WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
remove-yellow-bgbox
Published
2026-05-19
Title
Remove Yellow BGBOX <= 1.0 - Cross-Site Request Forgery
Slug
removehide-author-date-category-like-entry-meta
Published
2023-09-01
Title
Remove/hide Author, Date, Category Like Entry-Meta <= 2.1 - Settings Update via CSRF
Slug
rename-author-slug
Published
2025-01-16
Title
Rename Author Slug <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rename-media-files
Published
2023-11-07
Title
Rename Media Files <= 1.0.1 - Authenticated (Contributor+) Remote Code Execution
Slug
rename-wp-login
Published
2022-06-16
Title
Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF
Slug
rencontre
Published
2019-07-08
Title
Rencontre – Dating Site <= 3.1.2 - SQLi & XSS
Slug
rencontre
Published
2019-08-04
Title
Rencontre < 3.2 - Authenticated Stored XSS via textmail & textanniv Parameters
Slug
rencontre
Published
2019-08-03
Title
Rencontre < 3.2.2 - Authenticated Stored XSS via facebook parameter & SQL Injection
Slug
rencontre
Published
2019-12-22
Title
Rencontre <= 3.2.2 - Multiple CSRF
Slug
rencontre
Published
2023-12-27
Title
Rencontre – Dating Site < 3.11.2 - Subscriber+ PHP Object Injection
Slug
rencontre
Published
2023-12-27
Title
Rencontre – Dating Site < 3.11 - Unauthenticated Arbitrary File Upload
Slug
rencontre
Published
2023-12-27
Title
Rencontre – Dating Site < 3.11 - Privilege Escalation
Slug
rencontre
Published
2025-11-30
Title
Rencontre < 3.13.8 - Cross-Site Request Forgery
Slug
rencontre
Published
2025-12-15
Title
Rencontre < 3.13.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
renee-work-in-progress
Published
2024-10-21
Title
3D Work In Progress <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
renee-work-in-progress
Published
2024-10-21
Title
3D Work In Progress <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
rent-a-car
Published
2014-08-01
Title
Rent A Car 1.0 - Shell Upload
Slug
rentfetch
Published
2026-02-17
Title
Rent Fetch < 0.32.7 - Unauthenticated Stored Cross-Site Scripting via 'keyword' Parameter
Slug
rentmy-online-rental-shop
Published
2026-06-23
Title
RentMy Real-Time Rental Management Plugin <= 4.0.4.1 - Missing Authorization to Unauthenticated Settings Update via rentmy_cdn_request AJAX Action
Slug
rentpress
Published
2021-09-08
Title
RentPress <= 6.6.4 - Reflected Cross-Site Scripting
Slug
rentsyst
Published
2025-04-09
Title
RentSyst < 2.0.93 - Stored XSS via CSRF
Slug
rentsyst
Published
2025-08-07
Title
Rentsyst < 2.0.101 - Reflected Cross-Site Scripting
Slug
rentsyst
Published
2026-09-02
Title
RentSyst – CRM solution for fleet management <= 2.1.3 - Missing Authorization
Slug
reoon-email-verifier
Published
2025-10-09
Title
Reoon Email Verifier < 2.1.1 - Missing Authorization
Slug
repagent
Published
2014-08-01
Title
Repagent - dewplayer-vinyl.swf xml Parameter XML File H&ling XSS