Approved changes feed: RSS · Atom

cpe:2.3:a:rdstation:rd_station:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorRdstation (18177ba1-d4cd-574f-8f31-eecfb429df58)
ProductRd Station (f5f5a27e-45da-51ad-97c9-2e7ffcdbef82)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6894 vulnerable 2026-06-08 06:58:20.674298 RD Station <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
MEDIUM (6.4)
The RD Station plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.3.2 due to insufficient input sanitization and output escaping of post metaboxes added by the plugin. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-09-05T09:29:49.865Z
Updated: 2026-04-08T17:14:22.450Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38139 vulnerable 2026-06-08 05:47:15.876636 WordPress RD Station plugin <= 5.2.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
MEDIUM (5.4)
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in RD Station plugin <= 5.2.0 at WordPress.
Published: 2022-09-13T13:59:20.462Z
Updated: 2026-04-28T16:07:47.101Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.