WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rencontre
Published
2025-12-15
Title
Rencontre < 3.13.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
renee-work-in-progress
Published
2024-10-21
Title
3D Work In Progress <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
renee-work-in-progress
Published
2024-10-21
Title
3D Work In Progress <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
rent-a-car
Published
2014-08-01
Title
Rent A Car 1.0 - Shell Upload
Slug
rentpress
Published
2021-09-08
Title
RentPress <= 6.6.4 - Reflected Cross-Site Scripting
Slug
rentsyst
Published
2025-04-09
Title
RentSyst < 2.0.93 - Stored XSS via CSRF
Slug
rentsyst
Published
2025-08-07
Title
Rentsyst < 2.0.101 - Reflected Cross-Site Scripting
Slug
reoon-email-verifier
Published
2025-10-09
Title
Reoon Email Verifier < 2.1.1 - Missing Authorization
Slug
repagent
Published
2014-08-01
Title
Repagent - dewplayer-vinyl.swf xml Parameter XML File H&ling XSS
Slug
repagent
Published
2014-08-01
Title
Repagent - dewplayer-vinyl-en.swf xml Parameter XML File H&ling XSS
Slug
repayment-calculator
Published
2025-04-24
Title
Loan Calculator <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
replace
Published
2025-06-27
Title
re.place <= 0.2.1 - Cross-Site Request Forgery
Slug
replace-default-words
Published
2025-03-24
Title
Replace Default Words <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
replace-image
Published
2024-06-18
Title
Replace Image < 1.1.11 - Insecure Direct Object Reference
Slug
replace-word
Published
2023-07-12
Title
Replace Word <= 2.1 - Cross-Site Request Forgery
Slug
replymail
Published
2025-10-14
Title
replyMail <= 1.2.0 - Cross-Site Request Forgery
Slug
report-broken-links
Published
2025-01-16
Title
Links/Problem Reporter <= 2.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
report-broken-links
Published
2025-01-16
Title
Links/Problem Reporter <= 2.6.0 - Reflected Cross-Site Scripting
Slug
reportattacks
Published
2025-03-12
Title
WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins < 2.33 - Authenticated (Admin+) SQL Injection
Slug
republish-old-posts
Published
2023-12-28
Title
Republish Old Posts < 1.27 - Cross-Site Request Forgery via rop_options_page
Slug
request-a-quote
Published
2021-06-16
Title
Request a Quote < 2.3.4 - Authenticated Stored XSS
Slug
request-a-quote
Published
2021-09-21
Title
Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting
Slug
request-a-quote
Published
2022-06-28
Title
Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting
Slug
request-a-quote
Published
2024-07-02
Title
Request a Quote < 2.4.1 - Admin+ Stored XSS
Slug
request-a-quote
Published
2025-08-05
Title
Request a Quote Form Plugin < 2.5.3 - Unauthenticated Limited Remote Code Execution