WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
revslider
Published
2026-05-19
Title
Slider Revolution < 7.0.10 - Unauthenticated Sensitive Information Exposure via 'sliders/stream'
Slug
revslider
Published
2026-06-01
Title
Slider Revolution 6.0.0-6.7.55 and 7.0.0-7.0.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Deactivation
Slug
revslider
Published
2026-06-01
Title
Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure
Slug
revslider
Published
2026-06-08
Title
Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure
Slug
revslider
Published
2026-06-30
Title
Slider Revolution 7.0.0-7.0.16 - Unauthenticated Stored Cross-Site Scripting
Slug
revy
Published
2024-12-02
Title
Revy <= 1.18 - Unauthenticated SQL Injection
Slug
revy
Published
2024-12-02
Title
Revy <= 1.18 - Unauthenticated Arbitrary File Upload
Slug
revy
Published
2025-04-21
Title
Revy <= 2.1 - Authenticated (Subscriber+) SQL Injection
Slug
rewardswp
Published
2026-03-20
Title
RewardsWP < 1.0.5 - Unauthenticated Privilege Escalation
Slug
rewardsystem
Published
2025-04-21
Title
SUMO Reward Points <= 30.7.0 - Unauthenticated Local File Inclusion
Slug
rewardsystem
Published
2026-07-22
Title
SUMO Reward Points for WooCommerce < 32.8.0 - Unauthenticated Stored Cross-Site Scripting via 'reason' Parameter
Slug
rewp
Published
2024-10-03
Title
Re:WP < 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
rewrite
Published
2025-03-24
Title
Rewrite <= 0.2.1 - Cross-Site Request Forgery
Slug
rexcrawler
Published
2026-03-20
Title
rexCrawler <= 1.0.15 - Reflected Cross-Site Scripting via 'url' and 'regex' Parameters
Slug
rexcrawler
Published
2026-05-26
Title
rexCrawler <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings
Slug
reycob-product-import-export
Published
2026-09-23
Title
Reycob Product Import Export < 2.4.0 - Authenticated (Shop Manager+) PHP Object Injection
Slug
rezgo
Published
2014-05-28
Title
Rezgo < 2.0.0 - Reflected Cross-Site Scripting
Slug
rezgo
Published
2022-07-26
Title
Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting
Slug
rezgo
Published
2025-01-06
Title
Rezgo Online Booking < 4.17.1 - Unauthenticated Local File Inclusion
Slug
rezgo-online-booking
Published
2014-05-28
Title
Rezgo Online Booking < 1.8.2 - Multiple XSS
Slug
rh-frontend
Published
2026-02-26
Title
RH Frontend Publishing Pro < 4.3.4 - Reflected Cross-Site Scripting
Slug
riaxe-product-customizer
Published
2026-04-07
Title
Riaxe Product Customizer <= 2.4 - Unauthenticated Sensitive Information Disclosure via '/orders' REST API Endpoint
Slug
riaxe-product-customizer
Published
2026-04-15
Title
Riaxe Product Customizer <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Options Update to Privilege Escalation via 'install-imprint' AJAX Action
Slug
riaxe-product-customizer
Published
2026-04-15
Title
Riaxe Product Customizer <= 2.1.2 - Unauthenticated Arbitrary User Deletion via 'user_id' Parameter
Slug
riaxe-product-customizer
Published
2026-04-15
Title
Riaxe Product Customizer <= 2.1.2 - Unauthenticated SQL Injection via 'options' Parameter Keys in product_data