WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rockhoist-ratings
Published
2014-08-01
Title
Rockhoist Ratings 1.2.2 - wp-admin/admin-ajax.php postID Parameter SQL Injection
Slug
rognone
Published
2026-06-01
Title
rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'mode' Parameter
Slug
rognone
Published
2026-06-01
Title
rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'a' Parameter
Slug
roi-calculator
Published
2025-01-24
Title
Roi Calculator < 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
role-and-customer-based-pricing-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
role-and-customer-based-pricing-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
role-and-customer-based-pricing-for-woocommerce
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
role-based-bulk-quantity-pricing
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
role-based-pricing-for-woocommerce
Published
2022-10-17
Title
Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization
Slug
role-based-pricing-for-woocommerce
Published
2022-10-17
Title
Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload
Slug
role-includer
Published
2024-12-11
Title
Role Includer <= 1.6 - Reflected Cross-Site Scripting via user_id Parameter
Slug
role-includer
Published
2025-01-06
Title
Role Includer <= 1.6 - Reflected Cross-Site Scripting via user_id Parameter
Slug
role-scoper
Published
2015-08-26
Title
Role Scoper <= 1.3.64 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
role-scoper
Published
2015-12-02
Title
Role Scoper <= 1.3.66 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
rollbar
Published
2025-04-04
Title
Rollbar < 3.0.0 - Cross-Site Request Forgery
Slug
rollover-tab
Published
2025-01-16
Title
Rollover Tab <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rolo-slider
Published
2024-02-26
Title
Rolo Slider <= 1.0.9 - Missing Authorization to Authenticated(Subscriber+) Settings Change
Slug
romancart-ecommerce
Published
2026-06-08
Title
RomanCart Ecommerce <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
romancart-on-wordpress
Published
2025-01-16
Title
RomanCart On WordPress <= 0.0.2 - Reflected Cross-Site Scripting
Slug
rometheme-for-elementor
Published
2024-04-22
Title
RomethemeKit For Elementor < 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rometheme-for-elementor
Published
2024-04-29
Title
RomethemeKit For Elementor < 1.4.2 - Missing Authorization
Slug
rometheme-for-elementor
Published
2024-09-30
Title
RomethemeKit For Elementor < 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rometheme-for-elementor
Published
2025-01-23
Title
RomethemeKit For Elementor < 1.5.3 - Contributor+ Sensitive Information Exposure via Elementor Templates
Slug
rometheme-for-elementor
Published
2025-01-24
Title
RomethemeKit For Elementor < 1.5.3 - Missing Authorization
Slug
rometheme-for-elementor
Published
2025-01-14
Title
RomethemeKit For Elementor < 1.5.4 - Missing Authorization in save_options and reset_widgets