File Inclusion
Slug
redirection
Published
2018-12-05
Title
Redirection <= 3.6.2 - Cross-Site Request Forgery (CSRF)
Slug
redirection
Published
2012-05-04
Title
Redirection < 2.2.12 - XSS
Slug
redirection-page
Published
2015-02-09
Title
Redirection Page <= 1.2 - CSRF/XSS
Slug
redirection-plus
Published
2025-01-16
Title
REDIRECTION PLUS <= 2.0.0 - Reflected Cross-Site Scripting
Slug
redirects
Published
2023-12-06
Title
Redirects <= 1.2.1 - Missing Authorization
Slug
redirects
Published
2024-02-27
Title
Redirects <= 1.2.1 - Missing Authorization via save
Slug
redux-converter
Published
2025-01-16
Title
Redux Converter <= 1.1.3.1 - Reflected Cross-Site Scripting
Slug
redux-framework
Published
2020-12-15
Title
Redux Framework < 4.1.21 - CSRF Nonce Validation Bypass
Slug
redux-framework
Published
2020-12-15
Title
Redux Framework 4.1.22 - 4.1.23 - CSRF Nonce Validation Bypass
Slug
redux-framework
Published
2021-09-01
Title
Gutenberg Template Library & Redux Framework < 4.2.13 - Contributor+ Arbitrary Plugin Installation and Post Deletion
Slug
redux-framework
Published
2021-09-01
Title
Gutenberg Template Library & Redux Framework < 4.2.13 - Unauthenticated Sensitive Information Disclosure
Slug
redux-framework
Published
2024-07-22
Title
Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting
Slug
redux-framework
Published
2025-12-12
Title
Redux Framework < 4.5.9 - Contributor+ Stored XSS via data Parameter
Slug
reepay-checkout-gateway
Published
2025-09-03
Title
Frisbii Pay < 1.8.3 - Missing Authorization
Slug
refer-a-friend-widget-for-wp
Published
2021-09-09
Title
WordPress InviteBox Plugin <= 1.4.1 - Reflected Cross-Site Scripting
Slug
referral-link-tracker
Published
2025-09-28
Title
Referral Link Tracker <= 1.1.4 - Missing Authorization
Slug
referrer-detector
Published
2017-04-27
Title
Referrer Detector <= 4.2.1.0 - Unauthenticated PHP Object Injection
Slug
referrer-detector
Published
2024-11-13
Title
Referrer Detector <= 4.2.1.0 - Unauthenticated PHP Object Injection
Slug
reflector-plugins
Published
2026-02-03
Title
Reflector < 1.2.3 - Reflected Cross-Site Scripting
Slug
reflex-gallery
Published
2014-08-01
Title
ReFlex Gallery 1.4.2 - Unspecified XSS