WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
role-scoper
Published
2015-12-02
Title
Role Scoper <= 1.3.66 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
rollbar
Published
2025-04-04
Title
Rollbar < 3.0.0 - Cross-Site Request Forgery
Slug
rollover-tab
Published
2025-01-16
Title
Rollover Tab <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rolo-slider
Published
2024-02-26
Title
Rolo Slider <= 1.0.9 - Missing Authorization to Authenticated(Subscriber+) Settings Change
Slug
romancart-on-wordpress
Published
2025-01-16
Title
RomanCart On WordPress <= 0.0.2 - Reflected Cross-Site Scripting
Slug
rometheme-for-elementor
Published
2024-04-22
Title
RomethemeKit For Elementor < 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rometheme-for-elementor
Published
2024-04-29
Title
RomethemeKit For Elementor < 1.4.2 - Missing Authorization
Slug
rometheme-for-elementor
Published
2024-09-30
Title
RomethemeKit For Elementor < 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rometheme-for-elementor
Published
2025-01-23
Title
RomethemeKit For Elementor < 1.5.3 - Contributor+ Sensitive Information Exposure via Elementor Templates
Slug
rometheme-for-elementor
Published
2025-01-24
Title
RomethemeKit For Elementor < 1.5.3 - Missing Authorization
Slug
rometheme-for-elementor
Published
2025-01-14
Title
RomethemeKit For Elementor < 1.5.4 - Missing Authorization in save_options and reset_widgets
Slug
rometheme-for-elementor
Published
2025-03-27
Title
RomethemeKit For Elementor < 1.5.5 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Slug
rometheme-for-elementor
Published
2025-06-05
Title
RTMKit Addons for Elementor < 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rometheme-for-elementor
Published
2025-10-18
Title
RTMKit < 1.6.6 - Authenticated (Contributor+) Arbitrary File Upload
Slug
rometheme-for-elementor
Published
2025-11-17
Title
RTMKit Addons < 1.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute
Slug
rometheme-for-elementor
Published
2025-02-14
Title
RTMKit < 1.6.8 - Authenticated (Contributor+) Insecure Direct Object Reference
Slug
rometheme-for-elementor
Published
2026-03-10
Title
RTMKit < 2.0.0 - Reflected Cross-Site Scripting via 'themebuilder' Parameter
Slug
romethemeform
Published
2024-04-22
Title
RomethemeForm For Elementor < 1.1.3 - Missing Authorization
Slug
romethemeform
Published
2024-05-22
Title
RomethemeForm For Elementor < 1.1.6 - Missing Authorization via export_entries, rtformnewform, and rtformupdate
Slug
ronneby-core
Published
2025-10-27
Title
Ronneby Theme Core <= 1.5.68 - Authenticated (Contributor+) Local File Inclusion
Slug
ronneby-core
Published
2025-10-27
Title
Ronneby Theme Core <= 1.5.68 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
roomcloud
Published
2015-05-09
Title
Roomcloud v1.1(rev @1115307) - Cross-Site Scripting (XSS)
Slug
root-cookie
Published
2025-01-16
Title
root Cookie <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rootspersona
Published
2025-05-19
Title
Rootspersona <= 3.7.5 - Missing Authorization
Slug
rootspersona
Published
2025-05-19
Title
Rootspersona <= 3.7.5 - Cross-Site Request Forgery