WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-rest-api-authentication
Published
2025-04-16
Title
WordPress REST API Authentication < 3.6.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
wp-rest-api-authentication
Published
2026-09-14
Title
JWT Authentication for WP REST APIs < 4.8.0 - Unauthenticated Authentication Method Downgrade via 'mo_rest_api_test_config' Parameter
Slug
wp-rest-api-log
Published
2026-07-27
Title
REST API Log < 1.7.1 - Unauthenticated Sensitive Log Data Disclosure via Download Endpoint
Slug
wp-rest-api-log
Published
2026-08-07
Title
REST API Log < 1.7.2 - Unauthenticated Information Exposure
Slug
wp-rest-api-log
Published
2026-10-01
Title
REST API Log < 1.7.3 - Unauthenticated Insecure Direct Object Reference
Slug
wp-rest-cache
Published
2025-07-28
Title
WP REST Cache < 2025.1.1 - Unauthenticated Local File Inclusion
Slug
wp-rest-cache
Published
2026-03-23
Title
WP REST Cache < 2026.1.1 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-rest-cache
Published
2026-10-30
Title
WP REST Cache < 2026.4.0 - Missing Authorization
Slug
wp-rest-filter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-rest-filter
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-rest-headless
Published
2025-10-14
Title
WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass
Slug
wp-rest-user
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-rest-user
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-restaurant-listings
Published
2025-10-21
Title
WP Restaurant Listings <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-restful
Published
2014-06-12
Title
WP Restful <= 0.1 - Multiple XSS
Slug
wp-retina-2x
Published
2018-01-30
Title
WP Retina 2x < 5.2.3 - Cross-Site Scripting (XSS)
Slug
wp-retina-2x
Published
2023-11-28
Title
WP Retina 2x < 6.4.6 - Sensitive Information Exposure
Slug
wp-retina-2x
Published
2026-10-30
Title
Perfect Images < 7.2.1 - Missing Authorization to Authenticated (Author+) Image Replacement
Slug
wp-review
Published
2025-05-09
Title
WordPress Review Plugin: The Ultimate Solution for Building a Review Website <= 5.3.5 - Authenticated (Contributor+) Local File Inclusion via Post Custom Fields
Slug
wp-review-slider-pro
Published
2026-06-15
Title
WP Review Slider Pro < 12.7.0 - Authenticated (Subscriber+) SQL Injection via 'stypes' Parameter
Slug
wp-review-slider-pro
Published
2026-06-15
Title
WP Review Slider Pro < 12.7.0 - Authenticated (Subscriber+) SQL Injection via 'curselrevs' Parameter
Slug
wp-review-slider-pro
Published
2026-06-15
Title
WP Review Slider Pro < 12.7.0 - Authenticated (Subscriber+) Arbitrary File Deletion via 'myaction' Parameter
Slug
wp-review-slider-pro
Published
2026-07-01
Title
WP Review Slider Pro < 12.7.3 - Unauthenticated SQL Injection via 'notinstring' Parameter
Slug
wp-review-slider-pro
Published
2026-09-24
Title
WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Import
Slug
wp-review-slider-pro
Published
2026-09-24
Title
WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Form Fields