WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
redux-framework
Published
2024-07-22
Title
Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting
Slug
redux-framework
Published
2025-12-12
Title
Redux Framework < 4.5.9 - Contributor+ Stored XSS via data Parameter
Slug
redux-framework
Published
2026-06-25
Title
Redux Framework < 4.5.13 - Subscriber+ Privilege Escalation to Administrator
Slug
reepay-checkout-gateway
Published
2025-09-03
Title
Frisbii Pay < 1.8.3 - Missing Authorization
Slug
reepay-checkout-gateway
Published
2026-06-26
Title
Frisbii Pay < 1.8.10 - Missing Authorization to Authenticated (Subscriber+) Payment Token Modification
Slug
reepay-checkout-gateway
Published
2026-06-24
Title
Frisbii Pay < 1.8.2.1 - Contributor+ Privilege Escalation
Slug
refer-a-friend-widget-for-wp
Published
2021-09-09
Title
WordPress InviteBox Plugin <= 1.4.1 - Reflected Cross-Site Scripting
Slug
referral-link-tracker
Published
2025-09-28
Title
Referral Link Tracker <= 1.1.4 - Missing Authorization
Slug
referrer-detector
Published
2017-04-27
Title
Referrer Detector <= 4.2.1.0 - Unauthenticated PHP Object Injection
Slug
referrer-detector
Published
2024-11-13
Title
Referrer Detector <= 4.2.1.0 - Unauthenticated PHP Object Injection
Slug
reflector-plugins
Published
2026-02-03
Title
Reflector < 1.2.3 - Reflected Cross-Site Scripting
Slug
reflex-gallery
Published
2014-08-01
Title
ReFlex Gallery 1.4.2 - Unspecified XSS
Slug
reflex-gallery
Published
2014-08-01
Title
ReFlex Gallery 1.3 - Shell Upload
Slug
reflex-gallery
Published
2015-03-16
Title
Reflex Gallery <= 3.1.3 - Arbitrary File Upload
Slug
reflex-gallery
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
reformer-elementor
Published
2025-06-11
Title
Reformer for Elementor <= 1.0.5 - Unauthenticated Arbitrary File Upload
Slug
reformer-elementor
Published
2025-12-11
Title
Reformer for Elementor <= 1.0.6 - Missing Authorization
Slug
reftagger-shortcode
Published
2024-10-31
Title
Reftagger Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
refund-request-for-woocommerce
Published
2025-11-24
Title
Refund Request for WooCommerce <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Refund Status Update
Slug
regallery
Published
2026-01-07
Title
Re Gallery < 1.18.10 - Missing Authorization
Slug
regenerate-post-permalinks
Published
2024-04-19
Title
Regenerate post permalink <= 1.0.3 - Cross-Site Request Forgery
Slug
register-ip-multisite
Published
2019-05-14
Title
Register IPs <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
register-plus
Published
2010-11-25
Title
Register Plus <= 3.5.1 - Multiple XSS
Slug
register-plus
Published
2010-11-25
Title
Register Plus <= 3.5.1 - Full Path Disclosure
Slug
register-plus-redux
Published
2014-08-01
Title
Register Plus Redux <= 3.8.3 - Cross-Site Scripting (XSS)