WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
royal-elementor-addons
Published
2026-04-03
Title
Royal Elementor Addons < 1.7.1050 - Contributor+ Stored XSS via REST API Meta Bypass
Slug
royal-elementor-addons
Published
2026-04-16
Title
Royal Addons for Elementor < 1.7.1057 - Contributor+ Stored XSS via Instagram Feed Widget
Slug
royal-elementor-addons
Published
2026-04-23
Title
Royal Addons for Elementor < 1.7.1057 - Author+ Stored XSS
Slug
royal-elementor-addons
Published
2026-05-01
Title
Royal Addons for Elementor < 1.7.1058 - Contributor+ Server-Side Request Forgery via CSV URL Parameter
Slug
royal-elementor-addons
Published
2026-05-01
Title
Royal Addons for Elementor < 1.7.1057 - Unauthenticated Form Action Meta Modification
Slug
royal-elementor-addons
Published
2026-05-04
Title
Royal Elementor Addons < 1.7.1057 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter
Slug
royal-elementor-addons
Published
2026-05-04
Title
Royal Elementor Addons < 1.7.1057 - Contributor+ Stored Cross-Site Scripting via 'Follow Button Text' Parameter
Slug
royal-elementor-addons
Published
2026-03-31
Title
Royal Elementor Addons < 1.7.1057 - Unauthenticated Missing Authorization
Slug
royal-elementor-addons
Published
2026-05-07
Title
Royal Elementor Addons < 1.7.1053 - Unauthenticated Missing Authorization
Slug
royal-elementor-addons
Published
2026-05-07
Title
Royal Elementor Addons < 1.7.1053 - Contributor+ Stored Cross-Site Scripting
Slug
royal-elementor-addons
Published
2026-05-13
Title
Royal Addons for Elementor < 1.7.1059 - Contributor+ Stored Cross-Site Scripting via 'title_tag' Parameter
Slug
royal-mcp
Published
2026-04-21
Title
Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini < 1.4.3 - Missing Authorization
Slug
royal-slider
Published
2015-09-12
Title
Royal Slider <= 3.2.6 - Authenticated Cross-Site Scripting (XSS)
Slug
rps-include-content
Published
2025-03-28
Title
RPS Include Content < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rps-include-content
Published
2026-02-14
Title
RPS Include Content <= 1.2.2 - Missing Authorization
Slug
rrdevs-for-elementor
Published
2024-12-05
Title
RRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rrdevs-for-elementor
Published
2025-01-10
Title
RRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Post Disclosure
Slug
rrssb
Published
2025-04-24
Title
RRSSB <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rs-members
Published
2024-10-14
Title
RS-Members <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
Slug
rs-survey
Published
2025-01-16
Title
RS Survey <= 1.0 - Reflected Cross-Site Scripting
Slug
rs-wp-books-showcase
Published
2025-05-07
Title
RS WP Book Showcase <= 6.7.57 - Contributor+ Stored XSS
Slug
rs-wp-books-showcase
Published
2025-05-16
Title
RS WP Book Showcase <= 6.7.57 - Unauthenticated Arbitrary Shortcode Execution
Slug
rselements-lite
Published
2025-04-10
Title
RS Elements Elementor Addon <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rsfirewall
Published
2022-04-13
Title
RSFirewall < 1.1.25 - IP Block Bypass
Slug
rsfirewall
Published
2025-07-11
Title
RSFirewall! < 1.1.43 - Authenticated (Admin+) Arbitrary File Read