WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rexcrawler
Published
2026-03-20
Title
rexCrawler <= 1.0.15 - Reflected Cross-Site Scripting via 'url' and 'regex' Parameters
Slug
rezgo
Published
2014-05-28
Title
Rezgo < 2.0.0 - Reflected Cross-Site Scripting
Slug
rezgo
Published
2022-07-26
Title
Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting
Slug
rezgo
Published
2025-01-06
Title
Rezgo Online Booking < 4.17.1 - Unauthenticated Local File Inclusion
Slug
rezgo-online-booking
Published
2014-05-28
Title
Rezgo Online Booking < 1.8.2 - Multiple XSS
Slug
rh-frontend
Published
2026-02-26
Title
RH Frontend Publishing Pro < 4.3.4 - Reflected Cross-Site Scripting
Slug
riaxe-product-customizer
Published
2026-04-07
Title
Riaxe Product Customizer <= 2.4 - Unauthenticated Sensitive Information Disclosure via '/orders' REST API Endpoint
Slug
ricerca-smart-search
Published
2026-03-20
Title
Ricerca – advanced search <= 1.1.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Settings
Slug
rich-counter
Published
2014-10-18
Title
Rich Counter < 1.2.0 - Cross-Site Scripting (XSS)
Slug
rich-event-timeline
Published
2022-07-11
Title
Event Timeline <= 1.1.6 - Admin+ Stored Cross-Site Scripting
Slug
rich-reviews
Published
2019-09-24
Title
Rich Reviews < 1.8.0 - Unauthenticated Plugin Options Update
Slug
rich-reviews
Published
2021-11-29
Title
Rich Reviews by Starfish < 1.9.6 - Admin+ SQL Injection
Slug
rich-reviews
Published
2022-08-01
Title
Rich Reviews <= 1.9.19 - Arbitrary Reviews Deletion via CSRF
Slug
rich-snippets-vevents
Published
2023-09-28
Title
Events Rich Snippets for Google <= 1.8 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
rich-table-of-content
Published
2023-01-17
Title
Rich Table of Contents < 1.3.9 - Contributor+ Stored XSS
Slug
rich-table-of-content
Published
2025-04-09
Title
Rich Table of Contents < 1.4.1 - Missing Authorization
Slug
rich-web-share-button
Published
2024-11-08
Title
Share Buttons – Social Media <= 1.0.2 - Authenticated (Contributor+) SQL Injection
Slug
rich-web-share-button
Published
2024-12-14
Title
Share Buttons – Social Media <= 1.0.2 - Unauthenticated SQL Injection
Slug
rich-widget
Published
2014-08-01
Title
Rich Widget - File Upload
Slug
richtexteditor
Published
2025-04-02
Title
Rich Text Editor <= 1.0.1 - Missing Authorization
Slug
richtexteditor
Published
2025-03-31
Title
Rich Text Editor <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rife-elementor-extensions
Published
2021-04-13
Title
Rife Elementor Extensions & Templates < 1.1.6 - Contributor+ Stored XSS
Slug
rife-elementor-extensions
Published
2024-07-01
Title
Rife Elementor Extensions & Templates < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline Widget
Slug
rife-elementor-extensions
Published
2025-02-21
Title
Rife Elementor Extensions & Templates < 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline Shortcode
Slug
rig-elements
Published
2024-11-08
Title
Rig Elements For Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting