WP
Vendor
wp-buy
20 products with CVEs on record
36
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-97341
VT
Visitor Traffic Real Time Statistics
wp-buy
7.2
0%
Oct 3Visitor Traffic Real Time Statistics <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header
CVE-2026-93367
VT
Visitor Traffic Real Time Statistics pro
wp-buy
7.2
0%
Oct 2Visitors Traffic Real Time Statistics Pro <= 11.22 - Unauthenticated Stored Cross-Site Scripting via ahcpro_track_visitor (page_title)
CVE-2026-28175
VT
Visitors Traffic Real Time Statistics
wp-buy
7.1
0%
Aug 13WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-52702
SR
SEO Redirection
wp-buy
7.1
0%
Jun 15WordPress SEO Redirection plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability
CVE-2026-2936
VT
Visitor Traffic Real Time Statistics
wp-buy
7.2
0%
Apr 4Visitor Traffic Real Time Statistics <= 8.4 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-49284
WM
WP Maintenance Mode & Site Under Construction
wp-buy
4.3
0%
Jun 6WordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2024-6693
WC
WP Content Copy Protection & NO Right Click
Wp-buy
4.8
0%
May 15WP Content Copy Protection & No Right Click (premium) <= 15.0 - Admin+ Stored XSS
CVE-2024-6690
WC
WP Content Copy Protection & NO Right Click
Wp-buy
6.1
1%
May 15WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect
CVE-2025-32266
4I
404 Image Redirection (Replace Broken Images)
wp-buy
4.3
0%
Apr 4WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-31570
RP
Related Posts Widget with Thumbnails
wp-buy
7.1
0%
Mar 31WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability
CVE-2025-31569
WR
wordpress related Posts with thumbnails
wp-buy
7.1
0%
Mar 31WordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerability
CVE-2024-13627
OC
Owl Carousel Slider
Wp-buy
4.7
1%
Feb 17WP Touch Slider <= 2.2 - Reflected XSS
CVE-2023-47557
VT
Visitors Traffic Real Time Statistics
wp-buy
4.3
0%
Jan 2WordPress Visitor Traffic Real Time Statistics plugin <= 7.2 - Broken Access Control vulnerability
CVE-2024-54234
LL
Limit Login Attempts
wp-buy
9.3
1%
Dec 13WordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerability
CVE-2024-52421
WP
WP Popup Window Maker
wp-buy
7.1
0%
Nov 19WordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerability
CVE-2024-49306
WC
WP Content Copy Protection & No Right Click
wp-buy
8.8
0%
Oct 20WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2022-4534
LL
Limit Login Attempts (Spam Protection)
wp-buy
5.3
0%
Oct 8Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass
CVE-2023-51484
LA
Login as User or Customer (User Switching)
wp-buy
9.8
1%
Apr 25WordPress Login as User or Customer plugin <= 3.8 - Unauthenticated Account Takeover vulnerability
CVE-2023-7247
LA
Login AS User OR Customer (user Switching)
Wp-buy
4.9
1%
Mar 11Login as User or Customer <= 3.8 - Admin Account Takeover
CVE-2023-36678
WC
WP Content Copy Protection & No Right Click
WP-buy
4.8
0%
Aug 5WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-4305
LA
Login AS User OR Customer (user Switching)
Wp-buy
9.8
39%
Jan 23Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin
CVE-2022-40695
SR
SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin)
WP-buy
8.8
0%
Nov 18WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities
CVE-2022-38704
SR
SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin)
WP-buy
4.3
0%
Sep 23WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-23983
WC
WP Content Copy Protection & No Right Click (WordPress plugin)
WP-buy
8.8
0%
Feb 21WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability
CVE-2021-24847
SR
Seo Redirection-301 Redirect Manager
Wp-buy
8.8
1%
Nov 17The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly…
CVE-2021-24829
VT
Visitor Traffic Real Time Statistics
Wp-buy
8.8
1%
Nov 8The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX action (available to any…
CVE-2021-24195
LA
Login AS User OR Customer (user Switching)
Wp-buy
8.8
1%
May 14Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login as User or Customer (User Switching) WordPress plugin before 1.8, to install…
CVE-2021-24194
LP
Login Protection - Limit Failed Login Attempts
Wp-buy
8.8
1%
May 14Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login Protection - Limit Failed Login Attempts WordPress plugin before 2.9, to…
CVE-2021-24193
VT
Visitor Traffic Real Time Statistics
Wp-buy
8.8
1%
May 14Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Visitor Traffic Real Time Statistics WordPress plugin before 2.12, to install any…
CVE-2021-24190
CM
Conditional Marketing Mailer
Wp-buy
8.8
1%
May 14Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WooCommerce Conditional Marketing Mailer WordPress plugin before 1.5.2, to install…
CVE-2021-24189
CA
Captchinoo
Wp-buy
8.8
1%
May 14Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Captchinoo, Google recaptcha for admin login page WordPress plugin before 2.4, to…
CVE-2021-24188
WC
WP Content Copy Protection & NO Right Click
Wp-buy
8.8
1%
May 14Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install…
CVE-2019-15832
VT
Visitor Traffic Real Time Statistics
Wp-buy
8.8
1%
Aug 30The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF
CVE-2019-15831
VT
Visitor Traffic Real Time Statistics
Wp-buy
8.8
1%
Aug 30The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page