WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
riovizual
Published
2025-10-06
Title
Table Block by RioVizual <= 3.0.0 - Missing Authorization
Slug
ripe-hd-player
Published
2014-08-01
Title
ripe-hd-player 1.0 - ripe-hd-player/config.php id Parameter SQL Injection
Slug
ripe-hd-player
Published
2014-08-01
Title
ripe-hd-player 1.0 - Multiple Script Direct Request Path Disclosure
Slug
ris-version-switcher
Published
2025-09-22
Title
RIS Version Switcher – Downgrade or Upgrade WP Versions Easily <= 1.0 - Cross-Site Request Forgery
Slug
rise-blocks
Published
2023-12-26
Title
Rise Blocks – A Complete Gutenberg Page Builder < 3.2 - Cross-Site Request Forgery
Slug
rise-blocks
Published
2025-02-11
Title
Rise Blocks – A Complete Gutenberg Page Builder < 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via TitleTag Parameter
Slug
rise-blocks
Published
2026-02-24
Title
Rise Blocks – A Complete Gutenberg Page Builder <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Identity Block Attributes
Slug
risk-free-cash-on-delivery-cod-woocommerce
Published
2025-08-20
Title
Risk Free Cash On Delivery (COD) - WooCommerce <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
risk-warning-bar
Published
2024-10-21
Title
Risk Warning Bar <= 1.0 - Reflected Cross-Site Scripting
Slug
rizzi-guestbook
Published
2025-03-20
Title
Rizzi Guestbook <= 4.0.1 - Reflected Cross-Site Scripting
Slug
rj-quickcharts
Published
2025-02-02
Title
RJ Quickcharts <= 0.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
rj-quickcharts
Published
2025-03-31
Title
RJ Quickcharts <= 0.6.1 - Authenticated (Subscriber+) SQL Injection
Slug
rk-responsive-contact-form
Published
2017-08-05
Title
rk-responsive-contact-form 1.0 - Authenticated Blind SQL Injection
Slug
rlm-elementor-widgets-pack
Published
2024-10-31
Title
RLM Elementor Widgets Pack < 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rm-mailchimp-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
rm-mailchimp-manager
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
rng-refresh
Published
2025-01-16
Title
rng-refresh <= 1.0 - Reflected Cross-Site Scripting
Slug
robcore-netatmo
Published
2025-09-19
Title
Robcore Netatmo <= 1.7 - Authenticated (Contributor+) SQL Injection via robcore-netatmo Shortcode
Slug
robin-image-optimizer
Published
2024-08-07
Title
Robin image optimizer < 1.7.0 - Missing Authorization
Slug
robin-image-optimizer
Published
2026-02-04
Title
Robin Image Optimizer < 2.0.3 - Authenticated (Author+) Stored Cross-Site Scripting via Image Alternative Text Field
Slug
robin-image-optimizer
Published
2026-09-28
Title
Robin Image Optimizer < 2.0.8 - Subscriber+ Plugin Settings Disclosure via fy_ajax
Slug
robin-image-optimizer
Published
2026-09-28
Title
Robin Image Optimizer 2.0.0 - 2.0.7 - Unauthenticated Stored XSS via WebP URL Delivery HTML Parser
Slug
robo-gallery
Published
2016-04-12
Title
Robo Gallery <= 2.0.14 - Remote Code Execution
Slug
robo-gallery
Published
2023-02-02
Title
Robo Gallery < 3.2.11 - Plugin Activation/Deactivation via CSRF
Slug
robo-gallery
Published
2023-03-13
Title
Robo Gallery < 3.2.13 - Contributor+ Stored XSS