WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rss-control
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
rss-digest
Published
2025-06-27
Title
RSS Digest <= 1.5 - Cross-Site Request Forgery
Slug
rss-feed-post-generator-echo
Published
2024-09-30
Title
Echo RSS Feed Post Generator < 5.4.7 - Unauthenticated Privilege Escalation
Slug
rss-feed-post-generator-echo
Published
2025-05-16
Title
Echo RSS Feed Post Generator < 5.4.8.2 - Unauthenticated Arbitrary File Upload
Slug
rss-feed-post-generator-echo
Published
2025-06-18
Title
Echo RSS Feed Post Generator < 5.4.9 - Reflected Cross-Site Scripting
Slug
rss-feed-pro
Published
2025-08-14
Title
RSS Feed Pro < 1.1.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
rss-feed-widget
Published
2020-08-10
Title
RSS Feed Widget < 2.8.1 - Authenticated Cross-Site Scripting (XSS)
Slug
rss-feed-widget
Published
2024-04-19
Title
RSS Feed Widget < 2.9.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
rss-feed-widget
Published
2024-10-17
Title
RSS Feed Widget < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode
Slug
rss-feed-widget
Published
2024-10-22
Title
RSS Feed Widget < 3.0.0 - Contributor+ Stored XSS
Slug
rss-feed-widget
Published
2024-10-22
Title
RSS Feed Widget < 3.0.1 - Reflected XSS
Slug
rss-feed-widget
Published
2026-01-07
Title
RSS Feed Widget < 3.0.3 - Missing Authorization
Slug
rss-filter
Published
2025-02-13
Title
RSS Filter <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rss-for-yandex-turbo
Published
2021-04-21
Title
RSS for Yandex Turbo < 1.30 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
rss-for-yandex-turbo
Published
2021-06-15
Title
RSS for Yandex Turbo < 1.31 - Admin+ Stored Cross-Site Scripting
Slug
rss-icon-widget
Published
2025-01-16
Title
RSS Icon Widget <= 5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
rss-import
Published
2022-12-23
Title
RSSImport <= 4.6.1 - Contributor+ Stored XSS via Shortcode
Slug
rss-in-page
Published
2025-02-03
Title
RSS in Page <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rss-includes-pages
Published
2017-04-14
Title
RSS Includes Pages <= 3.6 - XSS
Slug
rss-manager
Published
2025-04-17
Title
RSS Manager <= 0.06 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rss-news-scroller
Published
2025-01-16
Title
RSS News Scroller <= 2.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rsv-360-view
Published
2024-11-08
Title
RSV 360 View <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rsv-google-maps
Published
2025-01-16
Title
RSV GMaps <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rsv-pdf-preview
Published
2024-11-08
Title
RSV PDF Preview <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rsvp
Published
2017-06-12
Title
Rsvp < 2.3.8 - XSS