WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-realestate-manager
Published
2025-03-04
Title
WP Real Estate Manager <= 2.8 - Authentication Bypass
Slug
wp-realty
Published
2014-08-01
Title
WP Realty - MySQL Time Based Injection
Slug
wp-realty
Published
2014-08-01
Title
WP Realty - index_ext.php listing_id Parameter Reflected XSS
Slug
wp-recall
Published
2021-10-05
Title
WP-Recall < 16.24.48 - Reflected Cross-Site Scripting
Slug
wp-recall
Published
2024-04-16
Title
WP-Recall – Registration, Profile, Commerce & More < 16.26.6 - Insecure Direct Object Reference
Slug
wp-recall
Published
2024-04-22
Title
WP-Recall – Registration, Profile, Commerce & More < 16.26.6 - Unauthenticated SQL Injection
Slug
wp-recall
Published
2024-04-22
Title
WP-Recall – Registration, Profile, Commerce & More < 16.26.6 - Authenticated (Contributor+) SQL Injection
Slug
wp-recall
Published
2024-06-05
Title
WP-Recall – Registration, Profile, Commerce & More < 16.26.7 - Unauthenticated Payment Deletion via delete_payment
Slug
wp-recall
Published
2024-06-03
Title
WP-Recall < 16.26.7 - Cross-Site Request Forgery
Slug
wp-recall
Published
2024-09-05
Title
WP-Recall – Registration, Profile, Commerce & More < 16.26.9 - Insecure Direct Object Reference to Unauthenticated Arbitrary Password Update
Slug
wp-recall
Published
2025-03-04
Title
WP-Recall < 16.26.12 - Admin+ SQL Injection
Slug
wp-recall
Published
2025-03-07
Title
WP-Recall – Registration, Profile, Commerce & More < 16.26.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-recall
Published
2025-03-07
Title
WP-Recall – Registration, Profile, Commerce & More < 16.26.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction
Slug
wp-recall
Published
2025-03-07
Title
WP-Recall – Registration, Profile, Commerce & More < 16.26.12 - Unauthenticated SQL Injection
Slug
wp-recall
Published
2025-03-07
Title
WP-Recall – Registration, Profile, Commerce & More < 16.26.12 - Authenticated (Contributor+) Protected Post Disclosure
Slug
wp-recall
Published
2025-04-07
Title
WP-Recall < 16.26.12 - Admin+ Stored XSS
Slug
wp-recall
Published
2025-05-07
Title
WP-Recall <= 16.26.14 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-recall
Published
2025-06-05
Title
WP-Recall <= 16.26.14 - Cross-Site Request Forgery
Slug
wp-recall
Published
2025-06-19
Title
WP-Recall <= 16.26.14 - Missing Authorization
Slug
wp-recall
Published
2025-06-26
Title
WP-Recall <= 16.26.14 - Reflected Cross-Site Scripting
Slug
wp-recaptcha
Published
2014-08-01
Title
Google reCAPTCHA <= 3.1.3 - Reflected XSS
Slug
wp-recaptcha
Published
2011-03-17
Title
WP Recaptcha < 3.0 - Multiple CSRF
Slug
wp-recaptcha-bp
Published
2025-04-24
Title
WP-reCAPTCHA-bp <= 4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-recaptcha-integration
Published
2024-07-10
Title
ReCaptcha Integration for WordPress < 1.2.8 - Admin+ Stored XSS
Slug
wp-recaptcha-integration
Published
2024-11-01
Title
ReCaptcha Integration for WordPress < 1.2.6 - Reflected Cross-Site Scripting