Ravpage vulnerabilities

2 known vulnerabilities in Ravpage from Matiskiba. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Ravpage: Improper Neutralization of Input During Web Page Generation

  CVE-2025-68835Jan 22, 2026Matiskiba

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in matiskiba Ravpage ravpage allows Reflected XSS.This issue affects Ravpage: from n/a through <= 2.33.

• 9.8 Critical severity

  ravpage: Deserialization of Untrusted Data

  CVE-2024-13789Feb 20, 2025Matiskiba

  The ravpage plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.31 via deserialization of untrusted input from the 'paramsv2' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object.