Skip to content

Wp-buy vulnerabilities

Products

Newest

wp-buy visitor traffic real time statistics Visitor Traffic Real Time Statistics <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header CVE-2026-97341 7.2 HighOctober 3, 2026
codepress it solutions llc visitor traffic real time statistics pro Visitors Traffic Real Time Statistics Pro <= 11.22 - Unauthenticated Stored Cross-Site Scripting via ahcpro_track_visitor (page_title) CVE-2026-93367 7.2 HighOctober 2, 2026
wp-buy visitors traffic real time statistics WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability CVE-2026-28175 7.1 HighAugust 13, 2026
wp-buy seo redirection WordPress SEO Redirection plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability CVE-2026-52702 7.1 HighJune 15, 2026
wp-buy visitor traffic real time statistics Visitor Traffic Real Time Statistics <= 8.4 - Unauthenticated Stored Cross-Site Scripting CVE-2026-2936 7.2 HighApril 4, 2026
wp-buy wp maintenance mode & site under construction WordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-49284 4.3 MediumJune 6, 2025
unknown wccp-pro, wp-buy wp content copy protection \& no right click +1 more WP Content Copy Protection & No Right Click (premium) <= 15.0 - Admin+ Stored XSS CVE-2024-6693 4.8 MediumMay 15, 2025
unknown wccp-pro, wp-buy wp content copy protection \& no right click +1 more WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect CVE-2024-6690 6.1 MediumMay 15, 2025
wp-buy 404 image redirection (replace broken images) WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-32266 4.3 MediumApril 4, 2025
wp-buy related posts widget with thumbnails WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability CVE-2025-31570 7.1 HighMarch 31, 2025
wp-buy wordpress related posts with thumbnails WordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerability CVE-2025-31569 7.1 HighMarch 31, 2025
unknown owl carousel slider WP Touch Slider <= 2.2 - Reflected XSS CVE-2024-13627 4.7 MediumFebruary 17, 2025
wp-buy visitors traffic real time statistics WordPress Visitor Traffic Real Time Statistics plugin <= 7.2 - Broken Access Control vulnerability CVE-2023-47557 4.3 MediumJanuary 2, 2025
automattic limit login attempts WordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerability CVE-2024-54234 9.3 CriticalDecember 13, 2024
wp-buy wp popup window maker WordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerability CVE-2024-52421 7.1 HighNovember 19, 2024
wp-buy wp content copy protection & no right click, wp content copy protection \& no right click +1 more WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-49306 4.3 MediumOctober 20, 2024
wp-buy limit login attempts (spam protection), limit login attempts +1 more Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass CVE-2022-4534 5.3 MediumOctober 8, 2024
wp-buy login as user or customer (user switching), login as user or customer \(user switching\) +1 more WordPress Login as User or Customer plugin <= 3.8 - Unauthenticated Account Takeover vulnerability CVE-2023-51484 9.8 CriticalApril 25, 2024
unknown login as user or customer, wp-buy login as user or customer \(user switching\) +1 more Login as User or Customer <= 3.8 - Admin Account Takeover CVE-2023-7247 4.9 MediumMarch 11, 2024
wp-buy wp content copy protection & no right click, wp content copy protection \& no right click +1 more WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS) CVE-2023-36678 5.9 MediumAugust 5, 2023
unknown login as user or customer, wp-buy login as user or customer \(user switching\) +1 more Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin CVE-2022-4305 EPSS 38.6% 9.8 CriticalJanuary 23, 2023
clogica seo redirection, wp-buy seo redirection plugin – 301 redirect manager (wordpress plugin) +1 more WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities CVE-2022-40695 5.4 MediumNovember 18, 2022
clogica seo redirection, wp-buy seo redirection plugin – 301 redirect manager (wordpress plugin) +1 more WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-38704 5.4 MediumSeptember 23, 2022
limit login attempts project login attempts, unknown limit login attempts (spam protection) +1 more Limit Login Attempts (Spam Protection) < 5.1 - Unauthenticated SQLi CVE-2022-0787 9.8 CriticalMarch 28, 2022
wp-buy wp content copy protection & no right click (wordpress plugin), wp content copy protection \& no right click +1 more WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability CVE-2022-23983 4.3 MediumFebruary 21, 2022
unknown seo redirection plugin – 301 redirect manager, wp-buy seo redirection-301 redirect manager +1 more SEO Redirection < 8.2 - Subscriber+ SQL Injection CVE-2021-24847 8.8 HighNovember 17, 2021
unknown visitor traffic real time statistics Visitor Traffic Real Time Statistics < 3.9 - Subscriber+ SQL Injection CVE-2021-24829 8.8 HighNovember 8, 2021
wp-buy login as user or customer (user switching), login as user or customer \(user switching\) +1 more Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege User CVE-2021-24195 8.8 HighMay 14, 2021
wp-buy login protection - limit failed login attempts, login protection – limit failed login attempts +1 more Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User CVE-2021-24194 8.8 HighMay 14, 2021
wp-buy visitor traffic real time statistics Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege User CVE-2021-24193 8.8 HighMay 14, 2021
sitemap project sitemap, wp-buy tree sitemap (pages, posts & categories list) +1 more Tree Sitemap < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User CVE-2021-24192 8.8 HighMay 14, 2021
wp-buy wp maintenance mode & site under construction, wpshopmart coming soon page \& maintenance mode +1 more WP Maintenance Mode & Site Under Construction < 1.8.2 - Arbitrary Plugin Installation/Activation via Low Privilege User CVE-2021-24191 8.8 HighMay 14, 2021
wp-buy conditional marketing mailer, woocommerce conditional marketing mailer +1 more WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege User CVE-2021-24190 8.8 HighMay 14, 2021
wp-buy captchinoo, captchinoo, google recaptcha for admin login page +1 more Captchinoo, Google recaptcha for admin login page < 2.4 - Arbitrary Plugin Installation/Activation via Low Privilege User CVE-2021-24189 8.8 HighMay 14, 2021
wp-buy wp content copy protection & no right click, wp content copy protection \& no right click +1 more WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege User CVE-2021-24188 8.8 HighMay 14, 2021
wp-buy visitor traffic real time statistics The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF. CVE-2019-15832 8.8 HighAugust 30, 2019
wp-buy visitor traffic real time statistics The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the... CVE-2019-15831 8.8 HighAugust 30, 2019