CVE Tools
Track your stack

Wp-buy

8 CVEs tracked since 2021. Since May 2021, none of them reached CISA KEV.

Wp-buy CVEs per month

May 2021 to May 2021. Point at a month, or focus the strip and use the arrow keys.
Wp-buy CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-0580

Products

The products that kept showing up in Wp-buy's monthly top three, with their CVEs summed over those months.

  1. Captchinoo11 month
  2. Captchinoo, Google Recaptcha For Admin Login Page11 month
  3. Conditional Marketing Mailer11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Wp-buy.

  1. CVE-2026-28175WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability7.1
  2. CVE-2026-52702WordPress SEO Redirection plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability7.1
  3. CVE-2026-2936Visitor Traffic Real Time Statistics <= 8.4 - Unauthenticated Stored Cross-Site Scripting7.2
  4. CVE-2025-49284WordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3
  5. CVE-2024-6693WP Content Copy Protection & No Right Click (premium) <= 15.0 - Admin+ Stored XSS4.8
  6. CVE-2024-6690WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect6.1
  7. CVE-2025-32266WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability4.3
  8. CVE-2025-31570WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1
  9. CVE-2025-31569WordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerability7.1
  10. CVE-2024-13627WP Touch Slider <= 2.2 - Reflected XSS4.7
  11. CVE-2023-47557WordPress Visitor Traffic Real Time Statistics plugin <= 7.2 - Broken Access Control vulnerability4.3
  12. CVE-2024-54234WordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerability9.3
  13. CVE-2024-52421WordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerability7.1
  14. CVE-2024-49306WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability5.3
  15. CVE-2022-4534Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass5.3

The record

Peak rank
#72 in May 2021
Busiest month shown
May 2021, 8 CVEs
Months with a KEV entry
0 since May 2021
Monthly snapshots
1 since 2021
Wp-buy's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store