WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rss-icon-widget
Published
2025-01-16
Title
RSS Icon Widget <= 5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
rss-import
Published
2022-12-23
Title
RSSImport <= 4.6.1 - Contributor+ Stored XSS via Shortcode
Slug
rss-in-page
Published
2025-02-03
Title
RSS in Page <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rss-includes-pages
Published
2017-04-14
Title
RSS Includes Pages <= 3.6 - XSS
Slug
rss-manager
Published
2025-04-17
Title
RSS Manager <= 0.06 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rss-news-scroller
Published
2025-01-16
Title
RSS News Scroller <= 2.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rsv-360-view
Published
2024-11-08
Title
RSV 360 View <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rsv-google-maps
Published
2025-01-16
Title
RSV GMaps <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rsv-pdf-preview
Published
2024-11-08
Title
RSV PDF Preview <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rsvp
Published
2017-06-12
Title
Rsvp < 2.3.8 - XSS
Slug
rsvp
Published
2022-01-14
Title
RSVP and Event Management < 2.7.5 - Reflected Cross-Site Scripting
Slug
rsvp
Published
2022-03-28
Title
RSVP and Event Management < 2.7.8 - Unauthenticated Entries Export
Slug
rsvp
Published
2025-01-06
Title
RSVP and Event Management < 2.7.14 - Missing Authorization
Slug
rsvp
Published
2025-01-24
Title
RSVP and Event Management Plugin < 2.7.15 - Authenticated (Administrator+) SQL Injection
Slug
rsvp
Published
2026-03-12
Title
RSVP and Event Management < 2.7.17 - Unauthenticated Information Exposure
Slug
rsvp
Published
2026-05-25
Title
RSVP and Event Management < 2.7.17 - Missing Authorization
Slug
rsvp-me
Published
2024-10-25
Title
RSVP ME <= 1.9.9 - Unauthenticated SQL Injection
Slug
rsvp-me
Published
2024-10-31
Title
RSVP ME <= 1.9.9 - Authenticated (Contributor+) SQL Injection
Slug
rsvp-me
Published
2025-01-16
Title
RSVP ME <= 1.9.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
rsvpmaker
Published
2014-08-01
Title
RSVPMaker 2.5.4 - index.php RSVP Form Multiple Field XSS
Slug
rsvpmaker
Published
2019-04-28
Title
RSVPMaker < 6.2 - SQL Injection
Slug
rsvpmaker
Published
2018-11-08
Title
RSVPMaker < 5.6.4 - SQL Injection
Slug
rsvpmaker
Published
2020-08-22
Title
RSVPMaker < 7.8.2 - Unauthenticated SQL Injection
Slug
rsvpmaker
Published
2021-06-29
Title
RSVPMaker < 8.7.3 - Authenticated (admin+) SSRF
Slug
rsvpmaker
Published
2022-04-26
Title
RSVPMaker < 9.2.6 - Unauthenticated SQLi