WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
remote-content-shortcode
Published
2023-10-12
Title
Remote Content Shortcode <= 1.5 - Authenticated(Contributor+) Local File Inclusion via shortcode
Slug
remote-content-shortcode
Published
2024-05-29
Title
Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
remote-content-shortcode
Published
2024-07-31
Title
Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
remote-images-grabber
Published
2025-04-30
Title
Remote Images Grabber <= 0.6 - Reflected Cross-Site Scripting
Slug
remote-upload
Published
2016-06-13
Title
Remote Upload <= 1.2.1 - Unrestricted File Upload
Slug
remove-add-to-cart-button-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
remove-add-to-cart-button-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
remove-add-to-cart-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
remove-add-to-cart-woocommerce
Published
2023-10-25
Title
Remove Add to Cart WooCommerce < 1.4.5 - Settings Update via CSRF
Slug
remove-add-to-cart-woocommerce
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
remove-cpt-base
Published
2022-05-06
Title
Remove CPT Base < 5.9 - CPT Deletion via CSRF
Slug
remove-date-and-gravatar-under-comment
Published
2025-03-11
Title
Comment Date and Gravatar remover <= 1.0 - Cross-Site Request Forgery
Slug
remove-duplicate-posts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
remove-footer-credit
Published
2021-07-12
Title
Remove Footer Credit < 1.0.6 - CSRF to Stored Cross-Site Scripting
Slug
remove-footer-credit
Published
2022-01-12
Title
Remove Footer Credit < 1.0.11 - Admin+ Stored Cross-Site Scripting
Slug
remove-footer-credit
Published
2024-04-12
Title
Remove Footer Credit < 1.0.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
remove-meta-boxes-per-user-role
Published
2026-06-01
Title
Remove meta boxes per user role <= 1.01 - Cross-Site Request Forgery to Settings Update
Slug
remove-nofollow-commenter-link
Published
2026-06-01
Title
Remove NoFollow Commenter URL <= 1.0 - Cross-Site Request Forgery to Settings Update
Slug
remove-old-slugspermalinks
Published
2024-03-29
Title
Slugs Manager < 2.7.0 - Cross-Site Request Forgery
Slug
remove-post-type-slug
Published
2026-02-18
Title
Remove Post Type Slug <= 1.0.2 - Cross-Site Request Forgery to Settings Update
Slug
remove-schema
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Slug
remove-schema
Published
2021-06-21
Title
Remove Schema < 1.6 - Cross-Site Request Forgery
Slug
remove-slug-from-custom-post-type
Published
2023-09-29
Title
Remove slug from custom post type <= 1.0.3 - Settings Update via CSRF
Slug
remove-wp-update-nags
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
remove-wp-update-nags
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting