WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rover-idx
Published
2024-10-21
Title
Rover IDX < 3.0.0.2905 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
Slug
rover-idx
Published
2024-10-21
Title
Rover IDX < 3.0.0.2906 - Authenticated (Subscriber+) Authentication Bypass to Administrator
Slug
row-seats
Published
2017-04-27
Title
Row Seats Core < 2.68 - Unauthenticated PHP Object Injection
Slug
rox-appointment-booking
Published
2026-09-10
Title
Rox Appointment Booking < 1.2.0 - Unauthenticated Holiday Schedule Modification via REST API
Slug
rox-appointment-booking
Published
2026-09-10
Title
Rox Appointment Booking < 1.2.0 - Unauthenticated Price Manipulation and Payment Method Restriction Bypass
Slug
rox-appointment-booking
Published
2026-09-10
Title
Rox Appointment Booking 1.0.9 - 1.2.2 - Unauthenticated Customer PII Disclosure via IDOR
Slug
rox-appointment-booking
Published
2026-09-14
Title
Rox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST Route
Slug
rox-appointment-booking
Published
2026-09-14
Title
Rox Appointment Booking < 1.2.8 - Unauthenticated Internal Notes Disclosure via Service and Category REST Routes
Slug
rox-appointment-booking
Published
2026-10-30
Title
Rox Appointment Booking < 1.3.2 - Unauthenticated Privilege Escalation via Mass Assignment to Mass Assignment via '/public/booking' Endpoint
Slug
royal-backup-reset
Published
2026-04-09
Title
Royal WordPress Backup & Restore Plugin < 1.0.17 - Reflected Cross-Site Scripting via 'wpr_pending_template' Parameter
Slug
royal-core
Published
2025-01-30
Title
Royal Core <= 2.9.2 - Authenticated (Subscriber+) Arbitrary Options Update
Slug
royal-elementor-addons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
royal-elementor-addons
Published
2022-12-15
Title
Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Creation
Slug
royal-elementor-addons
Published
2022-12-15
Title
Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Deletion
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Reflected XSS
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Menu Template Creation via CSRF
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Template Condition Update
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Mega Menu Settings Update
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Template Activation
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Import Deletion
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Plugin Activation
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Plugin Deactivation
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Theme Activation
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Template Kit Import
Slug
royal-elementor-addons
Published
2023-01-10
Title
Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Template Import