Log in Start free

WP-buy

Products

ProductCVEsExploitedLatest
Visitor Traffic Real Time Statistics3–Oct 3, 2026
WP Content Copy Protection & No Right Click3–Oct 20, 2024
Login as User or Customer (User Switching)2–Apr 25, 2024
SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin)2–Nov 18, 2022
WP Maintenance Mode & Site Under Construction2–Jun 6, 2025
Visitors Traffic Real Time Statistics2–Aug 13, 2026
SEO Redirection1–Jun 15, 2026
Tree Sitemap (Pages, Posts & Categories list)1–May 14, 2021
Visitor Traffic Real Time Statistics pro1–Oct 2, 2026
WooCommerce Conditional Marketing Mailer1–May 14, 2021
wordpress related Posts with thumbnails1–Mar 31, 2025
WP Content Copy Protection & No Right Click (WordPress plugin)1–Feb 21, 2022
404 Image Redirection (Replace Broken Images)1–Apr 4, 2025
WP Popup Window Maker1–Nov 19, 2024
Captchinoo, Google recaptcha for admin login page1–May 14, 2021
Limit Login Attempts1–Dec 13, 2024
Limit Login Attempts (Spam Protection)1–Oct 8, 2024
Login Protection – Limit Failed Login Attempts1–May 14, 2021
Related Posts Widget with Thumbnails1–Mar 31, 2025

Exploited and recent CVEs

  • CVE-2026-97341 High 7.2 Visitor Traffic Real Time Statistics <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header 0.3%
  • CVE-2026-93367 High 7.2 Visitors Traffic Real Time Statistics Pro <= 11.22 - Unauthenticated Stored Cross-Site Scripting via ahcpro_track_visitor (page_title) 0.2%
  • CVE-2026-28175 High 7.1 WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-52702 High 7.1 WordPress SEO Redirection plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-2936 High 7.2 Visitor Traffic Real Time Statistics <= 8.4 - Unauthenticated Stored Cross-Site Scripting 0.3%
  • CVE-2025-49284 Medium 4.3 WordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-32266 Medium 4.3 WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-31570 High 7.1 WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability 0.1%
  • CVE-2025-31569 High 7.1 WordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerability 0.1%
  • CVE-2023-47557 Medium 4.3 WordPress Visitor Traffic Real Time Statistics plugin <= 7.2 - Broken Access Control vulnerability 0.4%
  • CVE-2024-54234 Critical 9.3 WordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerability 0.5%
  • CVE-2024-52421 High 7.1 WordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerability 0.2%
  • CVE-2024-49306 Medium 4.3 WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2022-4534 Medium 5.3 Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass 0.3%
  • CVE-2023-51484 Critical 9.8 WordPress Login as User or Customer plugin <= 3.8 - Unauthenticated Account Takeover vulnerability 0.7%
  • CVE-2023-36678 Medium 5.9 WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-40695 Medium 5.4 WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities 0.3%
  • CVE-2022-38704 Medium 5.4 WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability 0.3%
  • CVE-2022-23983 Medium 4.3 WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability 0.4%
  • CVE-2021-24194 Unrated Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User 1.3%
  • CVE-2021-24193 Unrated Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege User 1.3%
  • CVE-2021-24195 Unrated Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege User 1.3%
  • CVE-2021-24189 Unrated Captchinoo, Google recaptcha for admin login page < 2.4 - Arbitrary Plugin Installation/Activation via Low Privilege User 1.3%
  • CVE-2021-24191 Unrated WP Maintenance Mode & Site Under Construction < 1.8.2 - Arbitrary Plugin Installation/Activation via Low Privilege User 1.3%
  • CVE-2021-24192 Unrated Tree Sitemap < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User 1.3%
  • CVE-2021-24190 Unrated WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege User 1.3%
  • CVE-2021-24188 Unrated WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege User 1.3%