WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rotating-posts
Published
2022-05-31
Title
Rotating Posts <= 1.11 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
rotatingtweets
Published
2024-06-05
Title
Rotating Tweets (Twitter widget and shortcode) <= 1.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
rough-chart
Published
2022-07-18
Title
Rough Chart <= 1.0.0 - Admin+ Stored Cross-Site Scripting
Slug
rover-idx
Published
2024-10-21
Title
Rover IDX < 3.0.0.2905 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
Slug
rover-idx
Published
2024-10-21
Title
Rover IDX < 3.0.0.2906 - Authenticated (Subscriber+) Authentication Bypass to Administrator
Slug
row-seats
Published
2017-04-27
Title
Row Seats Core < 2.68 - Unauthenticated PHP Object Injection
Slug
royal-backup-reset
Published
2026-04-09
Title
Royal WordPress Backup & Restore Plugin < 1.0.17 - Reflected Cross-Site Scripting via 'wpr_pending_template' Parameter
Slug
royal-core
Published
2025-01-30
Title
Royal Core <= 2.9.2 - Authenticated (Subscriber+) Arbitrary Options Update
Slug
royal-elementor-addons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
royal-elementor-addons
Published
2022-12-15
Title
Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Creation
Slug
royal-elementor-addons
Published
2022-12-15
Title
Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Deletion
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Reflected XSS
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Menu Template Creation via CSRF
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Template Condition Update
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Mega Menu Settings Update
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Template Activation
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Import Deletion
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Plugin Activation
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Plugin Deactivation
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Theme Activation
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Template Kit Import
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Template Import
Slug
royal-elementor-addons
Published
2023-07-17
Title
Royal Elementor Addons < 1.3.71 - Unauthenticated API Key Disclosure
Slug
royal-elementor-addons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
royal-elementor-addons
Published
2023-10-09
Title
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload