WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
redirection
Published
2018-12-05
Title
Redirection <= 3.6.2 - Cross-Site Request Forgery (CSRF)
Slug
redirection
Published
2012-05-04
Title
Redirection < 2.2.12 - XSS
Slug
redirection-page
Published
2015-02-09
Title
Redirection Page <= 1.2 - CSRF/XSS
Slug
redirection-plus
Published
2025-01-16
Title
REDIRECTION PLUS <= 2.0.0 - Reflected Cross-Site Scripting
Slug
redirects
Published
2023-12-06
Title
Redirects <= 1.2.1 - Missing Authorization
Slug
redirects
Published
2024-02-27
Title
Redirects <= 1.2.1 - Missing Authorization via save
Slug
redux-converter
Published
2025-01-16
Title
Redux Converter <= 1.1.3.1 - Reflected Cross-Site Scripting
Slug
redux-framework
Published
2020-12-15
Title
Redux Framework < 4.1.21 - CSRF Nonce Validation Bypass
Slug
redux-framework
Published
2020-12-15
Title
Redux Framework 4.1.22 - 4.1.23 - CSRF Nonce Validation Bypass
Slug
redux-framework
Published
2021-09-01
Title
Gutenberg Template Library & Redux Framework < 4.2.13 - Contributor+ Arbitrary Plugin Installation and Post Deletion
Slug
redux-framework
Published
2021-09-01
Title
Gutenberg Template Library & Redux Framework < 4.2.13 - Unauthenticated Sensitive Information Disclosure
Slug
redux-framework
Published
2024-07-22
Title
Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting
Slug
redux-framework
Published
2025-12-12
Title
Redux Framework < 4.5.9 - Contributor+ Stored XSS via data Parameter
Slug
redux-framework
Published
2026-06-25
Title
Redux Framework < 4.5.13 - Subscriber+ Privilege Escalation to Administrator
Slug
redux-framework
Published
2026-09-18
Title
Redux Framework < 4.5.14 - Subscriber+ Stored XSS via Media Field Filter Values
Slug
redux-framework
Published
2026-09-18
Title
Redux Framework < 4.5.14 - Subscriber+ Stored XSS via Spinner Field Input
Slug
redux-framework
Published
2026-09-09
Title
Redux Framework < 4.5.14 - Subscriber+ Stored XSS via User Profile Slider Field
Slug
redux-framework
Published
2026-09-30
Title
Redux Framework < 4.5.15 - Subscriber+ Arbitrary Attachment Deletion via 'attachment_id' Parameter
Slug
redux-framework
Published
2026-09-30
Title
Redux Framework < 4.5.15 - Subscriber+ Stored XSS via 'user-mediaurl' Media Field
Slug
redux-framework
Published
2026-10-26
Title
Redux Framework < 4.5.17 - Subscriber+ Missing Authorization
Slug
redux-framework
Published
2026-10-30
Title
Redux Framework < 4.5.16 - Subscriber+ Stored XSS via multi_media Field
Slug
redux-framework
Published
2026-10-30
Title
Redux Framework < 4.5.16 - Subscriber+ Sensitive Information Disclosure via Inline JavaScript on profile.php
Slug
reepay-checkout-gateway
Published
2025-09-03
Title
Frisbii Pay < 1.8.3 - Missing Authorization
Slug
reepay-checkout-gateway
Published
2026-06-26
Title
Frisbii Pay < 1.8.10 - Missing Authorization to Authenticated (Subscriber+) Payment Token Modification
Slug
reepay-checkout-gateway
Published
2026-06-24
Title
Frisbii Pay < 1.8.2.1 - Contributor+ Privilege Escalation