CVEs we hold for Wp-buy
Records whose assigning authority named Wp-buy as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-52702WordPress SEO Redirection plugin <= 9.17 - Cross Site Scripting (XSS) vulnerabilitywp-buy SEO Redirection
CVE-2026-2936Visitor Traffic Real Time Statistics <= 8.4 - Unauthenticated Stored Cross-Site Scriptingwp-buy Visitor Traffic Real Time Statistics
CVE-2026-28175WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerabilitywp-buy Visitors Traffic Real Time Statistics
CVE-2025-49284WordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) Vulnerabilitywp-buy WP Maintenance Mode & Site Under Construction
CVE-2025-32266WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerabilitywp-buy 404 Image Redirection (Replace Broken Images)
CVE-2025-31570WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerabilitywp-buy Related Posts Widget with Thumbnails
CVE-2025-31569WordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerabilitywp-buy wordpress related Posts with thumbnails
CVE-2024-54234WordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerabilitywp-buy Limit Login Attempts
CVE-2024-52421WordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerabilitywp-buy WP Popup Window Maker
CVE-2024-49306WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerabilitywp-buy WP Content Copy Protection & No Right Click
CVE-2023-51484WordPress Login as User or Customer plugin <= 3.8 - Unauthenticated Account Takeover vulnerabilitywp-buy Login as User or Customer (User Switching)
CVE-2023-47557WordPress Visitor Traffic Real Time Statistics plugin <= 7.2 - Broken Access Control vulnerabilitywp-buy Visitors Traffic Real Time Statistics
CVE-2023-36678WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)WP-buy WP Content Copy Protection & No Right Click
CVE-2022-4534Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypasswp-buy Limit Login Attempts (Spam Protection)
CVE-2022-40695WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilitiesWP-buy SEO Redirection Plugin – 301 Redirect Manager…
CVE-2022-38704WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerabilityWP-buy SEO Redirection Plugin – 301 Redirect Manager…
CVE-2022-23983WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to…WP-buy WP Content Copy Protection & No Right Click…
CVE-2021-24195Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy Login as User or Customer (User Switching)
CVE-2021-24194Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy Login Protection – Limit Failed Login Attempts
CVE-2021-24193Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy Visitor Traffic Real Time Statistics
CVE-2021-24192Tree Sitemap < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy Tree Sitemap (Pages, Posts & Categories list)
CVE-2021-24191WP Maintenance Mode & Site Under Construction < 1.8.2 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy WP Maintenance Mode & Site Under Construction
CVE-2021-24190WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy WooCommerce Conditional Marketing Mailer
CVE-2021-24189Captchinoo, Google recaptcha for admin login page < 2.4 - Arbitrary Plugin Installation/Activation via Low Privilege…wp-buy Captchinoo, Google recaptcha for admin login page
CVE-2021-24188WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy WP Content Copy Protection & No Right Click
25 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.