WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
revolut-gateway-for-woocommerce
Published
2024-09-24
Title
Revolut Gateway for WooCommerce < 4.17.4 - Missing Authorization to Unauthenticated Order Status Update
Slug
revolution-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
revolution-for-elementor
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
revolution_video_player
Published
2025-06-03
Title
Revolution Video Player <= 2.9.2 - Reflected Cross-Site Scripting
Slug
revolution_video_player
Published
2025-07-16
Title
Revolution Video Player With Bottom Playlist < 2.9.3 - Reflected Cross-Site Scripting
Slug
revslider
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
revslider
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
revslider
Published
2023-05-22
Title
Revolution Slider <= 6.6.12 - Author+ Remote Code Execution
Slug
revslider
Published
2023-11-14
Title
Slider Revolution < 6.6.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
revslider
Published
2023-11-14
Title
Slider Revolution < 6.6.16 - Authenticated (Author+) Arbitrary File Upload
Slug
revslider
Published
2023-11-30
Title
Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE
Slug
revslider
Published
2024-04-08
Title
Revslider < 6.7.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
revslider
Published
2024-04-30
Title
Slider Revolution < 6.7.8 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter
Slug
revslider
Published
2024-06-03
Title
Slider Revolution < 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes
Slug
revslider
Published
2024-06-03
Title
Slider Revolution < 6.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex
Slug
revslider
Published
2024-05-28
Title
Slider Revolution < 6.7.0 - Missing Authorization
Slug
revslider
Published
2024-05-28
Title
Slider Revolution < 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
revslider
Published
2024-06-28
Title
Slider Revolution < 6.7.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
revslider
Published
2024-09-30
Title
Slider Revolution < 6.7.19 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
revslider
Published
2025-08-28
Title
Slider Revolution < 6.7.37 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images'
Slug
revslider
Published
2025-10-08
Title
Slider Revolution < 6.7.38 - Contributor+ Arbitrary File Read
Slug
revy
Published
2024-12-02
Title
Revy <= 1.18 - Unauthenticated SQL Injection
Slug
revy
Published
2024-12-02
Title
Revy <= 1.18 - Unauthenticated Arbitrary File Upload
Slug
revy
Published
2025-04-21
Title
Revy <= 2.1 - Authenticated (Subscriber+) SQL Injection
Slug
rewardsystem
Published
2025-04-21
Title
SUMO Reward Points <= 30.7.0 - Unauthenticated Local File Inclusion