ravpage

ravpage has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 7.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Deserialization Of Untrusted Data.

Every one of the 3 issues recorded for ravpage has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. ravpage is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSHigh

7.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all ravpage vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-13789

Ravpage <= 2.31 - PHP Object Injection

Read the full analysis

Vulnerability Records

3 records


2026-01-20 00:00	Ravpage <= 2.40 - Reflected Cross-Site Scripting ravpage <= 2.40	`CVE-2025-68835`	6.1 Medium	Skalucy	Yes
2025-02-19 21:08	Ravpage <= 2.31 - PHP Object Injection ravpage <= 2.31	`CVE-2024-13789`	9.8 Critical	Frissi0n	Yes
2022-04-28 11:09	Ravpage <= 2.16 - Reflected Cross-Site Scripting ravpage <= 2.16	`CVE-2022-29415`	6.1 Medium	Tien Nguyen Ahn	Yes

Showing 1–3 of 3 reports

Plugin Profile

Latestv2.41

ravpage

Author

Rav Messer

3.0(2)

60/100

Last Updated

2026-06-14 (3mo ago)

Active Installs

300+

Downloads

10,299

Requires WP

2.7.0+

Requires PHP

7.0+

Tested up to

WP 6.9.7

Created

2012-12-22 (14y ago)

NOTE: This plugin is for Rav Messer users only. The Ravpage plugin allows Rav Messer users to seamlessly publish and display landing pages created in Rav Messer under their own WordPress domain. Instead of sending visitors to a separate domain, your landing pages appear at URLs on your own WordPress site — fully managed from your Rav Messer account. Once the plugin is installed and connected to your Rav Messer account, any landing page you publish from Rav Messer can be assigned to a URL on your WordPress site. The connection between the WordPress plugin and your Rav Messer account is secured with a unique key generated per WordPress installation. Our support team is always happy to assist with any inquiry: support@responder.co.il | 03-717-7777

View on WordPress.org