WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
royal-elementor-addons
Published
2026-05-04
Title
Royal Elementor Addons < 1.7.1057 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter
Slug
royal-elementor-addons
Published
2026-05-04
Title
Royal Elementor Addons < 1.7.1057 - Contributor+ Stored Cross-Site Scripting via 'Follow Button Text' Parameter
Slug
royal-elementor-addons
Published
2026-03-31
Title
Royal Elementor Addons < 1.7.1057 - Unauthenticated Missing Authorization
Slug
royal-elementor-addons
Published
2026-05-07
Title
Royal Elementor Addons < 1.7.1053 - Unauthenticated Missing Authorization
Slug
royal-elementor-addons
Published
2026-05-07
Title
Royal Elementor Addons < 1.7.1053 - Contributor+ Stored Cross-Site Scripting
Slug
royal-elementor-addons
Published
2026-05-13
Title
Royal Addons for Elementor < 1.7.1059 - Contributor+ Stored Cross-Site Scripting via 'title_tag' Parameter
Slug
royal-elementor-addons
Published
2026-06-18
Title
Royal Addons for Elementor 1.7.1058 - 1.7.1059 - Contributor+ Arbitrary File Read via Data Table Widget CSV File Source
Slug
royal-elementor-addons
Published
2026-06-26
Title
Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template Disclosure
Slug
royal-elementor-addons
Published
2026-08-10
Title
Royal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box Widget
Slug
royal-elementor-addons
Published
2026-08-15
Title
Royal Addons for Elementor < 1.7.1065 - Contributor+ SSRF via Form Builder Widget 'webhook_url' Setting
Slug
royal-elementor-addons
Published
2026-08-18
Title
Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder
Slug
royal-elementor-addons
Published
2026-08-24
Title
Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure
Slug
royal-elementor-addons
Published
2026-08-24
Title
Royal Elementor Addons < 1.7.1066 - Unauthenticated Like Count and IP Meta Modification via wpr_likes_init
Slug
royal-elementor-addons
Published
2026-08-24
Title
Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings
Slug
royal-mcp
Published
2026-04-21
Title
Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini < 1.4.3 - Missing Authorization
Slug
royal-mcp
Published
2026-06-18
Title
Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini < 1.4.26 - Missing Authorization
Slug
royal-mcp
Published
2026-06-10
Title
Royal MCP < 1.4.26 - Subscriber+ Insufficient Authorization in MCP Tools
Slug
royal-slider
Published
2015-09-12
Title
Royal Slider <= 3.2.6 - Authenticated Cross-Site Scripting (XSS)
Slug
rpb-chessboard
Published
2026-07-15
Title
RPB Chessboard < 8.1.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content
Slug
rps-include-content
Published
2025-03-28
Title
RPS Include Content < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rps-include-content
Published
2026-02-14
Title
RPS Include Content <= 1.2.2 - Missing Authorization
Slug
rrdevs-for-elementor
Published
2024-12-05
Title
RRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rrdevs-for-elementor
Published
2025-01-10
Title
RRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Post Disclosure
Slug
rrssb
Published
2025-04-24
Title
RRSSB <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rs-members
Published
2024-10-14
Title
RS-Members <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation