Skip to content
OpenAdvisories

Vendor

wp-buy

27 known vulnerabilities.

Products

Visitor Traffic Real Time Statistics 3 WP Content Copy Protection & No Right Click 3 Login as User or Customer (User Switching) 2 SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin) 2 Visitors Traffic Real Time Statistics 2 WP Maintenance Mode & Site Under Construction 2 Visitor Traffic Real Time Statistics pro 1 Tree Sitemap (Pages, Posts & Categories list) 1 WooCommerce Conditional Marketing Mailer 1 wordpress related Posts with thumbnails 1 SEO Redirection 1 Login Protection – Limit Failed Login Attempts 1 Limit Login Attempts (Spam Protection) 1 404 Image Redirection (Replace Broken Images) 1 WP Popup Window Maker 1 Limit Login Attempts 1 WP Content Copy Protection & No Right Click (WordPress plugin) 1 Related Posts Widget with Thumbnails 1 Captchinoo, Google recaptcha for admin login page 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-49284

    WordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Maintenance Mode & Site Under Construction wp-maintenance-mode-site-under-construction allows Cross Site Request Forgery.This issue affects WP Maintenance Mode & Site Under Construction: from n/a th…

    wp-buy WP Maintenance Mode & Site Under Construction
  • Medium 4.3
    CVE-2025-32266

    WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wp-buy 404 Image Redirection (Replace Broken Images) broken-images-redirection allows Cross Site Request Forgery.This issue affects 404 Image Redirection (Replace Broken Images): from n/a through <= 1.4.

    wp-buy 404 Image Redirection (Replace Broken Images)
  • Medium 4.3
    CVE-2023-47557

    WordPress Visitor Traffic Real Time Statistics plugin <= 7.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wp-buy Visitors Traffic Real Time Statistics visitors-traffic-real-time-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visitors Traffic Real Time Statistics: from n/…

    wp-buy Visitors Traffic Real Time Statistics
  • Medium 4.3
    CVE-2024-49306

    WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through <= 3.5.9.

    wp-buy WP Content Copy Protection & No Right Click
  • Medium 5.3
    CVE-2022-4534

    Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass

    The Limit Login Attempts (Spam Protection) plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.3. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and…

    wp-buy Limit Login Attempts (Spam Protection) Web / CMS
  • Medium 5.9
    CVE-2023-36678

    WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP-buy WP Content Copy Protection & No Right Click plugin <= 3.5.5 versions.

    wp-buy WP Content Copy Protection & No Right Click
  • Medium 5.4
    CVE-2022-40695

    WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities

    Multiple Cross-Site Scripting (CSRF) vulnerabilities in SEO Redirection Plugin plugin <= 8.9 on WordPress.

    wp-buy SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-38704

    WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection plugin <= 8.9 at WordPress, leading to deletion of 404 errors and redirection history.

    wp-buy SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin) Web / CMS
  • Medium 4.3
    CVE-2022-23983

    WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin (versions <= 3.4.4).

    wp-buy WP Content Copy Protection & No Right Click (WordPress plugin) Web / CMS