WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
raise-the-money
Published
2025-06-27
Title
Raise The Money <= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
raisely-donation-form
Published
2025-05-20
Title
Raisely Donation Form < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via raisely_donation_form Shortcode
Slug
rajce
Published
2025-08-20
Title
rajce <= 0.4.2 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
random-banner
Published
2014-06-29
Title
Random Banner 1.1.2.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
random-banner
Published
2022-01-14
Title
Random Banner < 4.1.6 - Admin+ Stored Cross-Site Scripting
Slug
random-banner
Published
2024-05-30
Title
Random Banner <= 4.2.11 - Admin+ Stored XSS
Slug
random-banner
Published
2024-11-28
Title
Random Banner <= 4.2.11 - Contributor+ Stored XSS
Slug
random-featured-post-plugin
Published
2024-11-01
Title
Random Featured Post <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
random-image-gallery-with-pretty-photo-zoom
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
random-image-selector
Published
2025-03-02
Title
Random Image Selector <= 2.4 - Reflected Cross-Site Scripting
Slug
random-posts-mp3-player-sharebutton
Published
2025-01-16
Title
Random Posts, Mp3 Player + ShareButton <= 1.4.1 - Reflected Cross-Site Scripting
Slug
random-quotes
Published
2025-03-20
Title
Random Quotes <= 1.3 - Reflected Cross-Site Scripting
Slug
random-sorting-order-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
random-sorting-order-for-woocommerce
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
random-sorting-order-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
randomize
Published
2024-01-03
Title
Randomize <= 1.4.3 - Authenticated (Contributor+) SQL Injection
Slug
randomquotr
Published
2025-11-10
Title
RandomQuotr <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
randomtext
Published
2023-04-03
Title
Random Text <= 0.3.0 - Subscriber+ SQLi
Slug
range-slider-addon-for-gravity-forms
Published
2025-10-27
Title
Range Slider Addon for Gravity Forms < 1.1.7 - Unauthenticated Stored Cross-Site Scripting
Slug
rankbear
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
rankbear
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
rankchecker-io-integration
Published
2025-03-11
Title
Rankchecker.io Integration <= 1.0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rankology-seo-all-in-one-seo-analytics
Published
2025-04-10
Title
Rankology SEO – On-site SEO < 2.2.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
rankology-seo-and-analytics-tool
Published
2026-01-06
Title
Rankology SEO and Analytics Tool <= 2.0- Editor+ Header & Footer Code Creation
Slug
raphicon
Published
2025-04-24
Title
RAphicon <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting