WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
really-easy-slider
Published
2014-08-01
Title
Really Easy Slider 0.1 - Shell Upload
Slug
really-simple-facebook-twitter-share-buttons
Published
2014-08-01
Title
Really simple Facebook Twitter share buttons 2.10.4 - Settings Page Manipulation CSRF
Slug
really-simple-featured-video
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
really-simple-featured-video
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
really-simple-google-tag-manager
Published
2023-03-31
Title
Really Simple Google Tag Manager < 1.0.7 - Arbitrary Plugin Activation via CSRF
Slug
really-simple-guest-post
Published
2015-06-05
Title
Really Simple Guest Post Plugin <= 1.0.6 - File Include
Slug
really-simple-ssl
Published
2024-04-16
Title
Really Simple SSL < 8.0.0 - Admin+ Server-Side Request Forgery
Slug
really-simple-ssl
Published
2024-11-14
Title
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
Slug
really-simple-ssl
Published
2025-01-24
Title
Really Simple SSL < 9.2.0 - Cross-Site Request Forgery
Slug
really-simple-ssl-pro
Published
2024-11-14
Title
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
Slug
really-simple-ssl-pro-multisite
Published
2024-11-14
Title
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
Slug
really-simple-under-construction
Published
2025-05-07
Title
Really Simple Under Construction Page <= 1.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
realpress
Published
2025-10-10
Title
RealPress < 1.1.0 - Unauthenticated Content Creation/Email Sending via REST
Slug
realpress
Published
2026-01-13
Title
RealPress – Real Estate Plugin <= 1.1.0 - Cross-Site Request Forgery
Slug
realteo
Published
2021-03-31
Title
Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
realteo
Published
2021-03-31
Title
Realteo < 1.2.4 - Arbitrary Property Deletion via IDOR
Slug
realteo
Published
2025-03-13
Title
Realteo - Real Estate Plugin by Purethemes < 1.2.9 - Authentication Bypass via 'do_register_user'
Slug
realty
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
realty
Published
2024-11-04
Title
Realty by BestWebSoft < 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
realty-portal
Published
2025-11-20
Title
Realty Portal <= 0.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
realty-portal-agent
Published
2025-07-22
Title
Realty Portal – Agent <= 0.3.9 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via rp_user_profile() Function
Slug
realty-workstation
Published
2022-05-09
Title
Realty Workstation < 1.0.15 - Agent SQLi
Slug
realty-workstation
Published
2024-10-25
Title
Realty Workstation <= 1.0.45 - Authentication Bypass to Account Takeover
Slug
realty-workstation
Published
2025-01-16
Title
Realty Workstation <= 1.0.45 - Missing Authorization
Slug
realtycandy-idx-broker-extended
Published
2024-11-22
Title
RealtyCandy IDX Broker Extended <= 1.5.1 - Cross-Site Request Forgery