WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rich-table-of-content
Published
2025-04-09
Title
Rich Table of Contents < 1.4.1 - Missing Authorization
Slug
rich-web-share-button
Published
2024-11-08
Title
Share Buttons – Social Media <= 1.0.2 - Authenticated (Contributor+) SQL Injection
Slug
rich-web-share-button
Published
2024-12-14
Title
Share Buttons – Social Media <= 1.0.2 - Unauthenticated SQL Injection
Slug
rich-widget
Published
2014-08-01
Title
Rich Widget - File Upload
Slug
richtexteditor
Published
2025-04-02
Title
Rich Text Editor <= 1.0.1 - Missing Authorization
Slug
richtexteditor
Published
2025-03-31
Title
Rich Text Editor <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rife-elementor-extensions
Published
2021-04-13
Title
Rife Elementor Extensions & Templates < 1.1.6 - Contributor+ Stored XSS
Slug
rife-elementor-extensions
Published
2024-07-01
Title
Rife Elementor Extensions & Templates < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline Widget
Slug
rife-elementor-extensions
Published
2025-02-21
Title
Rife Elementor Extensions & Templates < 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline Shortcode
Slug
rig-elements
Published
2024-11-08
Title
Rig Elements For Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
right-click-disable-or-ban
Published
2025-04-16
Title
Right Click Disable OR Ban < 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rightmessage
Published
2025-01-06
Title
RightMessage WP <= 0.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rimons-twitter-widget
Published
2017-04-16
Title
Rimons Twitter Widget < 1.3 - XSS
Slug
rio-photo-gallery
Published
2025-01-16
Title
Rio Photo Gallery <= 0.1 - Reflected Cross-Site Scripting
Slug
rio-video-gallery
Published
2025-03-31
Title
Rio Video Gallery <= 2.3.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
riode-core
Published
2026-02-25
Title
Riode Core < 1.6.27 - Unauthenticated SQL Injection
Slug
riovizual
Published
2025-04-04
Title
Table Block by RioVizual < 2.3.2 - Cross-Site Request Forgery
Slug
riovizual
Published
2025-10-06
Title
Table Block by RioVizual <= 3.0.0 - Missing Authorization
Slug
ripe-hd-player
Published
2014-08-01
Title
ripe-hd-player 1.0 - ripe-hd-player/config.php id Parameter SQL Injection
Slug
ripe-hd-player
Published
2014-08-01
Title
ripe-hd-player 1.0 - Multiple Script Direct Request Path Disclosure
Slug
ris-version-switcher
Published
2025-09-22
Title
RIS Version Switcher – Downgrade or Upgrade WP Versions Easily <= 1.0 - Cross-Site Request Forgery
Slug
rise-blocks
Published
2023-12-26
Title
Rise Blocks – A Complete Gutenberg Page Builder < 3.2 - Cross-Site Request Forgery
Slug
rise-blocks
Published
2025-02-11
Title
Rise Blocks – A Complete Gutenberg Page Builder < 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via TitleTag Parameter
Slug
rise-blocks
Published
2026-02-24
Title
Rise Blocks – A Complete Gutenberg Page Builder <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Identity Block Attributes
Slug
risk-free-cash-on-delivery-cod-woocommerce
Published
2025-08-20
Title
Risk Free Cash On Delivery (COD) - WooCommerce <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting