WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
raychat
Published
2025-06-05
Title
Raychat < 2.2.0 - Missing Authorization
Slug
raychat
Published
2025-10-19
Title
Raychat <= 2.2.1 - Cross-Site Request Forgery
Slug
raygun4wp
Published
2017-02-07
Title
Raygun4WP <= 1.8.0 - Unauthenticated Reflected XSS
Slug
raygun4wp
Published
2017-10-05
Title
Raygun4WP < 1.8.3 - XSS
Slug
rays-grid
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
rays-grid
Published
2025-02-24
Title
RAYS Grid <= 1.3.1 - Cross-Site Request Forgery
Slug
razorpay-payment-button
Published
2024-11-12
Title
Razorpay Payment Button < 2.4.7 - Reflected Cross-Site Scripting
Slug
razorpay-payment-button-elementor
Published
2024-11-12
Title
Razorpay Payment Button for Elementor < 1.2.6 - Reflected Cross-Site Scripting
Slug
razorpay-subscription-button-elementor
Published
2025-03-04
Title
Razorpay Subscription Button Elementor Plugin < 1.0.4 - Reflected Cross-Site Scripting via add_query_arg and remove_query_arg Functions
Slug
rb-internal-links
Published
2022-05-23
Title
RB Internal Links <= 2.0.16 - Stored Cross-Site Scripting via CSRF
Slug
rbxgallery
Published
2014-08-01
Title
RBX Gallery 2.1 - uploader.php File Upload PHP Code Execution
Slug
rccp-free
Published
2024-11-28
Title
RingCentral Communications <= 1.7.0 - Stored XSS via CSRF
Slug
rccp-free
Published
2025-08-27
Title
RingCentral Communications 1.5 - 1.6.8 - Missing Server‑Side Verification to Authentication Bypass via ringcentral_admin_login_2fa_verify Function
Slug
rd-wapp
Published
2025-07-03
Title
RD Contacto <= 1.4 - Cross-Site Request Forgery to Settings Update
Slug
rdfa-breadcrumb
Published
2025-06-19
Title
RDFa Breadcrumb <= 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
rdp-ingroups
Published
2025-03-18
Title
RDP inGroups+ <= 1.0.6 - Reflected Cross-Site Scripting
Slug
rdp-linkedin-login
Published
2025-03-18
Title
RDP Linkedin Login <= 1.7.0 - Reflected Cross-Site Scripting
Slug
rdp-wiki-embed
Published
2025-04-04
Title
RDP Wiki Embed <= 1.2.20 - Cross-Site Request Forgery
Slug
rduplicator
Published
2023-06-22
Title
Quick Post Duplicator <= 2.0 - Contributor+ SQLi
Slug
re-attacher
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
reach-us-contact-form
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
reach-us-contact-form
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
reach-us-contact-form
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
react-webcam
Published
2023-02-21
Title
React Webcam <= 1.2.0 - Contributor+ Stored XSS
Slug
reactflow-session-replay-heatmap
Published
2024-12-20
Title
Reactflow Visitor Recording and Heatmaps <= 1.0.10 - Reflected Cross-Site Scripting