WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
robo-gallery
Published
2024-09-25
Title
Photo Gallery, Images, Slider in Rbs Image Gallery < 3.2.22 - Contributor+ Stored XSS
Slug
robo-gallery
Published
2024-12-11
Title
Photo Gallery, Images, Slider in Rbs Image Gallery < 3.2.24 - Admin+ Stored XSS
Slug
robo-gallery
Published
2025-05-07
Title
Robo Gallery < 5.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
robo-gallery
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Slug
robo-gallery
Published
2026-04-07
Title
Robo Gallery < 5.1.4 - Authenticated (Author+) Stored Cross-Site Scripting via 'Loading Label' Setting
Slug
robo-gallery
Published
2026-02-14
Title
Robo Gallery < 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
robo-maps
Published
2025-03-14
Title
Maps - Google Maps <= 1.0.6 - Contributor+ Stored XSS
Slug
robokassa
Published
2024-09-30
Title
Robokassa payment gateway for Woocommerce < 1.6.2 - Reflected Cross-Site Scripting
Slug
robokassa
Published
2025-07-15
Title
Robokassa payment gateway for Woocommerce <= 1.8.1 - Reflected Cross-Site Scripting
Slug
robotcpa
Published
2015-06-10
Title
RobotCPA Plugin V5 - Unauthenticated Local File Inclusion
Slug
robotstxt-rewrite
Published
2025-12-31
Title
Robots.txt rewrite <= 1.6.1 - Cross-Site Request Forgery
Slug
rock-convert
Published
2022-10-10
Title
Rock Convert < 2.6.0 - Reflected Cross-Site Scripting
Slug
rock-convert
Published
2022-10-10
Title
Rock Convert < 2.11.0 - Admin+ Stored Cross-Site Scripting
Slug
rock-convert
Published
2022-10-13
Title
Rock Convert < 3.0.0 - Admin+ Stored XSS
Slug
rock-convert
Published
2025-09-30
Title
Rock Convert <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rock-form-builder
Published
2015-02-22
Title
Quasar Theme Rock Form Builder plugin - Privilege Escalation
Slug
rocket-addons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
rocket-font
Published
2023-10-21
Title
Rocket Font <= 1.2.3 - Arbitrary Settings Update via CSRF
Slug
rocket-maintenance-mode
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
rocket-maintenance-mode
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
rocket-maintenance-mode
Published
2023-12-06
Title
Rocket Maintenance Mode & Coming Soon Page < 4.4 - Admin+ Stored XSS
Slug
rocket-media-library-mime-type
Published
2025-01-14
Title
Rocket Media Library Mime Type <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rocket-responsive-gallery
Published
2015-08-17
Title
WordPress Gallery Plugin 1.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
rocket-wp-mobile
Published
2025-02-11
Title
Mobile Plugin <= 1.3.3 - Reflected Cross-Site Scripting
Slug
rockhoist-badges
Published
2017-02-20
Title
rockhoist-badges 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS)