WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-register-profile-with-shortcode
Published
2025-06-19
Title
WP Register Profile With Shortcode <= 3.6.3 - Contributor+ Stored XSS
Slug
wp-register-profile-with-shortcode
Published
2025-07-10
Title
WP Register Profile With Shortcode < 3.6.3 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
wp-registration
Published
2024-10-17
Title
Simple User Registration < 6.8 - Unauthenticated Account Takeover
Slug
wp-registration
Published
2024-12-02
Title
Simple User Registration < 6.0 - Missing Authorization to User Deletion
Slug
wp-registration
Published
2025-06-25
Title
Simple User Registration < 6.4 - Unauthenticated Privilege Escalation
Slug
wp-registration
Published
2025-09-20
Title
Simple User Registration <= 6.4 - Authenticated (Contributor+) Privilege Escalation
Slug
wp-registration
Published
2025-11-20
Title
Simple User Registration < 6.7 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-registration
Published
2026-01-27
Title
Simple User Registration < 6.8 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field
Slug
wp-related-posts
Published
2011-03-17
Title
WP Related Posts <= 1.0 - Multiple CSRF
Slug
wp-relevant-ads
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-relevant-ads
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-relevant-ads
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-remote-site-search
Published
2023-12-26
Title
WP Remote Site Search < 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-remote-thumbnail
Published
2025-04-08
Title
WP Remote Thumbnail <= 1.3.2 - Contributor+ Arbitrary File Upload
Slug
wp-remote-users-sync
Published
2023-08-15
Title
WP Remote Users Sync < 1.2.12 - Subscriber+ Log Access
Slug
wp-remote-users-sync
Published
2023-08-15
Title
WP Remote Users Sync < 1.2.13 - Subscriber+ SSRF
Slug
wp-replicate-post
Published
2023-05-10
Title
WP Replicate Post < 4.1 - Contributor+ SQL Injection
Slug
wp-reply-notify
Published
2024-01-23
Title
WP-Reply Notify <= 1.1 - Settings Update via CSRF
Slug
wp-report-post
Published
2023-10-12
Title
WP Report Post <= 2.1.2 - Reflected XSS
Slug
wp-repost
Published
2023-02-28
Title
WP Repost <= 0.1 - Admin+ Stored XSS
Slug
wp-reroute-email
Published
2023-07-05
Title
WP Reroute Email < 1.5.0 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-reroute-email
Published
2023-07-17
Title
WP Reroute Email < 1.4.8 - Cross-Site Request Forgery
Slug
wp-reroute-email
Published
2023-11-06
Title
WP Reroute Email < 1.4.8 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Slug
wp-reset
Published
2021-06-16
Title
WP Reset < 1.90 - Authenticated Stored XSS
Slug
wp-reset
Published
2021-11-10
Title
WP Reset Pro < 5.99 - Subscriber+ Database Reset