WP
Vendor
wp-buy
36
CVEs
0
On KEV
2
New 30D
Products
VT8.8
Visitor Traffic Real Time Statistics
wp-buy
6 CVEs0 on KEV1 new
VT7.2
Visitor Traffic Real Time Statistics pro
wp-buy
1 CVEs0 on KEV1 new
WC8.8
WP Content Copy Protection & No Right Click
wp-buy
6 CVEs0 on KEV0 new
LA9.8
Login as User or Customer (User Switching)
wp-buy
4 CVEs0 on KEV0 new
LL9.3
Limit Login Attempts
wp-buy
2 CVEs0 on KEV0 new
SR8.8
SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin)
WP-buy
2 CVEs0 on KEV0 new
VT7.1
Visitors Traffic Real Time Statistics
wp-buy
2 CVEs0 on KEV0 new
4I4.3
404 Image Redirection (Replace Broken Images)
wp-buy
1 CVEs0 on KEV0 new
CA8.8
Captchinoo
Wp-buy
1 CVEs0 on KEV0 new
CM8.8
Conditional Marketing Mailer
Wp-buy
1 CVEs0 on KEV0 new
LL5.3
Limit Login Attempts (Spam Protection)
wp-buy
1 CVEs0 on KEV0 new
LP8.8
Login Protection - Limit Failed Login Attempts
Wp-buy
1 CVEs0 on KEV0 new
OC4.7
Owl Carousel Slider
Wp-buy
1 CVEs0 on KEV0 new
RP7.1
Related Posts Widget with Thumbnails
wp-buy
1 CVEs0 on KEV0 new
SR7.1
SEO Redirection
wp-buy
1 CVEs0 on KEV0 new
SR8.8
Seo Redirection-301 Redirect Manager
Wp-buy
1 CVEs0 on KEV0 new
WR7.1
wordpress related Posts with thumbnails
wp-buy
1 CVEs0 on KEV0 new
WC8.8
WP Content Copy Protection & No Right Click (WordPress plugin)
WP-buy
1 CVEs0 on KEV0 new
WM4.3
WP Maintenance Mode & Site Under Construction
wp-buy
1 CVEs0 on KEV0 new
WP7.1
WP Popup Window Maker
wp-buy
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-97341 | VT Visitor Traffic Real Time Statistics wp-buy | 7.2 | Oct 3 | Visitor Traffic Real Time Statistics <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header |
| CVE-2026-93367 | VT Visitor Traffic Real Time Statistics pro wp-buy | 7.2 | Oct 2 | Visitors Traffic Real Time Statistics Pro <= 11.22 - Unauthenticated Stored Cross-Site Scripting via ahcpro_track_visitor (page_title) |
| CVE-2026-28175 | VT Visitors Traffic Real Time Statistics wp-buy | 7.1 | Aug 13 | WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-52702 | SR SEO Redirection wp-buy | 7.1 | Jun 15 | WordPress SEO Redirection plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-2936 | VT Visitor Traffic Real Time Statistics wp-buy | 7.2 | Apr 4 | Visitor Traffic Real Time Statistics <= 8.4 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2025-49284 | WM WP Maintenance Mode & Site Under Construction wp-buy | 4.3 | Jun 6 | WordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) Vulnerability |
| CVE-2024-6693 | WC WP Content Copy Protection & NO Right Click Wp-buy | 4.8 | May 15 | WP Content Copy Protection & No Right Click (premium) <= 15.0 - Admin+ Stored XSS |
| CVE-2024-6690 | WC WP Content Copy Protection & NO Right Click Wp-buy | 6.1 | May 15 | WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect |
| CVE-2025-32266 | 4I 404 Image Redirection (Replace Broken Images) wp-buy | 4.3 | Apr 4 | WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-31570 | RP Related Posts Widget with Thumbnails wp-buy | 7.1 | Mar 31 | WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability |
| CVE-2025-31569 | WR wordpress related Posts with thumbnails wp-buy | 7.1 | Mar 31 | WordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerability |
| CVE-2024-13627 | OC Owl Carousel Slider Wp-buy | 4.7 | Feb 17 | WP Touch Slider <= 2.2 - Reflected XSS |
| CVE-2023-47557 | VT Visitors Traffic Real Time Statistics wp-buy | 4.3 | Jan 2 | WordPress Visitor Traffic Real Time Statistics plugin <= 7.2 - Broken Access Control vulnerability |
| CVE-2024-54234 | LL Limit Login Attempts wp-buy | 9.3 | Dec 13 | WordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerability |
| CVE-2024-52421 | WP WP Popup Window Maker wp-buy | 7.1 | Nov 19 | WordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerability |
| CVE-2024-49306 | WC WP Content Copy Protection & No Right Click wp-buy | 8.8 | Oct 20 | WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2022-4534 | LL Limit Login Attempts (Spam Protection) wp-buy | 5.3 | Oct 8 | Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass |
| CVE-2023-51484 | LA Login as User or Customer (User Switching) wp-buy | 9.8 | Apr 25 | WordPress Login as User or Customer plugin <= 3.8 - Unauthenticated Account Takeover vulnerability |
| CVE-2023-7247 | LA Login AS User OR Customer (user Switching) Wp-buy | 4.9 | Mar 11 | Login as User or Customer <= 3.8 - Admin Account Takeover |
| CVE-2023-36678 | WC WP Content Copy Protection & No Right Click WP-buy | 4.8 | Aug 5 | WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-4305 | LA Login AS User OR Customer (user Switching) Wp-buy | 9.8 | Jan 23 | Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin |
| CVE-2022-40695 | SR SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin) WP-buy | 8.8 | Nov 18 | WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities |
| CVE-2022-38704 | SR SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin) WP-buy | 4.3 | Sep 23 | WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability |
| CVE-2022-23983 | WC WP Content Copy Protection & No Right Click (WordPress plugin) WP-buy | 8.8 | Feb 21 | WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability |
| CVE-2021-24847 | SR Seo Redirection-301 Redirect Manager Wp-buy | 8.8 | Nov 17 | The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly… |
| CVE-2021-24829 | VT Visitor Traffic Real Time Statistics Wp-buy | 8.8 | Nov 8 | The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX action (available to any… |
| CVE-2021-24195 | LA Login AS User OR Customer (user Switching) Wp-buy | 8.8 | May 14 | Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login as User or Customer (User Switching) WordPress plugin before 1.8, to install… |
| CVE-2021-24194 | LP Login Protection - Limit Failed Login Attempts Wp-buy | 8.8 | May 14 | Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login Protection - Limit Failed Login Attempts WordPress plugin before 2.9, to… |
| CVE-2021-24193 | VT Visitor Traffic Real Time Statistics Wp-buy | 8.8 | May 14 | Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Visitor Traffic Real Time Statistics WordPress plugin before 2.12, to install any… |
| CVE-2021-24190 | CM Conditional Marketing Mailer Wp-buy | 8.8 | May 14 | Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WooCommerce Conditional Marketing Mailer WordPress plugin before 1.5.2, to install… |
| CVE-2021-24189 | CA Captchinoo Wp-buy | 8.8 | May 14 | Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Captchinoo, Google recaptcha for admin login page WordPress plugin before 2.4, to… |
| CVE-2021-24188 | WC WP Content Copy Protection & NO Right Click Wp-buy | 8.8 | May 14 | Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install… |
| CVE-2019-15832 | VT Visitor Traffic Real Time Statistics Wp-buy | 8.8 | Aug 30 | The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF |
| CVE-2019-15831 | VT Visitor Traffic Real Time Statistics Wp-buy | 8.8 | Aug 30 | The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page |
