WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
real-estate-manager
Published
2025-09-22
Title
Real Estate Manager <= 7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
real-estate-manager-pro
Published
2025-08-14
Title
Real Estate Manager Pro < 12.7.4 - Reflected Cross-Site Scripting
Slug
real-estate-manager-pro
Published
2026-07-08
Title
Real Estate Manager Pro < 12.8.4 - Unauthenticated Stored Cross-Site Scripting
Slug
real-estate-manager-pro
Published
2026-07-20
Title
Real Estate Manager Pro < 12.8.6 - Reflected Cross-Site Scripting
Slug
real-estate-manager-pro
Published
2026-08-14
Title
Real Estate Manager Pro < 12.8.7 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision
Slug
real-estate-pro
Published
2023-03-06
Title
Multiple e-plugins - Subscriber+ Privilege Escalation
Slug
real-estate-pro
Published
2026-01-07
Title
Real Estate Pro <= 2.1.4 - Reflected Cross-Site Scripting
Slug
real-estate-pro
Published
2026-01-22
Title
Real Estate Pro <= 2.1.5 - Missing Authorization
Slug
real-estate-right-now
Published
2025-07-16
Title
Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin < 4.49 - Missing Authorization
Slug
real-kit
Published
2023-02-21
Title
real.Kit < 5.1.1 - Contributor+ Stored XSS
Slug
real-kit
Published
2024-12-20
Title
real.Kit <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
real-media-library-lite
Published
2021-08-25
Title
WordPress Real Media Library < 4.14.2 - Author Stored Cross-Site Scripting
Slug
real-media-library-lite
Published
2023-01-30
Title
Real Media Library < 4.18.29 - Author+ Stored XSS
Slug
real-media-library-lite
Published
2024-03-25
Title
Real Media Library: Media Library Folder & File Manager < 4.22.8 - Contributor+ Stored XSS
Slug
real-media-library-lite
Published
2024-04-15
Title
Real Media Library < 4.11.12 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
real-post-slider-lite
Published
2026-01-13
Title
Real Post Slider Lite <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings
Slug
real-time-auto-find-and-replace
Published
2021-09-06
Title
Better Find and Replace < 1.2.9 - Reflected Cross-Site Scripting
Slug
real-time-auto-find-and-replace
Published
2022-05-30
Title
Better Find and Replace < 1.3.6 - Admin+ SQLi
Slug
real-time-auto-find-and-replace
Published
2024-07-29
Title
Better Find and Replace < 1.6.2 - Unauthenticated PHP Object Injection
Slug
real-time-auto-find-and-replace
Published
2025-01-27
Title
Better Find and Replace < 1.6.8 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Slug
real-time-auto-find-and-replace
Published
2025-09-22
Title
Better Find and Replace < 1.7.7 - Admin+ Stored XSS
Slug
real-time-auto-find-and-replace
Published
2025-11-05
Title
Better Find and Replace < 1.7.8 - Missing Authorization
Slug
real-time-auto-find-and-replace
Published
2025-11-07
Title
Better Find and Replace < 1.7.8 - Authenticated (Subscriber+) Limited Code Injection
Slug
real-time-auto-find-and-replace
Published
2026-04-15
Title
Better Find and Replace – AI-Powered Suggestions < 1.8.0 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Title
Slug
real-time-find-and-replace
Published
2017-04-14
Title
Real Time Find and Replace <= 3.8 - Cross-Site Scripting (XSS)