WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
remove-schema
Published
2021-06-21
Title
Remove Schema < 1.6 - Cross-Site Request Forgery
Slug
remove-slug-from-custom-post-type
Published
2023-09-29
Title
Remove slug from custom post type <= 1.0.3 - Settings Update via CSRF
Slug
remove-wp-update-nags
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
remove-wp-update-nags
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
removehide-author-date-category-like-entry-meta
Published
2023-09-01
Title
Remove/hide Author, Date, Category Like Entry-Meta <= 2.1 - Settings Update via CSRF
Slug
rename-author-slug
Published
2025-01-16
Title
Rename Author Slug <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rename-media-files
Published
2023-11-07
Title
Rename Media Files <= 1.0.1 - Authenticated (Contributor+) Remote Code Execution
Slug
rename-wp-login
Published
2022-06-16
Title
Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF
Slug
rencontre
Published
2019-07-08
Title
Rencontre – Dating Site <= 3.1.2 - SQLi & XSS
Slug
rencontre
Published
2019-08-04
Title
Rencontre < 3.2 - Authenticated Stored XSS via textmail & textanniv Parameters
Slug
rencontre
Published
2019-08-03
Title
Rencontre < 3.2.2 - Authenticated Stored XSS via facebook parameter & SQL Injection
Slug
rencontre
Published
2019-12-22
Title
Rencontre <= 3.2.2 - Multiple CSRF
Slug
rencontre
Published
2023-12-27
Title
Rencontre – Dating Site < 3.11.2 - Subscriber+ PHP Object Injection
Slug
rencontre
Published
2023-12-27
Title
Rencontre – Dating Site < 3.11 - Unauthenticated Arbitrary File Upload
Slug
rencontre
Published
2023-12-27
Title
Rencontre – Dating Site < 3.11 - Privilege Escalation
Slug
rencontre
Published
2025-11-30
Title
Rencontre < 3.13.8 - Cross-Site Request Forgery
Slug
rencontre
Published
2025-12-15
Title
Rencontre < 3.13.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
renee-work-in-progress
Published
2024-10-21
Title
3D Work In Progress <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
renee-work-in-progress
Published
2024-10-21
Title
3D Work In Progress <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
rent-a-car
Published
2014-08-01
Title
Rent A Car 1.0 - Shell Upload
Slug
rentfetch
Published
2026-02-17
Title
Rent Fetch < 0.32.7 - Unauthenticated Stored Cross-Site Scripting via 'keyword' Parameter
Slug
rentpress
Published
2021-09-08
Title
RentPress <= 6.6.4 - Reflected Cross-Site Scripting
Slug
rentsyst
Published
2025-04-09
Title
RentSyst < 2.0.93 - Stored XSS via CSRF
Slug
rentsyst
Published
2025-08-07
Title
Rentsyst < 2.0.101 - Reflected Cross-Site Scripting
Slug
reoon-email-verifier
Published
2025-10-09
Title
Reoon Email Verifier < 2.1.1 - Missing Authorization