WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
relevanssi-premium
Published
2016-11-17
Title
Relevanssi Premium < 1.14.6.1 - SQL Injection & PHP Object Injection
Slug
relevanssi-premium
Published
2022-02-15
Title
Relevanssi - Subscriber+ Unauthorised AJAX Calls
Slug
relevanssi-premium
Published
2024-01-04
Title
Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure
Slug
relevanssi-premium
Published
2024-01-31
Title
Relevanssi Pro < 2.25 - Unauthenticated Sensitive Information Exposure
Slug
relevanssi-premium
Published
2024-04-04
Title
Relevanssi – A Better Search < 4.22.2 - Missing Authorization to Unauthenticated Count Option Update
Slug
relevanssi-premium
Published
2025-05-12
Title
Relevanssi < 4.24.5 (Free) and < 2.27.5 (Premium) - Unauthenticated SQL Injection
Slug
relevanssi-premium
Published
2025-05-30
Title
Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights
Slug
relevanssi-premium
Published
2025-12-17
Title
Relevanssi (Free < 4.26.0, Premium < 2.29.0) - Contributor+ SQLi
Slug
relevant
Published
2015-10-03
Title
Relevant Related Posts <= 1.0.7 - Cross-Site Scripting (XSS)
Slug
relevant
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
relicwp-helper
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
reloaded-rezdy
Published
2025-01-16
Title
Rezdy Reloaded <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Slug
reloadly-topup-widget
Published
2025-10-15
Title
Reloadly <= 2.0.1 - Cross-Site Request Forgery
Slug
relocate-upload
Published
2014-08-01
Title
Relocate Upload 0.14 - Remote File Inclusion
Slug
relocate-upload
Published
2025-06-27
Title
Relocate Upload <= 0.24.1 - Cross-Site Request Forgery
Slug
relogo
Published
2024-09-30
Title
Relogo <= 0.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
remember-me-controls
Published
2024-09-05
Title
Remember Me Controls < 2.1 - Unauthenticated Full Path Disclosure
Slug
remote-content-shortcode
Published
2023-10-12
Title
Remote Content Shortcode <= 1.5 - Authenticated(Contributor+) Local File Inclusion via shortcode
Slug
remote-content-shortcode
Published
2024-05-29
Title
Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
remote-content-shortcode
Published
2024-07-31
Title
Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
remote-images-grabber
Published
2025-04-30
Title
Remote Images Grabber <= 0.6 - Reflected Cross-Site Scripting
Slug
remote-upload
Published
2016-06-13
Title
Remote Upload <= 1.2.1 - Unrestricted File Upload
Slug
remove-add-to-cart-button-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
remove-add-to-cart-button-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
remove-add-to-cart-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius