Wp-buy vulnerabilities
27 CVEs and advisories name Wp-buy as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-97341Visitor Traffic Real Time Statistics <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header
- CVE-2026-93367Visitors Traffic Real Time Statistics Pro <= 11.22 - Unauthenticated Stored Cross-Site Scripting via ahcpro_track_visitor (page_title)
- CVE-2026-28175WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-52702WordPress SEO Redirection plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-2936Visitor Traffic Real Time Statistics <= 8.4 - Unauthenticated Stored Cross-Site Scripting
- CVE-2025-49284WordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) Vulnerability
- CVE-2025-32266WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-31570WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability
- CVE-2025-31569WordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerability
- CVE-2023-47557WordPress Visitor Traffic Real Time Statistics plugin <= 7.2 - Broken Access Control vulnerability
- CVE-2024-54234WordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerability
- CVE-2024-52421WordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerability
- CVE-2024-49306WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2022-4534Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass
- CVE-2023-51484WordPress Login as User or Customer plugin <= 3.8 - Unauthenticated Account Takeover vulnerability
- CVE-2023-36678WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-40695WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities
- CVE-2022-38704WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-23983WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability
- CVE-2021-24195Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24194Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24193Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24192Tree Sitemap < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24191WP Maintenance Mode & Site Under Construction < 1.8.2 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24190WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24189Captchinoo, Google recaptcha for admin login page < 2.4 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24188WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege User