WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-login-woocommerce
Published
2025-02-19
Title
Login/Signup Popup ( Inline Form + Woocommerce ) < 2.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action Shortcode
Slug
easy-login-woocommerce
Published
2025-06-19
Title
Login/Signup Popup < 2.9.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
easy-maintenance-mode-coming-soon
Published
2024-03-19
Title
Easy Maintenance Mode <= 1.4.2 - Information Exposure
Slug
easy-map-creator
Published
2025-12-11
Title
Easy Map Creator <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
easy-marijuana-age-verify
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-marijuana-age-verify
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-marijuana-age-verify
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
easy-media-download
Published
2020-08-17
Title
Easy Media Download < 1.1.5 - Authenticated Stored Cross-Site Scripting
Slug
easy-media-download
Published
2021-09-22
Title
Easy Media Download < 1.1.7 - Contributor+ Stored Cross-Site Scripting
Slug
easy-media-download
Published
2026-01-08
Title
Easy Media Download < 1.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-media-gallery
Published
2014-08-01
Title
Easy Media Gallery 1.2.25 - includes/emg-settings.php spg_add_admin Function Admin User Creation CSRF
Slug
easy-media-gallery
Published
2015-09-05
Title
Easy Media Gallery < 1.3.50 - Cross Site Scripting (XSS)
Slug
easy-media-gallery
Published
2025-03-31
Title
Gallery – Photo Albums Plugin <= 1.3.170 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-media-gallery-pro
Published
2014-09-17
Title
Easy Media Gallery < 1.3.0 - CSRF & Cross-Site Scripting (XSS)
Slug
easy-media-replace
Published
2023-03-28
Title
Easy Media Replace < 0.2.0 - Author+ File Deletion
Slug
easy-menu-manager-wpzest
Published
2024-10-17
Title
Easy Menu Manager | WPZest <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
easy-mls-listings-import
Published
2025-02-17
Title
Easy MLS Listings Import < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-modal
Published
2017-08-07
Title
Easy Modal < 2.1.0 - Authenticated SQL Injection
Slug
easy-modal
Published
2026-01-11
Title
Easy Modal <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-newsletter-signups
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-newsletter-signups
Published
2023-11-13
Title
Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi
Slug
easy-newsletter-signups
Published
2023-09-01
Title
Easy Newsletter Signups <= 1.0.4 - Missing Authorization
Slug
easy-notify-lite
Published
2024-05-14
Title
Popup Builder < 1.1.30 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
easy-notify-lite
Published
2024-05-27
Title
Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS
Slug
easy-notify-lite
Published
2025-02-22
Title
Popup Builder < 1.1.35 - Authenticated (Contributor+) Stored Cross-Site Scripting