Skip to content
OpenAdvisories

Vendor

wp-buy

27 known vulnerabilities.

Products

Visitor Traffic Real Time Statistics 3 WP Content Copy Protection & No Right Click 3 Login as User or Customer (User Switching) 2 SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin) 2 Visitors Traffic Real Time Statistics 2 WP Maintenance Mode & Site Under Construction 2 Visitor Traffic Real Time Statistics pro 1 Tree Sitemap (Pages, Posts & Categories list) 1 WooCommerce Conditional Marketing Mailer 1 wordpress related Posts with thumbnails 1 SEO Redirection 1 Login Protection – Limit Failed Login Attempts 1 Limit Login Attempts (Spam Protection) 1 404 Image Redirection (Replace Broken Images) 1 WP Popup Window Maker 1 Limit Login Attempts 1 WP Content Copy Protection & No Right Click (WordPress plugin) 1 Related Posts Widget with Thumbnails 1 Captchinoo, Google recaptcha for admin login page 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.2
    CVE-2026-97341

    Visitor Traffic Real Time Statistics <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header

    The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all versions up to, and including, 8.16 due to insufficient input sanitization and output escaping. This makes …

    wp-buy Visitor Traffic Real Time Statistics Web / CMS
  • High 7.2
    CVE-2026-93367

    Visitors Traffic Real Time Statistics Pro <= 11.22 - Unauthenticated Stored Cross-Site Scripting via ahcpro_track_visitor (page_title)

    The Visitors Traffic Real Time Statistics Pro plugin for WordPress is vulnerable to unauthenticated stored Cross-Site Scripting in all versions up to, and including, 11.22 via the page_title parameter of the ahcpro_track_visitor AJAX action. The action is reg…

    wp-buy Visitor Traffic Real Time Statistics pro Web / CMS
  • High 7.1
    CVE-2026-28175

    WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.

    wp-buy Visitors Traffic Real Time Statistics
  • High 7.1
    CVE-2026-52702

    WordPress SEO Redirection plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions.

    wp-buy SEO Redirection
  • High 7.2
    CVE-2026-2936

    Visitor Traffic Real Time Statistics <= 8.4 - Unauthenticated Stored Cross-Site Scripting

    The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_title' parameter in all versions up to, and including, 8.4 due to insufficient input sanitization and output escaping. This makes it possi…

    wp-buy Visitor Traffic Real Time Statistics Web / CMS
  • High 7.1
    CVE-2025-31569

    WordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wp-buy wordpress related Posts with thumbnails related-posts-list-grid-and-slider-all-in-one allows Stored XSS.This issue affects wordpress related Posts with thumbnails: from n/a through <= 3.0.0.1.

    wp-buy wordpress related Posts with thumbnails Web / CMS
  • High 7.1
    CVE-2025-31570

    WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wp-buy Related Posts Widget with Thumbnails advanced-css3-related-posts-widget allows Stored XSS.This issue affects Related Posts Widget with Thumbnails: from n/a through <= 1.2.

    wp-buy Related Posts Widget with Thumbnails
  • High 7.1
    CVE-2024-52421

    WordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Popup Window Maker easy-popup-lightbox-maker allows Stored XSS.This issue affects WP Popup Window Maker: from n/a through <= 2.0.

    wp-buy WP Popup Window Maker