WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
remove-add-to-cart-woocommerce
Published
2023-10-25
Title
Remove Add to Cart WooCommerce < 1.4.5 - Settings Update via CSRF
Slug
remove-cpt-base
Published
2022-05-06
Title
Remove CPT Base < 5.9 - CPT Deletion via CSRF
Slug
remove-date-and-gravatar-under-comment
Published
2025-03-11
Title
Comment Date and Gravatar remover <= 1.0 - Cross-Site Request Forgery
Slug
remove-duplicate-posts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
remove-footer-credit
Published
2021-07-12
Title
Remove Footer Credit < 1.0.6 - CSRF to Stored Cross-Site Scripting
Slug
remove-footer-credit
Published
2022-01-12
Title
Remove Footer Credit < 1.0.11 - Admin+ Stored Cross-Site Scripting
Slug
remove-footer-credit
Published
2024-04-12
Title
Remove Footer Credit < 1.0.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
remove-old-slugspermalinks
Published
2024-03-29
Title
Slugs Manager < 2.7.0 - Cross-Site Request Forgery
Slug
remove-schema
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Slug
remove-schema
Published
2021-06-21
Title
Remove Schema < 1.6 - Cross-Site Request Forgery
Slug
remove-slug-from-custom-post-type
Published
2023-09-29
Title
Remove slug from custom post type <= 1.0.3 - Settings Update via CSRF
Slug
remove-wp-update-nags
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
remove-wp-update-nags
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
removehide-author-date-category-like-entry-meta
Published
2023-09-01
Title
Remove/hide Author, Date, Category Like Entry-Meta <= 2.1 - Settings Update via CSRF
Slug
rename-author-slug
Published
2025-01-16
Title
Rename Author Slug <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rename-media-files
Published
2023-11-07
Title
Rename Media Files <= 1.0.1 - Authenticated (Contributor+) Remote Code Execution
Slug
rename-wp-login
Published
2022-06-16
Title
Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF
Slug
rencontre
Published
2019-07-08
Title
Rencontre – Dating Site <= 3.1.2 - SQLi & XSS
Slug
rencontre
Published
2019-08-04
Title
Rencontre < 3.2 - Authenticated Stored XSS via textmail & textanniv Parameters
Slug
rencontre
Published
2019-08-03
Title
Rencontre < 3.2.2 - Authenticated Stored XSS via facebook parameter & SQL Injection
Slug
rencontre
Published
2019-12-22
Title
Rencontre <= 3.2.2 - Multiple CSRF
Slug
rencontre
Published
2023-12-27
Title
Rencontre – Dating Site < 3.11.2 - Subscriber+ PHP Object Injection
Slug
rencontre
Published
2023-12-27
Title
Rencontre – Dating Site < 3.11 - Unauthenticated Arbitrary File Upload
Slug
rencontre
Published
2023-12-27
Title
Rencontre – Dating Site < 3.11 - Privilege Escalation
Slug
rencontre
Published
2025-11-30
Title
Rencontre < 3.13.8 - Cross-Site Request Forgery